Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
File:                     uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft (raw, json)
Hash identifier:          zpKkiqNrqU+oDC/cAA35F9m+dwkXE/L/4vjhHv5y6Ns=
Subject key identifier:   F1:B2:8A:B9:9A:B6:08:60:96:00:83:B6:90:09:CC:BD:B9:B9:B6:8F
Authority key identifier: BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5
Certificate issuer:       /CN=bafed139df0fad6fde0d82869144104d204b92b5
Certificate serial:       0194BCA9E7A9098F5539C7E6772484E7AC95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft
Manifest number:          033D
Signing time:             Fri 31 Jan 2025 14:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:38 +0000
Files and hashes:         1: Ll30cYUSRjJU1aCHZ1YRr-iUyf8.roa (hash: /bA9u2h5NTMZDfewDc1SRyw5qIxS43DYtdeQY6zyTlU=)
                          2: uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl (hash: tyI6U6/3YgVVfudQ3A6lDKvJk3z8Cz8wiZwQkuk58LY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:e7:a9:09:8f:55:39:c7:e6:77:24:84:e7:ac:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bafed139df0fad6fde0d82869144104d204b92b5
        Validity
            Not Before: Jan 31 14:00:38 2025 GMT
            Not After : Feb  1 14:00:38 2025 GMT
        Subject: CN=f1b28ab99ab60860960083b69009ccbdb9b9b68f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a2:d4:56:52:db:00:2b:53:cb:ff:b3:76:a2:
                    2c:7d:06:dd:e9:8e:55:fc:f0:17:3b:69:0b:69:68:
                    fe:2e:d0:e6:76:6e:b4:69:22:0d:6d:79:e0:87:e3:
                    df:86:8f:78:79:0e:e0:fc:00:c0:55:fa:46:0a:d5:
                    16:56:4f:93:19:cb:03:65:96:ca:c7:63:7e:70:ea:
                    8f:7a:89:e5:33:05:3f:f8:ba:ea:39:17:2b:ab:7e:
                    9b:37:78:39:06:46:30:27:bd:ac:ea:e4:94:56:f7:
                    3f:99:c4:b7:77:1a:7e:11:ad:ad:f5:c9:9b:2f:63:
                    7a:de:89:2e:3e:00:ac:35:ee:ed:24:51:35:14:e9:
                    dd:2d:68:2c:ef:3f:b7:df:9a:70:2f:65:b4:f2:f9:
                    69:78:82:a4:ef:89:4c:bf:0a:f0:49:d0:e5:95:a7:
                    c3:2b:16:b5:90:ef:d8:6c:b9:22:8f:e9:41:f2:39:
                    aa:aa:9b:ae:f0:74:be:1e:bd:1c:b2:88:1c:f8:7c:
                    96:ec:fe:3f:fa:55:22:75:af:da:75:76:43:bf:04:
                    e9:2e:c7:4a:73:99:59:64:03:dd:e0:a6:dc:48:af:
                    68:7c:58:db:e8:bc:2c:22:ff:cc:18:6c:c5:0d:1a:
                    71:a3:ba:9d:7a:76:72:4b:32:b3:26:48:04:59:a9:
                    ef:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B2:8A:B9:9A:B6:08:60:96:00:83:B6:90:09:CC:BD:B9:B9:B6:8F
            X509v3 Authority Key Identifier:
                keyid:BA:FE:D1:39:DF:0F:AD:6F:DE:0D:82:86:91:44:10:4D:20:4B:92:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uv7ROd8PrW_eDYKGkUQQTSBLkrU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/c5811d-1da0-4c32-9c4c-d82a90e34c2d/1/uv7ROd8PrW_eDYKGkUQQTSBLkrU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:6b:5c:1b:80:d1:35:0a:44:d3:a5:a6:38:3c:b7:fa:cf:06:
         22:2b:0f:4f:56:50:e7:fd:c7:62:a7:e3:03:2d:e1:53:8f:86:
         20:eb:5d:f1:53:65:45:50:bf:f4:50:68:a9:df:1c:eb:ad:b2:
         fe:be:62:31:d1:24:75:70:76:2c:6a:35:10:1a:8c:ab:47:3d:
         7d:74:8a:72:7c:ad:33:1c:0c:8c:a2:78:29:81:af:74:71:3d:
         ef:79:1f:6a:0e:8b:08:89:9a:92:89:49:c4:23:fe:4d:fc:aa:
         5b:df:6f:9d:48:73:4b:69:f5:4f:f7:18:9a:0c:46:0a:32:a7:
         87:04:48:de:a5:84:59:61:ef:1c:64:a3:0d:2e:01:21:c6:de:
         f1:7f:a3:d6:7f:4b:7d:41:d2:08:37:8f:c8:9d:1b:f3:0d:db:
         ef:a8:a1:1f:d1:d6:7a:f8:b1:3e:6e:86:ce:24:20:3c:84:f9:
         94:13:d6:b6:c3:af:82:f2:b7:16:90:80:e7:3b:d2:ab:32:67:
         46:cf:0b:9c:13:8f:d6:7d:05:ae:06:10:42:64:84:ad:5c:be:
         61:a6:3b:58:6a:cd:b5:f3:b5:20:f6:47:4c:e5:8f:af:1e:d1:
         f3:9d:a0:7c:23:9b:a4:35:f5:97:c6:fd:22:40:8b:0c:03:d7:
         47:4e:d2:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:26 2025 by rpki-client