Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
File:                     uUZ8BbpC7h85pkpT4dA0Azbl48M.mft (raw, json)
Hash identifier:          28pn0bqmYPrvMEZGIlVzxVOSQmCXzooEMNCw3qY+ozQ=
Subject key identifier:   70:17:42:9B:39:04:33:BF:CB:89:FA:9E:62:F4:BB:49:23:DF:07:08
Authority key identifier: B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3
Certificate issuer:       /CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
Certificate serial:       0194BD17D74D0C5658495DC7EEB66F329766
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 16:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:43 +0000
Files and hashes:         1: uUZ8BbpC7h85pkpT4dA0Azbl48M.crl (hash: N/48NNznQNM7d7PI/VtUPOIeGnUu49MUnKcltQx4DX8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:d7:4d:0c:56:58:49:5d:c7:ee:b6:6f:32:97:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9467c05ba42ee1f39a64a53e1d0340336e5e3c3
        Validity
            Not Before: Jan 31 16:00:43 2025 GMT
            Not After : Feb  1 16:00:43 2025 GMT
        Subject: CN=7017429b390433bfcb89fa9e62f4bb4923df0708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:47:13:0b:65:db:55:18:b3:99:63:9d:9d:65:
                    03:6a:97:7a:20:17:52:74:b3:0a:e6:af:a9:f3:6a:
                    a2:56:6e:ff:2f:bc:82:c6:6a:e8:1b:50:da:76:01:
                    33:1d:0b:ce:47:ff:e9:85:b3:2b:f2:0b:26:9b:f0:
                    8e:c9:80:9d:3a:f8:f3:c9:5c:05:89:e3:72:dd:e7:
                    c6:de:73:fe:0a:85:a1:0e:5d:02:bd:0f:59:d2:38:
                    74:6a:72:02:53:23:6a:21:34:98:df:1f:c4:cb:4c:
                    ea:d6:31:3e:45:22:d7:40:b9:2d:74:89:4e:89:23:
                    17:45:c9:00:9f:e7:4f:48:32:7b:8d:07:6b:a4:b3:
                    2e:ab:4b:6d:a0:ce:7b:5c:ae:61:48:4d:0b:01:c0:
                    ba:de:57:d7:71:84:a8:7b:e4:6b:78:1b:3a:6b:ff:
                    32:fb:51:82:cb:66:6c:cf:3f:33:f7:78:d6:ec:40:
                    68:6d:7e:aa:0a:7d:d5:6f:9c:1b:bc:e3:ef:ea:67:
                    cc:92:7f:79:ed:0e:2e:09:87:d4:cc:7f:5c:38:aa:
                    50:1c:d4:45:3d:bf:ea:f4:4e:cc:e1:99:53:54:41:
                    ee:0c:ec:43:99:0b:58:e6:0d:dc:b1:32:ac:9d:b5:
                    3d:b7:84:c6:88:81:09:04:95:b8:76:52:a5:4f:ac:
                    6a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:17:42:9B:39:04:33:BF:CB:89:FA:9E:62:F4:BB:49:23:DF:07:08
            X509v3 Authority Key Identifier:
                keyid:B9:46:7C:05:BA:42:EE:1F:39:A6:4A:53:E1:D0:34:03:36:E5:E3:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUZ8BbpC7h85pkpT4dA0Azbl48M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/652c88-abe6-4794-b7ae-39bf751e310d/1/uUZ8BbpC7h85pkpT4dA0Azbl48M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:4f:85:1d:c5:c4:ac:d0:dd:43:29:fb:09:84:3f:f8:1d:2d:
         bc:85:42:98:b6:79:16:7a:2b:67:a4:61:63:80:c0:c2:2c:dc:
         d2:2b:f1:d5:3f:78:c1:e2:1e:8d:e3:e6:88:bb:c6:f3:c7:a3:
         38:77:c9:4d:85:9a:74:da:ae:ba:71:0e:3f:4d:09:50:0f:10:
         4b:35:b5:ff:b4:c4:eb:a6:a7:c8:e3:7e:dc:99:95:c6:4c:29:
         c3:4f:6e:f2:81:34:f8:63:2a:e1:11:2c:d8:f1:96:06:9e:04:
         6e:5b:ab:eb:e8:14:ad:2c:bf:22:7d:3f:09:87:c7:56:be:5b:
         52:cd:4f:d7:94:44:0c:2f:4e:32:cc:3f:ef:b3:83:8b:8f:f2:
         b1:a4:a2:15:78:97:e0:66:1a:6b:db:ea:f1:ef:1a:06:fe:aa:
         b2:4f:e6:4c:c6:e0:42:e5:56:f1:3f:42:3b:c3:2f:3d:0a:d5:
         2c:d7:0f:9d:c2:47:ab:69:48:0d:9f:97:11:cb:8b:ed:bb:5a:
         2f:8e:e3:4a:73:4f:db:4f:de:ba:10:9d:26:90:c8:bb:ec:16:
         d4:8c:ea:86:7a:aa:0e:35:40:d5:10:ea:6f:42:ec:43:f9:67:
         86:4b:07:b5:6a:e2:da:d4:93:cd:04:ec:17:94:99:2f:f7:68:
         e3:dd:c6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:08 2025 by rpki-client