Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
File:                     uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft (raw, json)
Hash identifier:          ldbOl7B0YUyV75uezAhPsbTqngpbKi28zXqMNDRII6E=
Subject key identifier:   F2:63:59:D1:1B:EA:A0:0E:67:4D:45:20:31:79:F8:9E:A8:0D:86:B1
Authority key identifier: B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78
Certificate issuer:       /CN=b81525ae1a5afcef193f5a40177bf27388831078
Certificate serial:       0194BD17B57564E67DF80A9E58CE664979C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft
Manifest number:          0146
Signing time:             Fri 31 Jan 2025 16:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:34 +0000
Files and hashes:         1: uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl (hash: krh0jMjcSTgSfR6+75lCtP9uqT+W3ahlEudB/Tz8O5g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:b5:75:64:e6:7d:f8:0a:9e:58:ce:66:49:79:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b81525ae1a5afcef193f5a40177bf27388831078
        Validity
            Not Before: Jan 31 16:00:34 2025 GMT
            Not After : Feb  1 16:00:34 2025 GMT
        Subject: CN=f26359d11beaa00e674d45203179f89ea80d86b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:32:f5:b0:e9:55:c9:3c:18:ab:a7:8c:a8:93:
                    c9:91:ed:5e:43:90:85:b0:32:c5:ec:5b:7c:7c:7e:
                    19:1d:b3:c4:28:dc:c6:4b:ec:e7:a0:bb:7b:8c:ab:
                    6d:05:51:9e:51:b6:bc:12:b6:61:ea:a8:19:bf:2a:
                    95:73:12:03:51:2d:1b:04:35:4e:b8:23:8c:ea:e9:
                    41:57:56:6a:1c:12:74:3f:6c:e4:dc:d5:d0:96:26:
                    3c:77:f4:20:c4:54:15:21:9a:b1:34:53:8e:f4:22:
                    02:da:dc:e3:0e:5a:2c:69:84:5e:b4:ef:94:2c:3b:
                    69:19:99:71:a7:38:b9:8b:29:20:3a:d5:c5:9a:f0:
                    e5:ee:13:53:0c:e5:a4:3f:a5:2e:df:ce:ab:69:4b:
                    6c:88:4d:8b:1a:e7:ee:cf:b5:5a:98:70:8e:04:b4:
                    88:41:fc:cd:c8:81:8a:63:35:60:6a:bc:0e:83:21:
                    8e:8f:b3:ab:78:2e:4d:07:fd:55:52:cb:bd:2b:b8:
                    6d:f2:5d:d7:71:10:fe:c4:98:f0:4a:24:79:a6:ae:
                    8b:1d:a9:3d:27:7f:eb:f8:59:84:91:5f:93:6d:ac:
                    53:21:b3:f6:76:4f:5f:5a:85:89:60:5e:b0:e0:6b:
                    f3:40:87:16:ed:d2:ac:fc:00:d8:c3:4c:d4:5d:58:
                    c8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:63:59:D1:1B:EA:A0:0E:67:4D:45:20:31:79:F8:9E:A8:0D:86:B1
            X509v3 Authority Key Identifier:
                keyid:B8:15:25:AE:1A:5A:FC:EF:19:3F:5A:40:17:7B:F2:73:88:83:10:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f704a8-8d76-422e-b960-9ef838490042/1/uBUlrhpa_O8ZP1pAF3vyc4iDEHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:9b:95:0e:3f:b7:b7:de:42:33:7e:07:b0:47:78:fa:d3:29:
         a4:92:b1:fd:23:c0:4c:09:31:ac:da:25:ad:47:5e:bd:67:bd:
         be:57:a2:4a:2b:47:d3:87:57:6b:f5:37:d1:39:52:ca:65:64:
         97:a7:f5:0f:db:2f:e1:6a:fe:27:fb:c1:58:eb:b2:b7:76:7a:
         cb:43:4f:d2:23:61:06:e3:e5:74:ed:81:9d:0d:a4:5c:31:84:
         5f:fc:4d:b0:a7:51:07:df:01:7a:6f:59:7c:e0:eb:2e:34:96:
         e6:85:9c:f4:c8:b6:fb:d6:b4:c0:15:29:8c:a0:4e:48:24:a8:
         65:a6:d7:47:2c:6f:89:ca:07:37:e1:c2:3a:c7:58:57:a3:11:
         eb:1f:06:87:19:89:cb:db:c3:28:ae:18:1a:00:8f:ad:60:a6:
         fc:7e:35:44:1e:cc:e7:de:d2:8d:de:c5:c9:e1:80:2f:da:7d:
         45:4b:e6:16:6a:8d:c4:51:ec:d4:b3:37:4c:a0:09:70:90:06:
         06:56:6a:6d:7d:98:65:e9:c7:42:1e:64:77:9d:a2:69:c7:f1:
         48:13:95:98:b7:cd:79:b4:2c:fa:b6:39:ad:35:05:93:b3:62:
         84:ed:09:ee:76:5a:96:9d:7e:93:3c:87:e0:44:b6:d9:70:f7:
         5b:00:c9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 08:02:49 2025 by rpki-client