Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
File:                     UhqgJHWNjRBOEXnFUDmBZjav4pg.mft (raw, json)
Hash identifier:          xIhz4VwxAy0eH0Thp0vLwHOUomNXRjAKZaSBEKGYYi4=
Subject key identifier:   71:30:1B:E9:FC:53:B2:C0:8D:47:B5:E8:1E:B1:61:6C:8A:80:17:51
Authority key identifier: 52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98
Certificate issuer:       /CN=521aa024758d8d104e1179c55039816636afe298
Certificate serial:       0194BD85B192E9F0B138DBE5E8842C74D854
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft
Manifest number:          1429
Signing time:             Fri 31 Jan 2025 18:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:42 +0000
Files and hashes:         1: UhqgJHWNjRBOEXnFUDmBZjav4pg.crl (hash: myA2eZhymm6xQbuuyiD5TvGXwYuS7pY0CNI1oCFkQsM=)
                          2: wzHTUEDPSJ9fu6Go3MzUkAR9gVE.roa (hash: HH9rFvWwfqcHjpbJnsKsdwBfEEqoBLNu0bOt5Pi9+gU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:b1:92:e9:f0:b1:38:db:e5:e8:84:2c:74:d8:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=521aa024758d8d104e1179c55039816636afe298
        Validity
            Not Before: Jan 31 18:00:42 2025 GMT
            Not After : Feb  1 18:00:42 2025 GMT
        Subject: CN=71301be9fc53b2c08d47b5e81eb1616c8a801751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:4c:eb:cc:bf:e8:a5:60:0a:85:92:92:d5:90:
                    f2:df:ea:d8:70:14:9f:60:b9:d4:8d:47:f3:2d:10:
                    0e:41:73:08:71:b2:d4:46:a0:07:b3:36:45:80:56:
                    14:19:d2:94:31:2c:2a:6a:77:c4:89:89:f0:38:7c:
                    45:62:80:b5:61:f4:f1:20:48:c6:7a:c5:60:96:aa:
                    7e:88:ed:15:82:d3:5d:45:f4:2a:17:c0:38:b5:5e:
                    fc:47:ef:2c:67:e8:0f:b5:bb:8e:bf:a7:3d:13:ae:
                    bd:ea:a6:c9:0d:59:36:cc:a3:7b:d4:4d:53:00:83:
                    e4:82:25:7d:68:21:5b:ed:03:24:c4:81:ec:33:2a:
                    ea:36:bd:d0:3e:ff:c6:85:e4:00:c3:8b:ce:85:5e:
                    c4:24:70:35:10:fa:f0:82:42:47:4f:63:60:5a:70:
                    8a:9e:b9:d5:35:25:58:7d:c1:ed:fe:8a:87:5e:85:
                    ce:22:e1:78:ce:b3:c0:77:a7:29:cc:a8:d2:0b:d4:
                    44:1b:49:72:69:60:12:bd:89:b8:fb:1c:2d:62:51:
                    b1:bb:5a:14:23:76:d0:76:9c:ee:dd:81:32:48:13:
                    64:93:09:f9:48:32:cc:93:02:6d:73:48:3d:b1:bf:
                    cb:e2:9c:25:0d:19:5e:de:8f:33:fc:c3:65:5b:1b:
                    e1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:30:1B:E9:FC:53:B2:C0:8D:47:B5:E8:1E:B1:61:6C:8A:80:17:51
            X509v3 Authority Key Identifier:
                keyid:52:1A:A0:24:75:8D:8D:10:4E:11:79:C5:50:39:81:66:36:AF:E2:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhqgJHWNjRBOEXnFUDmBZjav4pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/03f9ee-53e3-4f69-b8b0-c138e5c27c2b/1/UhqgJHWNjRBOEXnFUDmBZjav4pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:78:a5:f8:46:ba:fc:8e:87:00:55:13:cb:33:79:db:9f:0f:
         1c:41:66:97:e3:32:43:bc:07:98:cf:d2:5a:e0:c1:c0:c2:aa:
         1a:8e:42:03:14:26:f7:a9:5f:08:82:9a:ea:de:42:53:de:f4:
         2c:3c:9d:25:bb:bf:53:44:74:bf:5d:16:ae:03:b8:97:26:78:
         37:11:46:e1:93:94:ca:31:01:65:59:e7:78:c6:4e:fa:56:38:
         cd:1b:61:62:42:20:90:fe:19:a4:9e:51:90:08:9c:8c:bc:0f:
         bb:f2:58:a9:0c:f4:cb:b8:25:98:e9:5d:db:af:ab:2f:3c:15:
         69:c4:d5:f7:ac:ce:12:b3:09:04:8e:22:ef:3f:e1:ff:52:7b:
         a6:0f:ee:20:f2:fd:e5:bf:cc:4a:3c:1e:d9:d4:eb:11:40:8b:
         45:e0:a9:cd:10:b2:4f:1e:a3:88:b6:0a:f8:86:3c:6e:80:67:
         51:58:0d:47:b3:fa:1c:ef:a0:b3:7f:20:c6:97:f9:be:69:f7:
         ff:3c:79:b2:85:93:3a:91:52:90:bc:09:b8:96:58:2b:2c:61:
         0d:13:57:c0:f6:e7:e8:14:ad:60:eb:b2:a4:ca:43:9b:5a:11:
         42:c0:8e:fd:69:c2:cc:7d:b1:85:28:ca:3f:44:db:ab:05:dc:
         97:15:6d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:10 2025 by rpki-client