Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
File:                     ueqJNvjlMGO0s73w87FbKuZn7xM.mft (raw, json)
Hash identifier:          ijcN7hvpmhU5Qfqj7JnVJptI7HYoLlAgPAH8XtS98A0=
Subject key identifier:   A5:30:FD:52:C5:E5:B1:55:74:3A:00:0E:62:E6:00:CB:96:93:34:39
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Certificate issuer:       /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial:       0194BCA98EF9D2F6A82EFE4CDA6BD6468958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
Manifest number:          0FD8
Signing time:             Fri 31 Jan 2025 14:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:16 +0000
Files and hashes:         1: 1-yC-3OHn3v-G1smlX40MjBLjtIk.roa (hash: a65aVWnVNxmwRG3dcoSw93hwzHCpqxRPcFAazQc55Uw=)
                          2: 1Z8mxBJ-5mF0e5QEPAGyZpCKFxU.roa (hash: 6P4lvJGk11v0OAwMwa6Dw3iNwzGZi6eZ4h8l5OgG/a4=)
                          3: 6YyTiJSPbv1UicGAUpUrIjUSl7s.roa (hash: ywn3zNCMDdDSXu4XFpg6gkYa11yzJumgJ7B2JgWvpHQ=)
                          4: 8RH3qUKE88xn5HbZw6qudmUS57M.roa (hash: 2XUgMZycB/m/voP6J2TdO00CC19oe6XDb8VlW5+rmh4=)
                          5: EL8NwIW4ynHKuDJKgSdS-YOLUw0.roa (hash: myxXdWA4+IfOZijb00R5q5cEaLQsxJLVjp4payzucnw=)
                          6: FnKylUr6R_VPycGaWtm0ZgdzgFs.roa (hash: anhVyOcar+oGd9A/1X9bq9qCt93XDdGRp5RsP7BWo9k=)
                          7: Vtno6vek4R1iYxrs_iTCKNXbvV4.roa (hash: yuyPRcKOieLl5HUe7kBKDY9ApeZ5pBE7VliV6ltXJ/I=)
                          8: c6eHaiXiRvnVAbCikD-QIkjcWys.roa (hash: tOo0YRqhlyq81kcBT/wqHTaOL3woOVGxvlxCwePoeKQ=)
                          9: ueqJNvjlMGO0s73w87FbKuZn7xM.crl (hash: nM5o+4dnEoF3pBF4idDmooqWDhYL8YntG4BK73UqHPQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:8e:f9:d2:f6:a8:2e:fe:4c:da:6b:d6:46:89:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
        Validity
            Not Before: Jan 31 14:00:16 2025 GMT
            Not After : Feb  1 14:00:16 2025 GMT
        Subject: CN=a530fd52c5e5b155743a000e62e600cb96933439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:7e:91:87:94:b2:f0:ef:ed:be:32:6d:f5:41:
                    b6:d1:2a:cd:dd:dc:cf:dc:9c:14:12:8a:b8:7a:34:
                    74:42:15:ce:e2:76:be:a1:2d:a1:bc:69:9b:3d:67:
                    d6:94:cf:94:80:cd:e9:7a:cf:a4:39:54:eb:98:64:
                    71:52:27:89:03:4b:91:b8:67:33:41:24:26:10:43:
                    1b:6f:24:4e:8c:41:78:03:ee:83:33:95:13:e6:c8:
                    2d:29:55:be:f1:2f:09:67:cf:ce:f5:65:ad:d9:33:
                    f1:c8:d3:d9:cb:8d:2c:f2:be:d4:15:c2:df:89:4a:
                    97:c6:bc:64:30:60:4c:71:26:58:17:b8:94:c4:20:
                    2e:2b:da:02:17:27:9a:54:8d:d4:b2:2c:8c:1e:c5:
                    94:47:bb:db:44:01:1b:ed:71:b3:2d:fd:64:a7:8f:
                    fa:a3:fd:14:d2:9a:f9:6a:93:b0:0e:d1:d2:6a:1e:
                    0a:99:d5:25:29:4e:63:48:2c:0a:06:22:0e:f3:e8:
                    d9:a2:8e:d1:ff:b8:80:64:e5:17:24:61:e0:b4:b9:
                    b1:ea:3d:82:b4:9c:04:b9:1e:95:a8:28:67:93:d6:
                    5d:d4:af:ca:dd:b0:28:6a:04:00:d4:96:b1:87:d9:
                    77:85:ce:64:2f:ec:10:93:2c:78:61:4a:c2:61:db:
                    85:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:30:FD:52:C5:E5:B1:55:74:3A:00:0E:62:E6:00:CB:96:93:34:39
            X509v3 Authority Key Identifier:
                keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:40:f0:82:2b:65:0a:7c:90:27:1b:c4:9b:21:d1:94:7f:e2:
         62:4c:ba:d8:41:aa:19:b8:eb:e9:47:23:6b:5d:f5:55:f2:9e:
         b6:a3:92:7f:4e:55:8f:91:55:2f:f5:c0:1a:f6:16:04:46:70:
         06:2d:1a:08:60:5f:24:06:99:8a:8a:8c:25:3c:8d:15:8b:32:
         5a:20:77:31:19:cc:c2:ec:04:fc:7e:a4:e7:4f:f4:72:3f:1e:
         a9:a3:91:7d:6f:5e:b0:58:b8:22:6c:7e:d9:7a:0c:95:a7:ac:
         a3:50:e5:7a:ca:57:4d:89:57:ed:33:3b:4d:f8:e6:c7:09:60:
         0f:8f:08:c5:93:60:1d:c2:11:08:23:08:36:ff:8d:b9:b6:15:
         6e:93:8c:4e:61:80:63:0c:d5:dc:31:64:54:7b:73:c9:3f:16:
         78:6d:de:ac:df:24:26:4e:9c:a7:2d:08:06:b1:1d:9e:e8:dc:
         7e:41:b7:9f:30:93:ab:63:1c:29:bb:7a:3c:7a:20:99:3d:60:
         91:e2:09:1a:cd:c4:ec:e3:02:fb:2b:7a:92:58:ed:de:c2:06:
         60:7b:a2:09:18:f5:97:6a:12:13:9d:2b:18:58:a1:17:99:06:
         f6:b0:52:82:fc:3e:76:27:78:14:0c:3f:20:5d:6d:b8:18:56:
         a5:a5:73:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:09:25 2025 by rpki-client