Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft
File:                     RuUyMK589oaKpoO2JLWagRiI8Lo.mft (raw, json)
Hash identifier:          Nkknqbh6JrnS8LCqOP0np0BpKZmYCusqjLKto9W2DGI=
Subject key identifier:   28:3E:9B:7F:6E:B0:C0:9A:F1:D4:98:92:0A:66:AA:00:11:B4:B3:AF
Authority key identifier: 46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA
Certificate issuer:       /CN=46e53230ae7cf6868aa683b624b59a811888f0ba
Certificate serial:       0194BD4E4641DBD997C59B07D215AB92E9DA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft
Manifest number:          AB
Signing time:             Fri 31 Jan 2025 17:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:11 +0000
Files and hashes:         1: 2yUVHb7bKQBM4p7hGq3iiZimEbc.roa (hash: a9OMpn99so26tcAAD5Nx55fldNYwi9TBv8dYukEeMlU=)
                          2: RuUyMK589oaKpoO2JLWagRiI8Lo.crl (hash: ZAnyk8/lJNbUG55LtopIPkS6RkAahTM5VWJ4res37wE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:46:41:db:d9:97:c5:9b:07:d2:15:ab:92:e9:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46e53230ae7cf6868aa683b624b59a811888f0ba
        Validity
            Not Before: Jan 31 17:00:11 2025 GMT
            Not After : Feb  1 17:00:11 2025 GMT
        Subject: CN=283e9b7f6eb0c09af1d498920a66aa0011b4b3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:64:fa:94:aa:b1:2c:d1:87:0c:d5:63:20:84:
                    3d:4f:b3:7b:13:a9:68:98:90:d1:2d:b3:69:21:93:
                    3c:60:8a:bb:8e:da:49:db:52:a3:2d:8f:bd:09:f9:
                    cc:26:5c:50:41:be:99:b3:f6:f4:af:37:27:c2:ab:
                    b4:5d:db:70:eb:73:0a:4a:37:6c:56:1f:d8:da:43:
                    d2:3b:7e:7a:aa:7d:c6:02:68:b4:f9:a6:e0:77:b7:
                    a3:83:c4:93:db:69:83:1c:03:88:de:0a:92:72:79:
                    d3:65:85:d3:49:36:0d:08:fd:58:a3:a5:8c:55:48:
                    81:f6:29:13:4c:33:28:c0:3e:d3:1f:8b:dc:d3:1c:
                    5d:1d:11:74:6e:87:8a:58:14:2b:6b:3b:4b:4f:55:
                    91:97:c3:19:f8:46:a9:49:ab:a0:3f:6e:3d:88:93:
                    20:f5:68:e3:61:94:c4:ab:f8:56:84:2b:ab:ac:aa:
                    dd:8f:ff:ca:6c:89:ce:90:d0:3f:92:17:3b:82:6c:
                    08:e0:3e:4c:84:92:70:a1:a4:67:6f:ec:8b:49:1a:
                    7c:ff:5f:c7:01:04:f5:d1:57:be:82:4a:4e:a3:eb:
                    fb:4d:6c:a9:f4:8f:a1:ce:f3:cb:2d:12:91:65:74:
                    43:f4:00:95:35:c7:b2:50:e9:68:73:9a:0f:85:62:
                    56:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3E:9B:7F:6E:B0:C0:9A:F1:D4:98:92:0A:66:AA:00:11:B4:B3:AF
            X509v3 Authority Key Identifier:
                keyid:46:E5:32:30:AE:7C:F6:86:8A:A6:83:B6:24:B5:9A:81:18:88:F0:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RuUyMK589oaKpoO2JLWagRiI8Lo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c33a2b-39a0-4920-a441-2322403ec787/1/RuUyMK589oaKpoO2JLWagRiI8Lo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:6f:c3:30:63:e9:23:81:8f:e6:06:38:1c:af:c8:d3:bb:be:
         52:a7:03:37:08:0f:59:90:1e:5d:5c:ee:20:cf:0c:f8:06:b6:
         e8:5e:51:df:8c:9d:c5:09:fb:6c:d4:65:4a:de:e3:ed:96:93:
         e3:e6:6f:18:d6:19:ce:84:ba:d7:f4:69:49:89:e1:97:27:0f:
         48:02:2e:67:57:01:ae:b7:2d:97:c4:e0:14:a4:a1:8f:39:22:
         c0:58:eb:1e:82:d6:ac:31:ef:17:24:7f:0b:d5:41:80:18:43:
         1e:e5:c8:64:97:b3:e4:8e:11:31:de:ba:95:c4:06:b7:af:6b:
         f8:02:ff:4c:0c:97:13:b8:f2:23:a3:ae:15:6a:23:f8:0b:d0:
         9c:2e:37:08:4b:5b:ef:1d:dc:a2:18:49:3b:5c:0a:ed:0a:35:
         ec:30:a9:30:3e:5d:53:a7:c1:36:15:fe:68:c7:df:23:07:46:
         67:6b:a2:4d:89:63:34:94:ff:4a:d0:a5:1f:10:7c:1b:1a:d5:
         8a:7e:61:a9:b8:16:c3:98:0c:c5:88:75:9c:cb:fc:85:be:d4:
         77:6b:84:ed:04:28:c4:cf:45:6d:96:16:15:b4:5c:87:f6:fa:
         c0:28:9c:4d:70:1f:73:73:8e:6d:db:37:b6:39:ef:7a:55:30:
         46:ea:66:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:31 2025 by rpki-client