Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft
File:                     1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft (raw, json)
Hash identifier:          RRMm/pfk6D04YURkAC6r4DkCj58gVRwVSX+g267yvv8=
Subject key identifier:   07:38:3D:12:E6:30:3B:82:7B:E5:21:1A:D2:1E:39:E4:0D:6B:26:E8
Authority key identifier: D6:E0:4D:50:9E:D1:E9:CD:B3:54:B7:45:99:9D:B9:41:7A:8C:B8:73
Certificate issuer:       /CN=d6e04d509ed1e9cdb354b745999db9417a8cb873
Certificate serial:       0194BD8554EA8206410255DF102940C6522C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft
Manifest number:          13BC
Signing time:             Fri 31 Jan 2025 18:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:19 +0000
Files and hashes:         1: 1uBNUJ7R6c2zVLdFmZ25QXqMuHM.crl (hash: LwYXVt9ShsB/EmsmBe9OsVe/+Av1ePot69gQMjCh/RI=)
                          2: z7Y6upJ_TkHMEGYoplQxNU1SqZQ.roa (hash: g8ersIEKF+DbLZ7cbrjxi/sIsUM2GOmUMJe3QIftaDQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:54:ea:82:06:41:02:55:df:10:29:40:c6:52:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6e04d509ed1e9cdb354b745999db9417a8cb873
        Validity
            Not Before: Jan 31 18:00:19 2025 GMT
            Not After : Feb  1 18:00:19 2025 GMT
        Subject: CN=07383d12e6303b827be5211ad21e39e40d6b26e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d6:0b:a7:23:4d:d0:1c:28:03:72:19:e6:f3:
                    35:8f:78:20:0d:3f:fe:c8:90:3a:16:4c:a5:9e:66:
                    25:b2:b8:40:a8:2f:2a:93:61:85:50:8d:c2:64:31:
                    c2:12:25:b2:b9:77:17:34:8d:16:df:38:b9:6b:c0:
                    33:34:09:dd:fe:52:fb:56:4c:44:11:56:6a:50:d5:
                    1f:62:1c:fc:22:5e:68:5c:0c:cf:26:ad:17:01:3c:
                    72:12:18:36:d7:7d:33:67:11:fe:cc:25:5d:f4:9b:
                    c9:76:fb:70:cb:5c:17:85:9a:96:d8:84:af:2c:f7:
                    cc:f7:a5:98:ea:14:fb:24:2a:56:62:3c:c8:46:98:
                    9b:c7:38:d6:63:0d:78:37:16:51:21:06:ab:82:51:
                    47:f1:1a:98:03:88:3a:40:42:9d:b0:2c:30:6f:a9:
                    a5:3c:28:ab:31:24:a1:46:d0:f2:be:93:46:2a:80:
                    dc:c4:48:a0:a2:43:ae:01:3d:db:b4:10:a9:8f:af:
                    91:3d:cb:79:8b:39:2a:18:6f:c8:7d:c8:6f:94:f9:
                    96:77:75:8f:c2:62:91:06:08:24:c1:b1:66:a8:b8:
                    6e:3d:72:c1:b4:a4:7a:40:fd:d8:f9:6d:76:a1:58:
                    ee:e7:ad:03:2c:09:4c:08:7d:e2:bf:34:64:d9:47:
                    b3:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:38:3D:12:E6:30:3B:82:7B:E5:21:1A:D2:1E:39:E4:0D:6B:26:E8
            X509v3 Authority Key Identifier:
                keyid:D6:E0:4D:50:9E:D1:E9:CD:B3:54:B7:45:99:9D:B9:41:7A:8C:B8:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4ef1a8-6790-44dd-9d24-88e2adc2030b/1/1uBNUJ7R6c2zVLdFmZ25QXqMuHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:9b:02:5c:7c:6b:b6:95:96:c0:9c:5c:71:b2:50:e0:76:fe:
         02:f7:6c:fd:c5:04:29:61:25:f5:d8:11:53:00:f8:cc:fa:38:
         53:63:ef:63:7f:2d:ff:08:ba:1f:47:6d:c5:fe:48:db:ac:d6:
         26:2e:75:17:21:49:de:5c:99:ba:3b:28:a8:ab:5c:5c:80:c8:
         65:29:05:f6:c7:77:5c:d6:41:06:6f:37:78:b3:2d:f7:02:da:
         e4:06:0c:78:3e:4a:90:11:aa:67:c6:d5:ec:eb:bc:9a:70:1f:
         d9:c4:b5:af:ce:1a:f8:bc:83:af:67:67:99:f2:71:00:1b:70:
         9c:43:3b:c8:df:f0:64:4c:88:62:be:27:7f:a1:b2:49:39:77:
         11:cd:0c:8d:fe:7d:2a:aa:0e:02:cb:2c:14:4a:fd:19:38:4a:
         17:85:fe:72:20:0b:07:27:22:66:c0:fa:30:3a:dc:c7:8c:a0:
         e1:b3:a8:57:32:1a:e6:13:a3:bc:f7:30:1a:4a:7b:74:51:8d:
         78:5b:c5:1a:d7:d1:19:8f:7f:57:a4:f4:e9:d7:67:9d:97:31:
         63:b4:8d:a8:c3:5a:65:a3:07:93:db:78:08:ec:dd:a3:64:75:
         a2:dc:73:7f:15:b8:9e:f6:de:b9:1c:c1:29:b7:b4:e0:e8:16:
         a0:27:60:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:36 2025 by rpki-client