Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
File:                     Uwt27wq1VbyLB2H2BopE4QsrMfc.mft (raw, json)
Hash identifier:          nj9CsPDTpEBTI5+lReukgQvfsE1wug7GZas5VWqg5D8=
Subject key identifier:   77:5B:FF:E1:5B:E9:36:59:83:B9:56:02:DE:96:8F:5C:EE:68:6B:66
Authority key identifier: 53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7
Certificate issuer:       /CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
Certificate serial:       0194BCA9D1ED5E48D8FE5DE49F5913F0DD47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 14:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:33 +0000
Files and hashes:         1: AZwj0Iuykway_WQBa3ENsQ_JxtA.roa (hash: Q7rNa7RTxQcsrsOIx/wgjhqBI7OG9HoBnLFXa7zfZYE=)
                          2: Uwt27wq1VbyLB2H2BopE4QsrMfc.crl (hash: wNp06TX9o3cOfdx8T43GBXEWgP7qqAsAeiWBPqu2UbQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:d1:ed:5e:48:d8:fe:5d:e4:9f:59:13:f0:dd:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=530b76ef0ab555bc8b0761f6068a44e10b2b31f7
        Validity
            Not Before: Jan 31 14:00:33 2025 GMT
            Not After : Feb  1 14:00:33 2025 GMT
        Subject: CN=775bffe15be9365983b95602de968f5cee686b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d3:6e:42:d5:2c:9b:7f:f1:41:98:45:d1:f5:
                    c3:e9:c9:86:9a:bf:ee:5d:94:38:45:74:a1:21:bd:
                    71:a9:82:03:e0:c0:dc:e3:2e:7b:59:ef:f2:fa:b4:
                    ed:b3:c2:85:46:b2:0f:d7:00:e1:97:37:db:a1:37:
                    d5:0b:ad:bc:25:4d:ec:4f:af:36:73:69:03:6d:88:
                    ff:82:3d:c4:e3:43:99:fc:5f:66:59:68:8d:be:b5:
                    62:b7:36:86:79:e4:96:70:2f:78:e6:b2:ff:b6:7c:
                    3a:95:d3:9d:c7:40:a0:31:2e:29:2f:3c:41:98:08:
                    66:1c:05:5b:e6:7a:5a:40:2e:87:16:fa:9e:7f:db:
                    2e:eb:cd:20:18:80:a1:3d:4e:c0:84:64:b1:17:b9:
                    49:7a:fb:df:af:d6:62:6f:b7:98:a6:72:9c:d8:a5:
                    1b:06:13:e9:ce:e8:d9:9d:42:c1:69:9d:7e:b1:82:
                    4f:63:84:60:cb:0e:5c:4f:93:21:59:5e:ea:35:53:
                    60:0f:5d:de:10:32:cd:e0:55:2b:1b:cf:07:6c:8e:
                    a6:5b:fe:b6:57:ec:75:f5:4e:8d:92:7b:c1:2e:ac:
                    5a:a6:d2:d8:df:bb:91:08:48:bf:a6:52:51:80:e1:
                    3a:04:dc:84:6f:2d:86:9f:99:51:5d:55:16:05:f1:
                    52:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5B:FF:E1:5B:E9:36:59:83:B9:56:02:DE:96:8F:5C:EE:68:6B:66
            X509v3 Authority Key Identifier:
                keyid:53:0B:76:EF:0A:B5:55:BC:8B:07:61:F6:06:8A:44:E1:0B:2B:31:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uwt27wq1VbyLB2H2BopE4QsrMfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b8a489-3157-401f-b157-bfffc91fde3c/1/Uwt27wq1VbyLB2H2BopE4QsrMfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:a3:01:0f:d0:f2:d4:f5:3c:2e:1a:c3:67:65:f0:70:7b:62:
         15:57:17:dd:bb:52:7d:8f:18:14:31:d2:01:92:84:4b:f7:c4:
         77:e5:9f:3c:67:14:f1:6c:b1:74:45:02:bf:87:75:30:f9:96:
         07:bb:57:86:c1:b2:a3:7f:4c:51:c5:15:bf:3f:29:df:80:00:
         fb:f1:c8:f7:40:1b:59:93:53:ba:63:1c:93:a0:a9:2b:d2:88:
         39:44:d8:d7:e3:c5:10:de:51:aa:f9:36:09:40:28:b4:9a:46:
         cc:89:8c:25:53:18:c6:ab:73:59:94:0f:cd:18:ea:74:96:c1:
         ff:3c:8d:ab:15:c8:18:01:73:29:5c:6a:04:a5:38:00:89:41:
         33:da:ea:cc:f7:ce:64:d9:db:15:24:43:59:c2:de:4a:b4:97:
         62:96:45:60:8e:f1:84:db:50:e5:36:0f:d2:35:72:30:7d:7b:
         30:49:1f:89:37:79:f9:76:41:44:c4:ae:3e:0d:90:36:37:38:
         6d:dd:a1:cd:fa:26:d3:80:4e:77:36:a5:4a:d6:3a:8c:6f:c5:
         a8:e2:68:c8:8b:3f:d8:0f:0d:e0:ac:7a:14:b6:3a:fc:d8:9f:
         86:81:85:be:25:70:7a:8e:89:01:68:db:cc:54:53:8a:1e:c0:
         93:22:a5:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qdHtXkjY/l3kn1kT8N1HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMGI3NmVmMGFiNTU1YmM4YjA3NjFmNjA2OGE0NGUxMGIy
YjMxZjcwHhcNMjUwMTMxMTQwMDMzWhcNMjUwMjAxMTQwMDMzWjAzMTEwLwYDVQQD
Eyg3NzViZmZlMTViZTkzNjU5ODNiOTU2MDJkZTk2OGY1Y2VlNjg2YjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr9NuQtUsm3/xQZhF0fXD6cmGmr/u
XZQ4RXShIb1xqYID4MDc4y57We/y+rTts8KFRrIP1wDhlzfboTfVC628JU3sT682
c2kDbYj/gj3E40OZ/F9mWWiNvrVitzaGeeSWcC945rL/tnw6ldOdx0CgMS4pLzxB
mAhmHAVb5npaQC6HFvqef9su680gGIChPU7AhGSxF7lJevvfr9Zib7eYpnKc2KUb
BhPpzujZnULBaZ1+sYJPY4Rgyw5cT5MhWV7qNVNgD13eEDLN4FUrG88HbI6mW/62
V+x19U6NknvBLqxaptLY37uRCEi/plJRgOE6BNyEby2Gn5lRXVUWBfFSpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdb/+Fb6TZZg7lWAt6Wj1zuaGtmMB8GA1UdIwQY
MBaAFFMLdu8KtVW8iwdh9gaKROELKzH3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXd0Mjd3cTFWYnlMQjJIMkJvcEU0UXNyTWZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iOGE0ODktMzE1Ny00MDFmLWIxNTct
YmZmZmM5MWZkZTNjLzEvVXd0Mjd3cTFWYnlMQjJIMkJvcEU0UXNyTWZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9iOGE0ODktMzE1Ny00MDFmLWIxNTctYmZmZmM5MWZkZTNj
LzEvVXd0Mjd3cTFWYnlMQjJIMkJvcEU0UXNyTWZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqMBD9Dy
1PU8LhrDZ2XwcHtiFVcX3btSfY8YFDHSAZKES/fEd+WfPGcU8WyxdEUCv4d1MPmW
B7tXhsGyo39MUcUVvz8p34AA+/HI90AbWZNTumMck6CpK9KIOUTY1+PFEN5Rqvk2
CUAotJpGzImMJVMYxqtzWZQPzRjqdJbB/zyNqxXIGAFzKVxqBKU4AIlBM9rqzPfO
ZNnbFSRDWcLeSrSXYpZFYI7xhNtQ5TYP0jVyMH17MEkfiTd5+XZBRMSuPg2QNjc4
bd2hzfom04BOdzalStY6jG/FqOJoyIs/2A8N4Kx6FLY6/NifhoGFviVweo6JAWjb
zFRTih7AkyKlug==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:04 2025 by rpki-client