Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
File:                     c_umgtacHRBwjte2rqojLuibkB0.mft (raw, json)
Hash identifier:          QwK/ugBsYXCIsO2xpc3E0uM2aMuqyiDunkg9zyft2yM=
Subject key identifier:   6F:72:B3:D1:A5:E6:60:B7:4A:95:3E:E6:65:BC:02:52:E6:3F:73:54
Authority key identifier: 73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D
Certificate issuer:       /CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
Certificate serial:       0194BCAA37026E2B9DEBEDA7713320150C81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft
Manifest number:          0D69
Signing time:             Fri 31 Jan 2025 14:00:59 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:59 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:59 +0000
Files and hashes:         1: VFafoaVO2bN0O_eWCA7NRDo9AQI.roa (hash: ZCSixYQYQeBNPNi+wxPK+CWr+k+nO4o0D+w9LRSwgUE=)
                          2: c_umgtacHRBwjte2rqojLuibkB0.crl (hash: qNkOwlay1B46/ZrnwombefkgXT/DsQp0p2bxr1jeYVA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:37:02:6e:2b:9d:eb:ed:a7:71:33:20:15:0c:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73fba682d69c1d10708ed7b6aeaa232ee89b901d
        Validity
            Not Before: Jan 31 14:00:59 2025 GMT
            Not After : Feb  1 14:00:59 2025 GMT
        Subject: CN=6f72b3d1a5e660b74a953ee665bc0252e63f7354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6a:3a:be:ba:ca:b9:a7:4b:64:05:04:56:59:
                    98:71:40:ab:e5:db:71:e9:50:bf:5e:ef:76:e5:6b:
                    0b:3b:dd:3e:f6:b8:8a:45:a2:1b:ca:75:52:73:c0:
                    84:c3:5c:85:a0:0a:50:92:47:3c:ff:30:9b:20:59:
                    ad:f5:5c:be:e7:5f:64:e2:d9:6c:23:60:93:5b:08:
                    9c:0a:cc:53:e7:ac:78:1d:02:49:20:82:29:28:95:
                    ff:ca:e2:01:60:d8:7b:4f:4d:1c:ed:13:9e:79:29:
                    76:3d:95:30:c3:e1:7b:bb:ec:3c:09:0c:b9:83:d6:
                    c0:19:ca:e5:0c:b5:e1:d3:db:3f:32:c8:99:93:c3:
                    a4:6b:cd:af:2d:7a:4f:ec:7b:ab:f1:c7:b8:ee:69:
                    7b:aa:6f:90:95:82:9c:bb:4e:b1:56:62:fb:5c:22:
                    f3:88:27:ee:45:5b:fa:a5:00:52:cf:76:bc:dd:f0:
                    23:66:d9:bc:eb:f2:0f:07:a6:03:ec:84:f0:9c:f3:
                    5c:3e:45:af:60:0a:e6:6e:ea:27:0c:77:64:a0:29:
                    4a:66:a2:81:84:72:7d:32:ea:43:2b:ef:4c:7e:4b:
                    9a:cd:91:8a:44:8f:d0:c8:a1:5b:95:49:92:4b:e4:
                    b8:df:3d:4a:28:4c:9a:d5:70:58:9e:d6:3f:d9:18:
                    14:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:72:B3:D1:A5:E6:60:B7:4A:95:3E:E6:65:BC:02:52:E6:3F:73:54
            X509v3 Authority Key Identifier:
                keyid:73:FB:A6:82:D6:9C:1D:10:70:8E:D7:B6:AE:AA:23:2E:E8:9B:90:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_umgtacHRBwjte2rqojLuibkB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/d2cec5-b245-4547-a9cd-f6c644c94608/1/c_umgtacHRBwjte2rqojLuibkB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:c3:cf:03:05:4e:f7:56:1f:5a:a3:08:04:52:c5:a1:ea:f7:
         2d:f3:c7:dc:b8:5d:c3:9f:2d:c8:f4:65:ff:95:e3:f9:20:96:
         f1:68:e5:cd:df:c5:58:da:9c:db:16:a7:8f:d0:0b:a3:99:d3:
         c4:97:e5:92:a5:e3:02:fc:92:1f:64:05:82:a7:f1:af:a8:db:
         ee:bf:74:c3:c3:16:f3:ed:d6:db:ae:d9:a2:1f:5e:90:3c:fd:
         13:b5:1a:fc:f7:af:ba:1c:c2:5a:ed:c2:11:7e:36:a8:13:fe:
         ab:50:28:e3:e1:76:6c:49:b2:ed:32:0a:71:3a:27:3f:54:4e:
         2e:b5:71:5d:4c:dd:7d:9d:c7:d4:01:d7:34:17:ea:39:21:8e:
         6c:70:dc:64:f8:12:b1:ed:19:80:9d:bb:65:9f:b5:63:99:31:
         78:85:23:94:71:77:ac:2c:71:99:fb:1f:ec:c9:1e:b1:fe:41:
         42:cb:61:ab:9b:cd:e2:af:b1:92:a6:87:7c:fb:49:18:bd:18:
         4f:f2:e8:bc:03:97:6c:e5:5b:8c:ba:64:b4:2a:cb:4f:8e:71:
         6a:0e:19:a5:fd:df:e5:27:60:4f:43:ff:16:57:73:45:99:e2:
         c1:f1:e8:96:42:c2:d2:1b:76:64:ae:a3:9b:06:30:7b:7c:91:
         65:08:61:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qjcCbiud6+2ncTMgFQyBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZmJhNjgyZDY5YzFkMTA3MDhlZDdiNmFlYWEyMzJlZTg5
YjkwMWQwHhcNMjUwMTMxMTQwMDU5WhcNMjUwMjAxMTQwMDU5WjAzMTEwLwYDVQQD
Eyg2ZjcyYjNkMWE1ZTY2MGI3NGE5NTNlZTY2NWJjMDI1MmU2M2Y3MzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymo6vrrKuadLZAUEVlmYcUCr5dtx
6VC/Xu925WsLO90+9riKRaIbynVSc8CEw1yFoApQkkc8/zCbIFmt9Vy+519k4tls
I2CTWwicCsxT56x4HQJJIIIpKJX/yuIBYNh7T00c7ROeeSl2PZUww+F7u+w8CQy5
g9bAGcrlDLXh09s/MsiZk8Oka82vLXpP7Hur8ce47ml7qm+QlYKcu06xVmL7XCLz
iCfuRVv6pQBSz3a83fAjZtm86/IPB6YD7ITwnPNcPkWvYArmbuonDHdkoClKZqKB
hHJ9MupDK+9MfkuazZGKRI/QyKFblUmSS+S43z1KKEya1XBYntY/2RgUNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9ys9Gl5mC3SpU+5mW8AlLmP3NUMB8GA1UdIwQY
MBaAFHP7poLWnB0QcI7Xtq6qIy7om5AdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY191bWd0YWNIUkJ3anRlMnJxb2pMdWlia0IwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC9kMmNlYzUtYjI0NS00NTQ3LWE5Y2Qt
ZjZjNjQ0Yzk0NjA4LzEvY191bWd0YWNIUkJ3anRlMnJxb2pMdWlia0IwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC9kMmNlYzUtYjI0NS00NTQ3LWE5Y2QtZjZjNjQ0Yzk0NjA4
LzEvY191bWd0YWNIUkJ3anRlMnJxb2pMdWlia0IwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsPPAwVO
91YfWqMIBFLFoer3LfPH3Lhdw58tyPRl/5Xj+SCW8Wjlzd/FWNqc2xanj9ALo5nT
xJflkqXjAvySH2QFgqfxr6jb7r90w8MW8+3W267Zoh9ekDz9E7Ua/PevuhzCWu3C
EX42qBP+q1Ao4+F2bEmy7TIKcTonP1ROLrVxXUzdfZ3H1AHXNBfqOSGObHDcZPgS
se0ZgJ27ZZ+1Y5kxeIUjlHF3rCxxmfsf7Mkesf5BQsthq5vN4q+xkqaHfPtJGL0Y
T/LovAOXbOVbjLpktCrLT45xag4Zpf3f5SdgT0P/FldzRZniwfHolkLC0ht2ZK6j
mwYwe3yRZQhhPA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:51 2025 by rpki-client