Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
File:                     UfSwsEaesNBxmUzYI480vvAMb74.mft (raw, json)
Hash identifier:          8W7SuKQNAqE4Ip3eJHXVROn5nRaSa5M8IRpqR9o1n6Q=
Subject key identifier:   1E:69:F6:9B:14:B2:52:80:46:58:74:B3:BA:D9:62:C1:DB:BF:7F:C6
Authority key identifier: 51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE
Certificate issuer:       /CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
Certificate serial:       0194BC049E396A40641E873A0F7101CAC01C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft
Manifest number:          039E
Signing time:             Fri 31 Jan 2025 11:00:06 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:06 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:06 +0000
Files and hashes:         1: UfSwsEaesNBxmUzYI480vvAMb74.crl (hash: NwRzqs0oe/YuRcvqbLpmsZqf1BKxGdAinKUbV0ggfBs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:9e:39:6a:40:64:1e:87:3a:0f:71:01:ca:c0:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51f4b0b0469eb0d071994cd8238f34bef00c6fbe
        Validity
            Not Before: Jan 31 11:00:06 2025 GMT
            Not After : Feb  1 11:00:06 2025 GMT
        Subject: CN=1e69f69b14b25280465874b3bad962c1dbbf7fc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:14:98:53:61:6c:8f:49:dd:4a:51:37:2a:ef:
                    73:d7:75:35:3c:fb:9f:75:eb:dd:bc:2d:b3:01:d5:
                    59:7c:81:74:85:c5:f2:84:de:8f:e6:10:5b:0e:a8:
                    b2:23:1e:88:c0:64:76:6b:f3:bd:f6:4b:49:b7:06:
                    cd:cb:b2:14:64:32:5a:eb:d7:c9:2a:ce:bf:54:6b:
                    6d:07:d1:6f:69:8e:7e:78:43:e6:71:da:a2:96:3e:
                    00:5d:26:5d:d5:c7:ff:20:ff:7b:9e:a7:83:67:8b:
                    c4:fb:60:c6:b9:e4:31:30:5b:41:33:07:79:ee:8d:
                    28:74:16:05:31:3d:79:bc:65:63:0f:ee:5d:c9:3a:
                    6a:3b:ef:ab:d4:5d:d8:02:cc:56:60:21:05:88:ee:
                    55:e8:76:49:3c:54:d1:89:69:40:fe:89:e0:b2:c3:
                    aa:0c:00:46:f7:c3:ca:2c:cc:e3:54:8b:40:94:d8:
                    20:0b:38:e5:b3:e4:38:ab:25:47:f0:16:95:b9:78:
                    80:37:18:f0:e4:c3:7b:79:25:b6:ac:ef:80:29:57:
                    e2:b4:4d:1b:ff:27:39:a7:00:4d:11:82:00:29:c5:
                    8a:66:d2:d6:f3:c2:d6:05:9e:14:b7:1f:61:b7:79:
                    da:d0:39:50:96:66:fa:17:66:48:cd:de:75:06:10:
                    30:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:69:F6:9B:14:B2:52:80:46:58:74:B3:BA:D9:62:C1:DB:BF:7F:C6
            X509v3 Authority Key Identifier:
                keyid:51:F4:B0:B0:46:9E:B0:D0:71:99:4C:D8:23:8F:34:BE:F0:0C:6F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UfSwsEaesNBxmUzYI480vvAMb74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/d3ab28-7f47-41f3-b231-78844e101133/1/UfSwsEaesNBxmUzYI480vvAMb74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e6:0c:59:b5:74:8b:27:75:4a:c4:1d:60:c7:f1:cc:ec:e5:
         9d:83:14:c3:2f:a4:6b:12:cf:02:98:1b:a1:dd:59:18:0e:ef:
         5e:1a:4c:3c:85:df:aa:1c:28:ff:a5:e6:0d:40:63:d6:25:72:
         08:cc:6a:78:d3:fc:20:4d:ec:98:8c:94:01:b9:8c:30:4e:9f:
         2e:8c:d6:e3:67:94:45:d8:58:6a:b6:e6:e3:24:e2:1c:d5:ec:
         3a:67:24:c3:4a:b2:ea:dd:db:95:e8:77:19:c6:47:1d:ea:b1:
         9e:56:cc:a1:1f:8f:28:66:af:5c:f8:15:c9:41:cf:ff:2a:3b:
         b5:e7:a7:46:52:da:a6:ee:bb:8f:7b:d6:43:7a:6d:a1:f3:00:
         75:19:da:be:ab:a0:09:d8:34:f0:be:ed:31:ac:01:48:26:4d:
         12:43:31:20:04:6f:7b:26:9c:10:66:4e:60:f1:89:02:91:90:
         ca:fc:d3:f8:6f:03:36:2d:5f:14:50:fa:52:d7:fe:c6:29:7e:
         1a:39:ee:62:d4:be:d4:9b:45:94:35:bf:a6:d8:58:7f:da:e6:
         46:3e:08:23:69:00:d0:6d:38:b3:51:53:0a:f2:72:fb:8e:0d:
         85:70:31:bc:5c:0e:24:74:8e:71:a0:e7:de:4e:73:65:b0:91:
         0b:09:0e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:40 2025 by rpki-client