Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
File:                     SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft (raw, json)
Hash identifier:          ZBD/SOG1GaMX8SWE4o29EfEFQPBQZPPDjjTiGp+OHGk=
Subject key identifier:   85:EA:B4:A9:ED:4D:14:27:C2:42:29:95:44:23:8D:EA:E5:15:B3:59
Authority key identifier: 49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D
Certificate issuer:       /CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
Certificate serial:       0194BCA999C1D1106587D84509F4415DBD59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft
Manifest number:          023A
Signing time:             Fri 31 Jan 2025 14:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:19 +0000
Files and hashes:         1: SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl (hash: Yns2Ckitkbuh5iZ3f0VozRF4PSaTkSVKjziytdjkBXU=)
                          2: ie5Rxl_8lGCYh_KgPEkCnbuQsRk.roa (hash: GBFEJYPtX3jgZYzHGm9uh7GT7ECNm8iOg9HQZDPhsqE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:99:c1:d1:10:65:87:d8:45:09:f4:41:5d:bd:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49850f1bfd98d840a2aa8a83fa4f0894439d998d
        Validity
            Not Before: Jan 31 14:00:19 2025 GMT
            Not After : Feb  1 14:00:19 2025 GMT
        Subject: CN=85eab4a9ed4d1427c242299544238deae515b359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:8a:de:19:04:6a:1f:5e:dc:ba:fc:79:e5:
                    7d:e7:4a:0a:81:d2:ca:1b:3f:b3:9c:b8:79:4a:ad:
                    8e:0f:cb:d2:74:26:83:fe:8b:42:a4:93:f5:3d:99:
                    9c:ba:86:d4:7e:3c:c4:4c:67:c8:a8:de:48:4c:5f:
                    1c:d7:86:af:34:24:c0:24:01:bc:58:30:39:e3:33:
                    6c:f2:f8:35:ab:4e:46:62:76:a7:93:04:67:9b:78:
                    16:b3:f8:b0:93:05:42:1c:83:41:97:84:6a:84:49:
                    a9:0c:28:2f:08:56:5a:41:f3:71:7f:b4:d6:e4:46:
                    dc:54:57:74:54:49:7d:d9:2a:c5:54:90:95:5f:99:
                    e3:17:2a:70:30:f0:da:18:06:db:79:09:17:12:f1:
                    29:63:3a:94:2c:2c:f6:68:d0:88:c5:07:72:ca:59:
                    7c:88:e1:4f:ae:dc:5b:3d:5d:3a:29:50:81:91:49:
                    ca:e0:86:a8:23:ee:8c:7f:5a:ec:bf:4f:e0:2b:a6:
                    b6:74:a3:0c:f4:ef:09:24:a7:96:52:fe:7f:3e:d9:
                    39:9f:1d:00:40:b9:15:f9:e6:8f:ab:72:9c:9e:68:
                    79:c2:26:88:90:e4:c9:08:9e:58:e5:4a:24:bf:2c:
                    2e:0d:70:25:ba:9b:03:05:63:07:6a:53:d4:70:7c:
                    e3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EA:B4:A9:ED:4D:14:27:C2:42:29:95:44:23:8D:EA:E5:15:B3:59
            X509v3 Authority Key Identifier:
                keyid:49:85:0F:1B:FD:98:D8:40:A2:AA:8A:83:FA:4F:08:94:43:9D:99:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/50ef2e-7a1c-405a-9117-de14e3532fd8/1/SYUPG_2Y2ECiqoqD-k8IlEOdmY0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:52:ff:2f:09:8b:d9:8b:b5:34:55:42:d6:7d:13:9b:dd:62:
         ec:41:dc:88:84:e6:49:b3:30:65:e1:b0:c6:0f:3d:a7:9f:a5:
         74:1d:97:85:77:dc:0e:e9:9e:d8:da:f1:a2:ef:99:84:ba:b5:
         39:78:e8:bf:8f:38:58:a4:b3:b5:4e:a5:96:9b:0d:e3:01:e9:
         72:c3:b3:e6:fa:fc:4d:27:e8:6f:c1:17:b4:dd:45:72:4f:fe:
         57:3d:f5:24:45:f3:e0:39:1a:3c:78:dc:75:dc:39:14:82:7e:
         29:a8:2c:db:2a:96:33:1f:b1:d4:c9:85:03:16:70:b8:aa:81:
         17:90:93:47:81:35:ce:b8:1e:a3:fb:c9:0f:8d:97:95:eb:97:
         b7:25:15:0a:ee:cf:ca:b0:76:b0:23:f6:b8:d8:bc:c2:c9:d2:
         ef:62:4b:ae:89:ee:f5:a0:44:ae:ac:03:31:9e:4a:7c:82:da:
         e5:9e:b4:f1:2f:db:95:92:1c:45:58:c1:b0:fa:51:66:1b:51:
         57:3b:2d:9f:f7:03:94:8b:df:63:1c:7d:45:c9:c4:0b:f8:d7:
         9a:86:5e:02:5e:70:53:09:20:4f:43:d4:fb:b4:2c:7d:26:f6:
         95:4c:3c:ab:2b:fa:a5:38:60:40:79:c2:3b:c9:62:09:08:13:
         86:d5:d9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:57:55 2025 by rpki-client