Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
File:                     ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft (raw, json)
Hash identifier:          U5AyKoK1VIRgm9kZofjC2FVofbY4DqUW5oAyU6M8RhQ=
Subject key identifier:   E7:B8:94:B5:68:38:4F:0A:A1:37:BB:46:8F:58:10:89:21:7B:7D:20
Authority key identifier: BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94
Certificate issuer:       /CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
Certificate serial:       0194BD175FEC06C794294CF87DD412E652AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft
Manifest number:          0AEE
Signing time:             Fri 31 Jan 2025 16:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:13 +0000
Files and hashes:         1: Q2LTA1GKdHj7d0i_1GvyqSIwjxQ.roa (hash: xu02NdCI991FR8WiB+pSZuZa9Qgpw7qq1Oeg+OkFXG4=)
                          2: ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl (hash: q63YuI1125uOtw6k1ih3aBNTdnr1moI5AZPBobCqWFM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:5f:ec:06:c7:94:29:4c:f8:7d:d4:12:e6:52:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba515836af300f7c71f71dd18b9c3f51c252bb94
        Validity
            Not Before: Jan 31 16:00:13 2025 GMT
            Not After : Feb  1 16:00:13 2025 GMT
        Subject: CN=e7b894b568384f0aa137bb468f581089217b7d20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c6:e5:2d:b1:ef:0d:82:ad:3c:1b:6f:2e:c9:
                    ff:e2:67:12:35:e1:aa:21:03:1d:25:76:1c:5a:8a:
                    98:c8:4a:90:5b:c9:c0:72:4d:62:17:5f:6e:e4:5e:
                    96:f3:db:9f:cb:df:5e:ef:f2:b7:09:41:6a:29:10:
                    79:10:51:12:9d:e6:1a:5e:56:30:b6:d3:4d:b4:e9:
                    e9:aa:65:26:61:d7:f4:ad:14:c0:6e:59:43:2e:4a:
                    61:12:71:ea:1e:6c:ef:86:bf:b6:ec:dc:cf:46:11:
                    f3:c3:ee:b5:2a:04:bc:ed:f4:ec:fa:64:68:1f:24:
                    49:d1:d3:86:34:0a:65:07:08:35:ac:c1:d5:72:c4:
                    ed:f3:69:1a:bd:95:83:04:63:f1:11:44:e4:01:72:
                    66:3b:07:91:c2:aa:a0:63:eb:bb:a2:d7:eb:74:e3:
                    da:7c:53:2a:55:69:d2:1b:67:7e:24:2a:0f:a8:c4:
                    57:97:8e:55:0a:26:61:23:9b:3a:21:c0:c7:67:e0:
                    71:5a:02:f1:fd:7c:52:98:66:a9:a2:2a:c1:d1:ad:
                    7e:d4:70:55:93:c3:e2:42:c9:f3:52:a6:57:71:d3:
                    6b:b4:70:c3:ab:3d:40:3a:c1:31:a4:e9:d3:a0:2b:
                    9a:14:f1:d2:ec:8b:99:d2:a3:5d:d5:c9:12:c8:34:
                    d8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:B8:94:B5:68:38:4F:0A:A1:37:BB:46:8F:58:10:89:21:7B:7D:20
            X509v3 Authority Key Identifier:
                keyid:BA:51:58:36:AF:30:0F:7C:71:F7:1D:D1:8B:9C:3F:51:C2:52:BB:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3f9087-572a-4c6c-80be-bc913466d43d/1/ulFYNq8wD3xx9x3Ri5w_UcJSu5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:49:d7:fe:a4:36:1e:bd:a8:7f:ae:81:20:91:1a:68:0b:a8:
         2d:7a:a4:d3:fe:97:4b:b5:31:eb:77:6c:58:95:29:88:47:59:
         91:84:43:9c:7d:b6:6e:60:09:29:86:23:95:3b:6f:99:36:78:
         57:5a:5b:e6:a5:da:ea:69:30:11:04:56:4c:07:21:a7:2c:e4:
         5f:61:35:dc:3d:6f:2c:0a:eb:e5:0d:c0:a8:5d:2b:3e:b2:1d:
         2b:71:ea:6d:d8:ba:e1:92:f9:be:0e:0c:ef:77:93:2a:52:91:
         b6:ca:6b:52:65:f9:28:5d:9e:15:f0:cc:54:4b:1c:d4:da:50:
         cb:80:d1:17:81:8e:fb:79:2e:c1:ee:c8:44:68:30:50:6e:ef:
         6f:84:f4:55:b0:b2:94:99:d9:3f:f0:fb:b9:e1:00:08:9d:dc:
         8e:85:4c:fd:75:02:0d:ee:ac:cc:6c:f6:50:81:2a:bc:30:62:
         64:2a:6f:5c:f1:7b:f5:71:4e:41:01:28:b8:10:89:4c:89:45:
         fe:12:3c:5f:45:e2:37:21:1b:c6:09:0e:13:13:bf:9d:eb:d1:
         2c:f0:e6:40:a2:5e:ca:52:05:aa:0a:3a:55:ba:14:6e:b4:ad:
         c6:91:3e:9d:d8:e5:12:64:09:7c:aa:7e:ad:6b:b1:00:0e:d5:
         64:ff:df:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:08:09 2025 by rpki-client