Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
File:                     uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft (raw, json)
Hash identifier:          uA5mj9ovptIyqUUgX/qaJsmnDJvjXEvZ4kfHeiU2oic=
Subject key identifier:   F1:BD:CE:B9:6F:00:32:60:57:F2:9E:51:AD:F2:44:20:AA:F4:B7:4D
Authority key identifier: B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92
Certificate issuer:       /CN=b91f8db02e2e971d54f90eef107090398fcc3d92
Certificate serial:       0195E159240AE18BB54D88D2B88F4679B11E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft
Manifest number:          0704
Signing time:             Sat 29 Mar 2025 10:01:10 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:10 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:10 +0000
Files and hashes:         1: uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl (hash: Q4hjSEd2E37HEM26/7CEHJG20SJmCssz+dlTKpKaHtY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:24:0a:e1:8b:b5:4d:88:d2:b8:8f:46:79:b1:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b91f8db02e2e971d54f90eef107090398fcc3d92
        Validity
            Not Before: Mar 29 10:01:10 2025 GMT
            Not After : Mar 30 10:01:10 2025 GMT
        Subject: CN=f1bdceb96f00326057f29e51adf24420aaf4b74d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:5b:b6:54:10:22:a6:75:d2:49:88:57:e5:ca:
                    e3:4b:2e:ee:9a:b5:dd:f6:0f:76:27:35:8c:97:1d:
                    47:64:44:7a:53:93:a7:f5:52:3d:a3:9b:06:25:d5:
                    f7:87:bd:ff:af:a4:fc:ff:33:7f:00:68:b6:c7:22:
                    bb:d8:65:d9:90:c3:1c:23:e3:75:5b:bb:fa:fc:62:
                    22:9c:1b:79:51:7b:6f:1e:77:cc:87:e1:89:e1:63:
                    ff:b3:1d:31:ef:e1:63:66:17:44:45:ef:34:5d:3e:
                    16:b8:fa:5c:63:63:2a:7a:c4:6b:dc:73:8d:28:3b:
                    ad:c1:f4:40:23:92:ae:23:fd:be:87:95:0a:35:8b:
                    86:ad:89:1e:b3:10:38:18:b6:78:28:80:38:d1:dd:
                    43:91:07:b5:61:92:85:51:fb:ec:20:8f:6a:33:1c:
                    81:4c:72:35:87:a4:4d:20:b5:f9:fd:95:ff:2b:e1:
                    7b:62:f6:ec:48:92:ed:34:f8:c9:6d:84:a6:ab:35:
                    5c:dc:77:d2:f7:29:21:3d:13:83:30:24:e8:c0:2a:
                    b6:61:9a:b4:40:91:ac:bd:f9:9d:c3:74:1e:38:61:
                    a6:b5:23:c2:29:8d:b1:99:a0:91:2a:2f:c6:2b:93:
                    a5:01:56:fa:c5:8b:dd:be:48:63:a7:0a:64:2d:72:
                    4f:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:BD:CE:B9:6F:00:32:60:57:F2:9E:51:AD:F2:44:20:AA:F4:B7:4D
            X509v3 Authority Key Identifier:
                keyid:B9:1F:8D:B0:2E:2E:97:1D:54:F9:0E:EF:10:70:90:39:8F:CC:3D:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ee68ac-36ba-49a1-9df9-62e19ef960a4/1/uR-NsC4ulx1U-Q7vEHCQOY_MPZI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:ee:a7:16:a4:29:ed:19:12:b3:f9:59:a8:4c:84:46:82:7e:
         6c:1e:0c:f3:be:28:22:9f:51:78:22:30:08:96:8c:c7:47:5e:
         73:bf:e9:ed:4b:9f:73:cd:8a:58:fa:3d:7c:83:ba:41:a0:60:
         db:ef:15:e6:b3:11:55:a3:86:32:9a:19:3f:35:d0:d5:49:40:
         5a:3c:b6:ae:95:48:ae:71:03:53:9f:e7:bc:c8:f4:68:4c:b5:
         bd:48:95:66:8b:ce:47:49:ce:7e:b8:e1:13:38:16:07:fb:fd:
         11:ea:d2:f2:55:b9:46:09:fb:af:13:9b:f9:52:c8:b6:d2:68:
         26:ee:7f:1a:88:a2:dc:9b:3c:9f:98:5e:c7:f6:1d:48:06:82:
         29:98:8f:f9:bc:d0:70:7c:7d:b0:a9:ca:31:30:d4:87:a5:a6:
         f9:db:e0:5f:29:a9:88:59:06:7b:e4:10:16:5e:c4:d6:c3:10:
         2c:7c:8b:d5:57:d3:3d:14:e1:ff:70:6e:20:31:04:0f:e1:92:
         42:32:fe:f8:a5:1d:45:21:20:7a:ad:a0:8b:b2:13:c5:ad:90:
         3a:ad:6a:9c:5b:3f:9a:a2:bf:1c:11:91:27:ac:1f:26:59:88:
         c0:fb:e7:39:3c:48:bd:c4:e8:95:fe:b3:64:e0:66:34:78:9e:
         00:79:93:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXhWSQK4Yu1TYjSuI9GebEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MWY4ZGIwMmUyZTk3MWQ1NGY5MGVlZjEwNzA5MDM5OGZj
YzNkOTIwHhcNMjUwMzI5MTAwMTEwWhcNMjUwMzMwMTAwMTEwWjAzMTEwLwYDVQQD
EyhmMWJkY2ViOTZmMDAzMjYwNTdmMjllNTFhZGYyNDQyMGFhZjRiNzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lu2VBAipnXSSYhX5crjSy7umrXd
9g92JzWMlx1HZER6U5On9VI9o5sGJdX3h73/r6T8/zN/AGi2xyK72GXZkMMcI+N1
W7v6/GIinBt5UXtvHnfMh+GJ4WP/sx0x7+FjZhdERe80XT4WuPpcY2MqesRr3HON
KDutwfRAI5KuI/2+h5UKNYuGrYkesxA4GLZ4KIA40d1DkQe1YZKFUfvsII9qMxyB
THI1h6RNILX5/ZX/K+F7YvbsSJLtNPjJbYSmqzVc3HfS9ykhPRODMCTowCq2YZq0
QJGsvfmdw3QeOGGmtSPCKY2xmaCRKi/GK5OlAVb6xYvdvkhjpwpkLXJP2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPG9zrlvADJgV/KeUa3yRCCq9LdNMB8GA1UdIwQY
MBaAFLkfjbAuLpcdVPkO7xBwkDmPzD2SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVItTnNDNHVseDFVLVE3dkVIQ1FPWV9NUFpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9lZTY4YWMtMzZiYS00OWExLTlkZjkt
NjJlMTllZjk2MGE0LzEvdVItTnNDNHVseDFVLVE3dkVIQ1FPWV9NUFpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9lZTY4YWMtMzZiYS00OWExLTlkZjktNjJlMTllZjk2MGE0
LzEvdVItTnNDNHVseDFVLVE3dkVIQ1FPWV9NUFpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArO6nFqQp
7RkSs/lZqEyERoJ+bB4M874oIp9ReCIwCJaMx0dec7/p7Uufc82KWPo9fIO6QaBg
2+8V5rMRVaOGMpoZPzXQ1UlAWjy2rpVIrnEDU5/nvMj0aEy1vUiVZovOR0nOfrjh
EzgWB/v9EerS8lW5Rgn7rxOb+VLIttJoJu5/Goii3Js8n5hex/YdSAaCKZiP+bzQ
cHx9sKnKMTDUh6Wm+dvgXympiFkGe+QQFl7E1sMQLHyL1VfTPRTh/3BuIDEED+GS
QjL++KUdRSEgeq2gi7ITxa2QOq1qnFs/mqK/HBGRJ6wfJlmIwPvnOTxIvcTolf6z
ZOBmNHieAHmT7A==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:09 2025 by rpki-client