Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/d84d08-4fbc-4094-a556-12bc2407b7ed/1/uNDp5ZeL20L3HMAdqvOwlxvBosA.mft
File:                     uNDp5ZeL20L3HMAdqvOwlxvBosA.mft (raw, json)
Hash identifier:          tF9IM1aBcs0XjmODN4gi/dyGQZucAcDLO/2xLEl2CHg=
Subject key identifier:   FC:CF:21:BB:FB:74:50:69:67:ED:C9:2D:9D:68:2A:CA:24:4C:9B:BC
Authority key identifier: B8:D0:E9:E5:97:8B:DB:42:F7:1C:C0:1D:AA:F3:B0:97:1B:C1:A2:C0
Certificate issuer:       /CN=b8d0e9e5978bdb42f71cc01daaf3b0971bc1a2c0
Certificate serial:       01887B1530E88F51D192BFFF0AD89FAFA360
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uNDp5ZeL20L3HMAdqvOwlxvBosA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/d84d08-4fbc-4094-a556-12bc2407b7ed/1/uNDp5ZeL20L3HMAdqvOwlxvBosA.mft
Manifest number:          087D
Signing time:             Fri 02 Jun 2023 07:49:26 +0000
Manifest this update:     Fri 02 Jun 2023 07:49:26 +0000
Manifest next update:     Sat 03 Jun 2023 07:49:26 +0000
Files and hashes:         1: uNDp5ZeL20L3HMAdqvOwlxvBosA.crl (hash: Y5FdjbWlqJ48pvE+RRNTCZ131fRV7ZON/y6mooYG74k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:7b:15:30:e8:8f:51:d1:92:bf:ff:0a:d8:9f:af:a3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8d0e9e5978bdb42f71cc01daaf3b0971bc1a2c0
        Validity
            Not Before: Jun  2 07:49:26 2023 GMT
            Not After : Jun  3 07:49:26 2023 GMT
        Subject: CN=fccf21bbfb74506967edc92d9d682aca244c9bbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:55:35:d7:b9:ae:34:70:e2:09:b6:31:14:ce:
                    95:34:15:38:16:d9:c1:3d:2b:29:8e:3b:d1:5d:7c:
                    f7:bb:2e:91:ae:fe:4e:20:8d:a8:d1:4e:fc:d9:92:
                    a4:51:28:d9:22:c2:59:0d:85:b1:0c:26:41:e6:f3:
                    23:b9:ee:be:7d:6c:ba:25:e8:be:02:eb:84:bb:cd:
                    31:5e:19:a2:a3:1e:d1:be:65:b7:49:2c:e3:40:15:
                    61:7f:f5:a2:3e:2d:eb:89:6b:0c:e5:e4:87:d1:74:
                    45:36:be:28:dc:9f:f7:95:9d:04:3b:51:0d:08:f4:
                    06:4d:27:59:92:9c:8c:24:30:1d:78:46:4b:27:6c:
                    65:b2:b1:31:5d:58:3f:27:dd:8d:3f:d4:31:e5:eb:
                    37:8b:22:1a:50:9f:b0:0d:21:89:c5:77:d0:b9:d7:
                    82:87:c6:a3:38:b5:57:22:d7:02:fd:63:1d:4f:e7:
                    e5:83:fb:d3:9e:96:fb:f5:79:f2:57:9e:76:2c:c3:
                    6a:2d:27:7c:f4:09:3d:e7:c9:0d:c6:a9:37:c6:46:
                    74:3c:86:7e:94:65:4f:03:2d:5f:07:e9:f6:c4:b7:
                    c7:4e:12:b0:67:88:85:bf:14:c4:89:5d:1f:33:5d:
                    b1:af:76:6d:49:93:b5:71:6c:3a:27:93:92:17:85:
                    93:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:CF:21:BB:FB:74:50:69:67:ED:C9:2D:9D:68:2A:CA:24:4C:9B:BC
            X509v3 Authority Key Identifier:
                keyid:B8:D0:E9:E5:97:8B:DB:42:F7:1C:C0:1D:AA:F3:B0:97:1B:C1:A2:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNDp5ZeL20L3HMAdqvOwlxvBosA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/d84d08-4fbc-4094-a556-12bc2407b7ed/1/uNDp5ZeL20L3HMAdqvOwlxvBosA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/d84d08-4fbc-4094-a556-12bc2407b7ed/1/uNDp5ZeL20L3HMAdqvOwlxvBosA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:fe:51:b5:a7:ae:79:de:ea:b4:04:f8:4e:4b:1a:58:04:86:
         21:6b:2f:6e:16:13:92:bf:55:6a:f4:2d:1b:d8:84:92:00:61:
         c0:89:c4:c0:58:94:63:f7:42:a1:69:a2:fb:09:2d:1e:36:c8:
         f8:6e:67:a6:6f:75:92:ad:d2:c3:98:55:a0:02:ae:74:04:c1:
         12:14:df:16:a4:11:5e:4c:e0:4b:f3:fd:b6:c7:4a:e5:31:c4:
         bd:46:9f:5d:65:bc:75:ae:b3:ac:1f:a8:07:a0:6c:ce:75:43:
         dd:fc:70:77:e4:4c:80:23:09:02:d7:d1:f9:ea:48:06:88:50:
         75:99:37:65:41:1a:13:7c:e3:c2:25:eb:ca:40:48:20:21:d9:
         c6:e1:a5:51:62:68:59:f9:0a:4a:ef:26:a9:14:e3:30:9f:04:
         9c:31:ad:08:25:d8:9b:88:3e:b8:53:d4:50:87:09:23:a0:4b:
         be:8b:f2:16:de:23:09:6f:27:6e:70:33:d6:b4:31:15:2b:6d:
         e4:4d:79:57:4d:59:b7:86:89:a2:a5:77:9c:c4:2c:31:fe:3e:
         14:de:97:22:d9:a1:3c:54:f0:63:4f:b3:0b:48:6a:79:97:1a:
         c7:ed:66:9f:26:8d:14:2a:74:49:de:a1:91:6a:d1:9a:b4:9a:
         a3:cf:37:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:47:28 2025 by rpki-client