Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1336d4-4281-4763-af29-47fe9c7a4d84/1/ugTbL8sMW1VlHxwbu02Vx0VXjc8.mft
File:                     ugTbL8sMW1VlHxwbu02Vx0VXjc8.mft (raw, json)
Hash identifier:          oYMqmh0Au5cuCHFr6SszMJ9JkHvFEv+i3CsQSHQ4P3U=
Subject key identifier:   34:D9:1C:AA:C2:66:9B:EB:4D:EA:7F:FE:18:E4:C5:24:0B:DB:A4:3B
Authority key identifier: BA:04:DB:2F:CB:0C:5B:55:65:1F:1C:1B:BB:4D:95:C7:45:57:8D:CF
Certificate issuer:       /CN=ba04db2fcb0c5b55651f1c1bbb4d95c745578dcf
Certificate serial:       018529439522753BC80CFE47C2EBFE6B2F0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ugTbL8sMW1VlHxwbu02Vx0VXjc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/1336d4-4281-4763-af29-47fe9c7a4d84/1/ugTbL8sMW1VlHxwbu02Vx0VXjc8.mft
Manifest number:          043D
Signing time:             Mon 19 Dec 2022 07:22:52 +0000
Manifest this update:     Mon 19 Dec 2022 07:22:52 +0000
Manifest next update:     Tue 20 Dec 2022 07:22:52 +0000
Files and hashes:         1: 2l0vUoO7jWeMq5OND7FxpauNzdw.roa (hash: FcQBCADKb7L0qwLcPrueSC9FuXOQStumJL4vMPBe/ZQ=)
                          2: Fi06OugObhK_djWzO5jDN1HRsPc.roa (hash: F4fhpHS0DRA/qcTub46cLNXqYgFlBv+KhoFGeHsA4jk=)
                          3: ugTbL8sMW1VlHxwbu02Vx0VXjc8.crl (hash: fljSHspuqDN14+ZMOGqnje/JmrhiauHAO5rfnzY57As=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:85:29:43:95:22:75:3b:c8:0c:fe:47:c2:eb:fe:6b:2f:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba04db2fcb0c5b55651f1c1bbb4d95c745578dcf
        Validity
            Not Before: Dec 19 07:22:52 2022 GMT
            Not After : Dec 20 07:22:52 2022 GMT
        Subject: CN=34d91caac2669beb4dea7ffe18e4c5240bdba43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fb:07:7b:fb:8c:4a:ae:ed:14:9e:ce:0b:62:
                    3d:ba:20:18:b5:97:13:5d:64:54:d2:90:90:c7:9b:
                    4c:0f:8f:fa:fe:7a:ba:56:6f:23:f8:c4:15:ac:20:
                    e4:30:b0:1a:a0:52:cd:c8:b0:ad:d6:73:d5:24:45:
                    e7:11:57:ca:6e:a7:e1:9a:e1:6a:4e:a1:cc:31:80:
                    e6:a8:3b:5d:3c:c3:1d:45:e0:1b:1e:00:f2:3a:0c:
                    09:fd:a3:8f:e2:07:dc:f8:ca:27:30:7d:2f:ca:a3:
                    53:31:77:b2:53:94:99:db:f7:67:cb:81:58:db:50:
                    7d:24:77:0c:b2:27:73:65:34:d2:17:65:e0:1f:f6:
                    c4:56:72:1d:3e:cb:30:17:34:e3:c3:7d:5f:4f:2e:
                    e0:ef:24:36:94:26:8a:6d:f9:0f:32:20:66:98:09:
                    37:be:2b:f9:bc:5a:ef:51:a3:ae:ab:1f:6d:09:7d:
                    9c:9f:36:c3:ad:77:25:2e:b8:cd:63:fd:6a:6b:e1:
                    d6:43:d1:b9:53:cf:4f:60:ba:73:57:13:d1:0f:28:
                    9c:21:25:90:fa:71:57:b8:fa:1b:56:f2:d8:b4:32:
                    a0:70:15:41:7f:10:f0:68:5c:0e:a5:03:b7:b4:67:
                    7d:38:5b:1b:d5:70:20:2a:ed:e0:5b:9c:06:5b:9b:
                    68:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D9:1C:AA:C2:66:9B:EB:4D:EA:7F:FE:18:E4:C5:24:0B:DB:A4:3B
            X509v3 Authority Key Identifier:
                keyid:BA:04:DB:2F:CB:0C:5B:55:65:1F:1C:1B:BB:4D:95:C7:45:57:8D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ugTbL8sMW1VlHxwbu02Vx0VXjc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1336d4-4281-4763-af29-47fe9c7a4d84/1/ugTbL8sMW1VlHxwbu02Vx0VXjc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1336d4-4281-4763-af29-47fe9c7a4d84/1/ugTbL8sMW1VlHxwbu02Vx0VXjc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:1b:59:91:a3:bd:fb:38:9e:e4:28:94:ec:08:8e:e7:e8:08:
         15:4f:1e:9e:6e:34:55:39:a6:36:9e:ff:53:41:35:26:78:6f:
         75:8c:6d:4a:40:a0:bf:1b:d0:a4:ad:83:81:69:ee:a9:be:8c:
         40:2f:7b:11:3f:61:2f:c5:f5:67:30:e9:4a:fe:a6:a9:ec:77:
         d4:c0:4b:61:ea:79:b5:23:3b:f5:c4:c5:21:17:82:74:4f:ef:
         9d:8d:cb:38:71:09:13:2a:ec:f1:bd:3c:ed:52:f0:46:98:ed:
         61:59:bd:e2:c3:de:ef:a3:3b:8b:c3:ff:c5:5f:0b:dd:df:5e:
         74:68:4f:9c:1c:00:11:5e:28:0a:d6:68:a6:30:5b:a4:ef:d9:
         1e:23:7b:5a:2f:6e:86:36:2e:0a:75:1c:37:14:6d:b7:80:a9:
         3a:cc:d3:d7:ed:e5:e7:bd:14:d0:d6:b7:71:fd:5d:6a:d9:15:
         ec:86:63:70:14:a1:e0:ca:5a:10:35:2f:7f:0e:69:6d:63:05:
         b0:03:b2:f0:ef:94:3a:72:6e:3b:ad:5e:d0:e6:a0:68:2b:33:
         a2:4a:7a:89:a7:b5:bd:71:ee:15:0c:dd:48:88:b3:cc:6a:00:
         de:d8:82:05:92:1e:72:30:51:97:08:3a:66:39:86:7c:ee:15:
         a7:dd:b9:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUpQ5UidTvIDP5Hwuv+ay8NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMDRkYjJmY2IwYzViNTU2NTFmMWMxYmJiNGQ5NWM3NDU1
NzhkY2YwHhcNMjIxMjE5MDcyMjUyWhcNMjIxMjIwMDcyMjUyWjAzMTEwLwYDVQQD
EygzNGQ5MWNhYWMyNjY5YmViNGRlYTdmZmUxOGU0YzUyNDBiZGJhNDNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPsHe/uMSq7tFJ7OC2I9uiAYtZcT
XWRU0pCQx5tMD4/6/nq6Vm8j+MQVrCDkMLAaoFLNyLCt1nPVJEXnEVfKbqfhmuFq
TqHMMYDmqDtdPMMdReAbHgDyOgwJ/aOP4gfc+MonMH0vyqNTMXeyU5SZ2/dny4FY
21B9JHcMsidzZTTSF2XgH/bEVnIdPsswFzTjw31fTy7g7yQ2lCaKbfkPMiBmmAk3
viv5vFrvUaOuqx9tCX2cnzbDrXclLrjNY/1qa+HWQ9G5U89PYLpzVxPRDyicISWQ
+nFXuPobVvLYtDKgcBVBfxDwaFwOpQO3tGd9OFsb1XAgKu3gW5wGW5toPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDTZHKrCZpvrTep//hjkxSQL26Q7MB8GA1UdIwQY
MBaAFLoE2y/LDFtVZR8cG7tNlcdFV43PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWdUYkw4c01XMVZsSHh3YnUwMlZ4MFZYamM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8xMzM2ZDQtNDI4MS00NzYzLWFmMjkt
NDdmZTljN2E0ZDg0LzEvdWdUYkw4c01XMVZsSHh3YnUwMlZ4MFZYamM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8xMzM2ZDQtNDI4MS00NzYzLWFmMjktNDdmZTljN2E0ZDg0
LzEvdWdUYkw4c01XMVZsSHh3YnUwMlZ4MFZYamM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeBtZkaO9
+zie5CiU7AiO5+gIFU8enm40VTmmNp7/U0E1JnhvdYxtSkCgvxvQpK2DgWnuqb6M
QC97ET9hL8X1ZzDpSv6mqex31MBLYep5tSM79cTFIReCdE/vnY3LOHEJEyrs8b08
7VLwRpjtYVm94sPe76M7i8P/xV8L3d9edGhPnBwAEV4oCtZopjBbpO/ZHiN7Wi9u
hjYuCnUcNxRtt4CpOszT1+3l570U0Na3cf1datkV7IZjcBSh4MpaEDUvfw5pbWMF
sAOy8O+UOnJuO61e0OagaCszokp6iae1vXHuFQzdSIizzGoA3tiCBZIecjBRlwg6
ZjmGfO4Vp925wA==
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:48:11 2025 by rpki-client