Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
File:                     uMaM2mX2aWLMuWg_FVDRTlYQego.mft (raw, json)
Hash identifier:          HnllAXh6DzoWQvO7cajA76rb3Bcd7Cxt4TiVCJGXmEg=
Subject key identifier:   93:99:5C:73:C1:14:78:B2:B9:AD:26:85:8D:83:16:A0:B8:1D:99:68
Authority key identifier: B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A
Certificate issuer:       /CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
Certificate serial:       0195E07D4A01AA88E2AA2CB8D178CD839944
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft
Manifest number:          05D0
Signing time:             Sat 29 Mar 2025 06:01:02 +0000
Manifest this update:     Sat 29 Mar 2025 06:01:02 +0000
Manifest next update:     Sun 30 Mar 2025 06:01:02 +0000
Files and hashes:         1: sIDOXg67yEuo_7naS_BfCVLmcEk.roa (hash: d8agrpVd7dmHrJl/IhvjPgn5Td9Dpm4TU3p5w1Cxjt0=)
                          2: uMaM2mX2aWLMuWg_FVDRTlYQego.crl (hash: jxI87ioAsqnO3vLb8C+PJ2Rk61mVG1zsf/BWkXSAO48=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:4a:01:aa:88:e2:aa:2c:b8:d1:78:cd:83:99:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8c68cda65f66962ccb9683f1550d14e56107a0a
        Validity
            Not Before: Mar 29 06:01:02 2025 GMT
            Not After : Mar 30 06:01:02 2025 GMT
        Subject: CN=93995c73c11478b2b9ad26858d8316a0b81d9968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b0:4c:a5:19:bc:d3:5f:e8:b7:cd:8c:43:a4:
                    67:ef:29:34:6a:14:49:3c:8e:7f:95:6b:05:92:c7:
                    77:e4:8f:46:39:de:d3:bc:b5:2c:6e:86:85:d4:7c:
                    6a:54:64:41:fa:a3:76:5c:7e:68:2b:a8:99:53:88:
                    10:1e:d5:1f:84:76:8c:08:c3:07:2c:84:30:ef:53:
                    7e:59:df:2b:d2:ee:fa:f8:74:00:43:a4:51:e3:29:
                    60:86:1e:86:46:9b:02:8b:af:a0:56:cf:5c:7d:4e:
                    88:8a:00:13:e2:76:a5:2a:d6:99:74:ce:da:d6:68:
                    6b:64:3b:9c:12:00:b0:40:24:4f:53:03:d3:3e:98:
                    b2:26:bb:5e:db:2b:bf:5a:04:45:3e:47:7e:07:2d:
                    5b:a3:48:81:a9:cc:97:c6:9f:76:cd:1a:63:15:9c:
                    d2:9d:66:3b:6d:70:f2:0e:d2:a1:0a:dc:09:f0:6b:
                    a3:d7:0a:f7:10:6d:2f:e5:a5:da:15:63:0b:c7:3d:
                    75:d7:17:e5:eb:82:1c:34:54:61:69:03:93:6d:5f:
                    94:ad:7b:48:2f:56:06:7d:4e:32:65:db:d7:a5:bc:
                    9a:cd:4a:61:32:bc:8e:53:2f:95:ff:45:72:43:64:
                    b2:99:7d:0a:3f:67:67:e3:31:43:4b:0e:cc:83:b0:
                    65:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:99:5C:73:C1:14:78:B2:B9:AD:26:85:8D:83:16:A0:B8:1D:99:68
            X509v3 Authority Key Identifier:
                keyid:B8:C6:8C:DA:65:F6:69:62:CC:B9:68:3F:15:50:D1:4E:56:10:7A:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMaM2mX2aWLMuWg_FVDRTlYQego.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/107788-8502-4541-9480-8f48a3702f90/1/uMaM2mX2aWLMuWg_FVDRTlYQego.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:81:39:64:ff:fe:3c:5d:67:9d:eb:ab:91:dd:5d:8f:ca:32:
         14:5e:84:5f:0d:05:38:da:88:e5:01:bd:53:82:fd:0c:59:99:
         56:17:a6:9e:80:03:ed:63:43:42:d2:57:04:83:d4:7d:f6:9a:
         43:4f:04:58:22:fc:58:0e:b1:81:0d:95:b8:0c:89:d0:94:c6:
         52:2c:a6:3d:59:12:f3:d5:e0:48:df:d7:10:47:93:91:98:18:
         45:88:0a:94:9e:c3:9c:21:70:17:1b:a5:9e:82:69:c3:28:34:
         0c:87:2c:63:21:74:6f:1c:8b:e1:67:dc:32:21:a8:81:34:43:
         a5:d9:71:d1:4c:8a:f9:80:5f:43:6a:d3:50:a2:df:24:c1:f4:
         be:e5:a3:3b:cf:b2:e4:26:4e:62:e5:79:cf:7f:01:f1:4e:d1:
         e5:34:23:72:cf:7f:a5:aa:a3:fc:70:d2:43:ea:53:4f:50:57:
         e9:b5:f3:0b:a4:9c:38:4a:b1:94:80:ad:51:83:5c:2a:60:18:
         da:52:0b:54:c7:37:80:f6:a7:83:fa:1f:37:89:92:29:c4:49:
         a6:9e:87:55:dd:b8:ab:f1:0e:50:ec:ad:61:91:1d:c5:48:97:
         90:4c:a8:49:f1:68:0c:90:85:af:c4:1b:f9:b2:a6:4a:bc:21:
         3e:1b:0e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:35:11 2025 by rpki-client