Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/f18dc8-4b31-452e-8cda-e5147def442f/1/uml1dABOCzmBlqVij_2dwbFap30.mft
File:                     uml1dABOCzmBlqVij_2dwbFap30.mft (raw, json)
Hash identifier:          23O255v1MNrEINZdLhO0eegNmqJrl90VqzpWMq7142s=
Subject key identifier:   48:93:53:63:DC:B4:91:AF:A6:48:CC:9C:2F:24:DC:86:79:5D:ED:C2
Authority key identifier: BA:69:75:74:00:4E:0B:39:81:96:A5:62:8F:FD:9D:C1:B1:5A:A7:7D
Certificate issuer:       /CN=ba697574004e0b398196a5628ffd9dc1b15aa77d
Certificate serial:       018EC585ABA3462A8D94E3C83C2B61BA425B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uml1dABOCzmBlqVij_2dwbFap30.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/f18dc8-4b31-452e-8cda-e5147def442f/1/uml1dABOCzmBlqVij_2dwbFap30.mft
Manifest number:          106F
Signing time:             Wed 10 Apr 2024 01:00:55 +0000
Manifest this update:     Wed 10 Apr 2024 01:00:55 +0000
Manifest next update:     Thu 11 Apr 2024 01:00:55 +0000
Files and hashes:         1: uml1dABOCzmBlqVij_2dwbFap30.crl (hash: KeEkKklIlxr8lM1JTWu9yzfmm5LZ+6qCHrWjowsdprQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8e:c5:85:ab:a3:46:2a:8d:94:e3:c8:3c:2b:61:ba:42:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba697574004e0b398196a5628ffd9dc1b15aa77d
        Validity
            Not Before: Apr 10 01:00:55 2024 GMT
            Not After : Apr 11 01:00:55 2024 GMT
        Subject: CN=48935363dcb491afa648cc9c2f24dc86795dedc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3b:f4:55:be:63:b2:d9:07:ae:fa:23:69:18:
                    6a:61:23:f3:1a:65:2f:da:cf:f0:a3:af:97:ed:e6:
                    05:8e:1d:7f:cf:00:38:07:af:3f:1c:24:01:d6:05:
                    b4:3f:a8:31:de:08:cb:ac:cc:bc:b9:d8:3c:19:f3:
                    9a:9a:ef:44:f1:58:09:f5:30:3f:41:cb:95:70:21:
                    73:00:95:fb:db:6e:62:2d:9b:9e:17:c7:ef:45:b8:
                    a4:e4:65:04:55:63:73:a7:8c:83:69:98:9f:07:23:
                    19:8e:33:b4:4f:6c:4f:d9:db:26:88:00:e7:5f:4c:
                    55:1e:f1:e6:08:15:c4:c2:92:5a:73:b2:0d:05:92:
                    d6:84:ec:f5:f4:a3:12:7c:c7:1d:af:57:9a:aa:cc:
                    23:4f:53:c3:25:d6:6c:eb:ed:94:d0:e8:37:0b:9e:
                    79:ef:40:ec:9b:e4:c8:2b:ed:81:75:7e:e0:35:38:
                    16:6d:6a:3e:bb:b1:49:85:6d:e5:2e:21:69:51:33:
                    44:42:5e:2d:7b:39:fa:63:8e:6e:1d:25:42:9d:8b:
                    13:f0:3a:f2:51:e4:2e:fb:7f:48:0c:e8:fb:42:8a:
                    b3:96:f2:d0:cd:d6:2d:2b:d8:24:ee:bb:d9:f4:75:
                    9d:1a:83:9b:d3:6e:55:63:e8:68:c1:1e:6e:1c:c1:
                    b6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:93:53:63:DC:B4:91:AF:A6:48:CC:9C:2F:24:DC:86:79:5D:ED:C2
            X509v3 Authority Key Identifier:
                keyid:BA:69:75:74:00:4E:0B:39:81:96:A5:62:8F:FD:9D:C1:B1:5A:A7:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uml1dABOCzmBlqVij_2dwbFap30.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f18dc8-4b31-452e-8cda-e5147def442f/1/uml1dABOCzmBlqVij_2dwbFap30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/f18dc8-4b31-452e-8cda-e5147def442f/1/uml1dABOCzmBlqVij_2dwbFap30.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:7b:ce:09:7f:05:d0:66:0a:d7:b6:90:d9:04:03:64:bf:da:
         4f:b7:01:35:0a:d4:40:84:72:16:a4:33:3e:11:e7:42:db:59:
         11:e7:c2:9c:0e:14:29:24:db:7e:c9:a3:64:fd:59:0d:15:68:
         66:41:1b:4b:7c:8a:d1:06:fd:da:a1:69:09:43:8f:92:9e:5c:
         8b:3e:a7:80:e6:1f:41:e8:17:e0:e6:80:72:51:cd:bf:80:4c:
         0a:95:83:79:93:7b:a1:ed:04:f5:17:06:cf:bf:a0:2e:09:08:
         b6:ac:e1:49:e3:85:8e:8c:85:09:91:cf:34:81:41:f4:0f:21:
         66:cf:1e:54:4e:25:28:55:f0:6c:47:36:0b:7b:05:fc:08:1d:
         a8:58:bf:34:19:23:48:ca:85:f9:1a:42:e0:1a:85:e8:5b:5c:
         61:b2:f6:8a:cd:be:3b:b7:97:b2:da:26:67:09:ca:72:13:be:
         9e:46:97:3f:b9:d8:49:aa:42:a7:8e:52:7c:d9:86:5f:f9:73:
         8e:43:52:c0:0e:f6:ef:1d:8f:0f:85:0d:c7:9a:6a:28:48:71:
         e4:7a:b8:76:57:5f:85:9e:20:b9:4e:e3:4f:b1:b5:fd:60:d0:
         77:d2:5a:0e:82:88:e1:2b:c4:68:a4:f5:3e:e3:18:8d:a9:af:
         6c:98:9e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:44 2025 by rpki-client