Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/33635f-dbf6-4c7b-b121-8bc862da75dc/1/UOx05wUaRQngxSWDoJKY2umJ2MU.mft
File:                     UOx05wUaRQngxSWDoJKY2umJ2MU.mft (raw, json)
Hash identifier:          e8/KdE5iT+DUA4sD6wjRYTIu0dDI8c3MCciMHa3k4Xw=
Subject key identifier:   27:E5:09:0F:BC:08:AB:47:CA:37:2F:8F:B8:00:A3:B3:00:3D:21:39
Authority key identifier: 50:EC:74:E7:05:1A:45:09:E0:C5:25:83:A0:92:98:DA:E9:89:D8:C5
Certificate issuer:       /CN=50ec74e7051a4509e0c52583a09298dae989d8c5
Certificate serial:       01948EBE8589DBC40A537944B3C54F4D6E2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UOx05wUaRQngxSWDoJKY2umJ2MU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a6/33635f-dbf6-4c7b-b121-8bc862da75dc/1/UOx05wUaRQngxSWDoJKY2umJ2MU.mft
Manifest number:          07E9
Signing time:             Wed 22 Jan 2025 16:00:38 +0000
Manifest this update:     Wed 22 Jan 2025 16:00:38 +0000
Manifest next update:     Thu 23 Jan 2025 16:00:38 +0000
Files and hashes:         1: OFKH6RWYni8g7dCErAvCVIfM35A.roa (hash: JShFAKBMuaSDsVuDz+6PF2EsnypF1Aa7wfPAYEYwHU8=)
                          2: UOx05wUaRQngxSWDoJKY2umJ2MU.crl (hash: r4TBULRXgiK8ep9tVp23SdRFEuDCT+FliqJX3OAkFSk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:8e:be:85:89:db:c4:0a:53:79:44:b3:c5:4f:4d:6e:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50ec74e7051a4509e0c52583a09298dae989d8c5
        Validity
            Not Before: Jan 22 16:00:38 2025 GMT
            Not After : Jan 23 16:00:38 2025 GMT
        Subject: CN=27e5090fbc08ab47ca372f8fb800a3b3003d2139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:61:55:e9:1d:7a:20:1f:9a:59:64:06:9d:7c:
                    ef:7f:3b:2d:de:76:f9:f4:91:fa:01:92:7d:ba:22:
                    7a:0b:1f:b9:42:98:de:08:03:8d:73:b6:03:16:00:
                    a2:20:b4:f4:47:fa:13:85:5d:fc:dd:38:51:5c:1d:
                    11:c5:10:da:7e:9e:a6:63:af:c3:6c:5d:e7:a8:d2:
                    2f:ce:b7:bb:48:f3:64:dc:d9:bb:c2:f8:bc:46:57:
                    00:b7:18:b5:ec:66:92:1d:92:1f:de:10:5b:03:d3:
                    38:b7:1f:a8:0d:21:8a:e2:a0:e5:c8:b2:9f:23:6d:
                    8d:20:c8:82:14:93:14:a0:5f:83:a0:08:ff:22:f2:
                    71:4c:56:10:65:65:d8:68:87:ab:b2:50:e4:3a:b4:
                    fa:75:5d:88:fb:f8:44:f1:32:10:b0:8f:37:cd:18:
                    4a:c3:58:f2:86:0d:97:76:8a:bb:ce:ff:e5:a9:cc:
                    93:76:c8:7f:9f:fa:81:0b:58:9c:78:d0:25:90:e5:
                    86:0b:61:65:4a:11:bc:e9:18:22:5f:ab:9c:0e:7d:
                    fb:9d:ae:4f:bf:eb:94:e9:89:40:8b:92:c2:a3:43:
                    ec:9d:bd:64:ea:9a:59:b1:89:ac:e1:31:81:0d:09:
                    99:f9:7a:8e:d9:1c:e6:d4:a7:63:74:12:a8:ed:fd:
                    e3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E5:09:0F:BC:08:AB:47:CA:37:2F:8F:B8:00:A3:B3:00:3D:21:39
            X509v3 Authority Key Identifier:
                keyid:50:EC:74:E7:05:1A:45:09:E0:C5:25:83:A0:92:98:DA:E9:89:D8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOx05wUaRQngxSWDoJKY2umJ2MU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/33635f-dbf6-4c7b-b121-8bc862da75dc/1/UOx05wUaRQngxSWDoJKY2umJ2MU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/33635f-dbf6-4c7b-b121-8bc862da75dc/1/UOx05wUaRQngxSWDoJKY2umJ2MU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5b:d2:53:30:17:ed:80:c2:b6:04:d5:57:32:28:a5:8b:86:
         dc:24:48:ac:5a:98:6a:ab:3c:01:b7:5f:b5:71:bf:03:fd:aa:
         62:ed:21:05:78:3f:cd:13:74:19:9f:6c:f2:49:31:90:cd:ea:
         1c:07:0e:9b:c3:31:11:b5:f7:e0:8c:5a:47:24:7c:e9:b7:60:
         64:dd:8d:b1:fd:5f:da:d0:86:83:51:c8:63:5d:7c:f6:01:82:
         5e:06:33:ee:f3:a7:ab:ea:5f:9a:57:b5:e9:71:8d:92:86:a9:
         1e:61:39:6e:02:96:74:1e:32:f6:f2:d3:da:b8:20:2b:a0:79:
         b4:75:59:53:c7:de:f4:30:e7:02:89:c5:aa:df:b9:95:90:87:
         bc:1c:cf:ee:1f:86:68:85:c0:f6:8e:01:b6:8b:9f:c3:18:d6:
         9d:67:b0:22:b2:51:5b:8a:eb:ad:af:fd:ae:81:cf:ef:98:6a:
         10:90:bb:27:3e:24:8f:f2:45:f4:a5:6a:f6:86:76:87:bd:ee:
         5a:9c:4b:74:d7:73:53:08:d1:c0:33:ca:26:08:08:6a:02:8d:
         8a:a0:75:bb:35:15:97:d9:bc:a5:b4:ee:5c:7b:93:b1:df:80:
         ee:8b:01:e0:00:88:6a:9f:fe:d2:30:54:aa:7b:2c:45:60:d7:
         5b:84:d8:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZSOvoWJ28QKU3lEs8VPTW4uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZWM3NGU3MDUxYTQ1MDllMGM1MjU4M2EwOTI5OGRhZTk4
OWQ4YzUwHhcNMjUwMTIyMTYwMDM4WhcNMjUwMTIzMTYwMDM4WjAzMTEwLwYDVQQD
EygyN2U1MDkwZmJjMDhhYjQ3Y2EzNzJmOGZiODAwYTNiMzAwM2QyMTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmFV6R16IB+aWWQGnXzvfzst3nb5
9JH6AZJ9uiJ6Cx+5QpjeCAONc7YDFgCiILT0R/oThV383ThRXB0RxRDafp6mY6/D
bF3nqNIvzre7SPNk3Nm7wvi8RlcAtxi17GaSHZIf3hBbA9M4tx+oDSGK4qDlyLKf
I22NIMiCFJMUoF+DoAj/IvJxTFYQZWXYaIerslDkOrT6dV2I+/hE8TIQsI83zRhK
w1jyhg2Xdoq7zv/lqcyTdsh/n/qBC1iceNAlkOWGC2FlShG86RgiX6ucDn37na5P
v+uU6YlAi5LCo0Psnb1k6ppZsYms4TGBDQmZ+XqO2Rzm1KdjdBKo7f3j6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCflCQ+8CKtHyjcvj7gAo7MAPSE5MB8GA1UdIwQY
MBaAFFDsdOcFGkUJ4MUlg6CSmNrpidjFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU94MDV3VWFSUW5neFNXRG9KS1kydW1KMk1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMzYzNWYtZGJmNi00YzdiLWIxMjEt
OGJjODYyZGE3NWRjLzEvVU94MDV3VWFSUW5neFNXRG9KS1kydW1KMk1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zMzYzNWYtZGJmNi00YzdiLWIxMjEtOGJjODYyZGE3NWRj
LzEvVU94MDV3VWFSUW5neFNXRG9KS1kydW1KMk1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFvSUzAX
7YDCtgTVVzIopYuG3CRIrFqYaqs8AbdftXG/A/2qYu0hBXg/zRN0GZ9s8kkxkM3q
HAcOm8MxEbX34IxaRyR86bdgZN2Nsf1f2tCGg1HIY1189gGCXgYz7vOnq+pfmle1
6XGNkoapHmE5bgKWdB4y9vLT2rggK6B5tHVZU8fe9DDnAonFqt+5lZCHvBzP7h+G
aIXA9o4BtoufwxjWnWewIrJRW4rrra/9roHP75hqEJC7Jz4kj/JF9KVq9oZ2h73u
WpxLdNdzUwjRwDPKJggIagKNiqB1uzUVl9m8pbTuXHuTsd+A7osB4ACIap/+0jBU
qnssRWDXW4TY3w==
-----END CERTIFICATE-----
Generated at Thu Jan 23 19:15:56 2025 by rpki-client on console.sobornost.net