Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
File:                     9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft (raw, json)
Hash identifier:          jkEHlDuSb6GzkmbN5Q1mINYOh4bt5l8JPFJovFss+GM=
Subject key identifier:   DB:4D:F0:8E:75:32:D5:9F:C1:40:88:74:9E:70:DE:6C:CB:1A:57:51
Authority key identifier: F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A
Certificate issuer:       /CN=f58acd43c0033b13b88bb397415583aa51d9303a
Certificate serial:       0194BCAA252C33DF08084BC4328D5E733CA1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft
Manifest number:          09A6
Signing time:             Fri 31 Jan 2025 14:00:54 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:54 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:54 +0000
Files and hashes:         1: 1UQBMdlNIZpuxIjnKkgzjfvJqNM.roa (hash: UTR1XEenqcPOEfPniiaYd7rNcv8miNRFy/ZF8QAlsyg=)
                          2: 7CQK4uvhSVq6o2wWxOh9gTQ5PNA.roa (hash: DkMR/Y4unY7wIHXEWKNCRJfO23Nc5dcWAz953GA+1qE=)
                          3: 9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl (hash: CfnfLZdFcSEZptNy4EYhHw9FpiSjF77Wuf7p4YPWGU0=)
                          4: WeTCj5MkYCzvVik2-EKKBNmp8H4.roa (hash: PNmIO1vYOijeHMCQXtkzfyn0VP6CUVr/x//KeB07G6Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:25:2c:33:df:08:08:4b:c4:32:8d:5e:73:3c:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f58acd43c0033b13b88bb397415583aa51d9303a
        Validity
            Not Before: Jan 31 14:00:54 2025 GMT
            Not After : Feb  1 14:00:54 2025 GMT
        Subject: CN=db4df08e7532d59fc14088749e70de6ccb1a5751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:06:9e:ed:5a:49:39:f1:a9:4d:99:04:d5:d7:
                    2a:b5:08:19:10:17:49:72:64:4d:17:79:24:75:21:
                    94:9f:bf:ac:cc:dd:30:7b:b8:36:13:91:c6:f5:ea:
                    e1:62:78:ce:ca:06:07:92:56:26:02:a9:26:d0:14:
                    10:a0:75:e3:a3:f0:7b:3a:d4:91:bf:96:9f:df:98:
                    a7:27:e0:b9:de:47:c6:b6:0f:cc:01:e2:24:31:51:
                    93:b0:d6:ee:ba:97:f5:c5:1a:b3:b2:c0:f9:3e:4d:
                    38:41:f8:b7:df:9d:ec:ef:5c:d5:7a:8a:99:8e:5a:
                    a0:75:1e:f6:13:6e:df:94:86:91:d2:2a:3e:1a:b3:
                    85:e4:82:3c:79:22:a8:a6:c7:c7:c0:cf:b7:c0:d6:
                    92:44:66:b5:64:2a:9b:61:a4:3a:4c:99:e2:1a:a2:
                    0d:95:9a:99:7d:66:fd:f3:4d:56:3a:67:6f:9b:6b:
                    26:83:7e:d8:94:e4:8c:b4:42:27:59:98:7c:6d:7c:
                    aa:fc:38:49:d9:e7:4c:3f:2d:2e:a7:26:03:3b:1e:
                    3b:ae:64:48:96:b4:66:43:a2:03:70:c2:0f:4a:90:
                    78:98:81:fe:f9:4d:8a:f0:92:a9:50:93:42:3d:72:
                    0e:8e:08:ab:38:14:cb:06:fc:36:82:5a:68:c0:20:
                    f8:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4D:F0:8E:75:32:D5:9F:C1:40:88:74:9E:70:DE:6C:CB:1A:57:51
            X509v3 Authority Key Identifier:
                keyid:F5:8A:CD:43:C0:03:3B:13:B8:8B:B3:97:41:55:83:AA:51:D9:30:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/0e66e9-cf2d-40df-aaae-cf2d58d0e0ee/1/9YrNQ8ADOxO4i7OXQVWDqlHZMDo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:77:22:c9:06:9c:16:d8:c6:9d:b6:a7:c0:c2:ed:0d:91:31:
         3a:d2:eb:f3:fe:64:f9:04:2e:41:6b:20:2e:c4:04:7f:5e:15:
         27:56:90:e7:cb:80:fa:15:4e:ef:d2:69:08:e8:78:1c:ca:83:
         48:6e:00:f3:82:e2:8f:22:66:87:fc:c7:fd:6e:2c:07:03:59:
         91:e7:42:e5:87:af:e7:4e:33:50:10:6f:db:76:43:ed:fb:a0:
         8f:8a:2f:3d:a0:a2:18:ec:9d:03:61:c8:34:ab:90:c0:9e:0b:
         06:94:2f:c6:4a:3d:99:2b:21:3e:44:c3:26:61:df:f8:9b:81:
         4a:62:7d:09:80:2b:c5:03:27:fd:06:a7:da:56:c0:03:fc:c5:
         20:d9:23:4e:cc:15:66:b9:f6:a1:96:4c:97:4e:5c:a6:cf:db:
         99:c0:62:5e:5a:93:9f:6f:f5:43:38:05:c3:05:4b:89:f5:81:
         09:d5:22:d0:83:00:31:6f:d3:0a:84:25:39:74:4a:53:90:4f:
         98:eb:3c:d8:b6:f1:bd:37:aa:8e:e9:ff:97:65:65:0c:11:fd:
         59:a2:90:ca:ec:79:65:79:93:62:29:bb:f7:8a:b3:22:88:30:
         e0:6f:0a:33:7b:4b:01:7c:87:e2:69:70:45:83:37:28:b2:ae:
         43:57:87:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:01 2025 by rpki-client