Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
File:                     aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft (raw, json)
Hash identifier:          AW8IBlT2L2up6ulvW5JQUtmcsLQV4IyNvWprdW6n+Jk=
Subject key identifier:   C4:5E:5D:64:63:E2:68:4F:83:F6:41:8A:65:57:EB:AA:FF:FC:CF:91
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Certificate issuer:       /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial:       0194BD853A42D4440B7DD3C41A2AEE019FBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
Manifest number:          06AC
Signing time:             Fri 31 Jan 2025 18:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:12 +0000
Files and hashes:         1: aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl (hash: 0L3X1RtyLCNZOtzRD6O01iO8RQWH6phEmV5G+scyQ8g=)
                          2: uPEejKeFHwtXb-AtaoWRNmQjDGA.roa (hash: v3yjbG7P5ZTU4wRZpuwJQttHEpL//NSRVp6n0qXaPGc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:3a:42:d4:44:0b:7d:d3:c4:1a:2a:ee:01:9f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
        Validity
            Not Before: Jan 31 18:00:12 2025 GMT
            Not After : Feb  1 18:00:12 2025 GMT
        Subject: CN=c45e5d6463e2684f83f6418a6557ebaafffccf91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:53:e4:5d:3c:c5:43:89:b6:12:38:c0:80:66:
                    0a:97:70:01:65:7b:f7:2d:0a:9e:bb:de:34:fe:66:
                    ba:c9:93:50:cb:de:0b:fd:44:2f:c2:e5:8d:f2:d1:
                    31:2c:42:f4:d3:72:1f:8f:2c:4a:b6:0c:62:4c:00:
                    58:d1:a1:3d:2e:fc:c9:b6:bd:fc:46:59:50:09:d9:
                    6f:25:04:21:51:4d:35:55:cb:73:68:48:16:f2:cb:
                    02:8c:0a:bb:7e:14:1d:74:ae:46:50:06:d8:46:69:
                    d6:9a:63:09:d2:d6:96:16:0b:2b:bf:20:c3:83:b9:
                    8c:c0:bd:28:77:b5:2c:61:be:95:20:90:dd:ff:d4:
                    49:ac:d7:80:b0:9b:f4:16:fd:8c:32:f8:3b:1f:89:
                    08:ca:5c:3c:f5:73:af:d5:92:13:38:88:d9:fb:a5:
                    69:ce:d5:57:3f:87:75:0f:48:92:3d:17:c7:d0:93:
                    42:96:4c:5f:92:55:35:8f:a7:a1:77:5a:fa:83:41:
                    45:56:c3:f1:7f:41:81:91:6c:78:1e:0e:34:8c:0b:
                    ea:34:5e:e6:38:23:39:ae:e7:a2:58:7f:f3:6e:f7:
                    1a:11:9d:16:f6:f3:3a:ed:2a:2c:67:12:c7:c5:b2:
                    23:8a:7f:57:ae:a3:4c:44:ad:f5:df:a5:ff:f4:0d:
                    ba:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5E:5D:64:63:E2:68:4F:83:F6:41:8A:65:57:EB:AA:FF:FC:CF:91
            X509v3 Authority Key Identifier:
                keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:e5:f3:d3:64:6a:32:55:55:c9:ea:fd:4c:87:6a:d6:31:bf:
         c7:e2:1c:22:16:de:2c:eb:4e:ce:72:63:2a:f5:13:c7:98:83:
         f0:3b:ed:14:7e:d5:07:5b:84:b0:f4:ec:10:cf:a8:1c:fa:ef:
         2b:bd:f9:e9:0d:35:b6:9e:57:68:e2:e4:ff:cb:53:89:86:a1:
         1a:ec:2d:70:51:ff:b8:7b:d9:ca:c4:e3:32:3e:a0:70:db:4d:
         f2:03:72:d9:00:6b:9d:57:9c:c6:72:df:80:8f:74:07:4d:54:
         f2:41:b0:4c:ac:3e:18:06:18:76:08:43:49:14:73:73:a8:43:
         1c:ef:a2:1d:6d:1c:ac:87:16:72:a8:e2:38:8e:d8:49:0e:a0:
         df:6f:a0:1e:a3:8f:2f:3c:c7:7e:b6:7f:3e:ca:15:86:6d:fb:
         02:82:7b:05:de:2a:a3:56:23:fc:54:43:9f:2e:8f:fe:e9:a1:
         52:f1:1c:95:9e:3d:0f:b0:56:6f:dc:82:36:b2:87:c5:27:70:
         d1:48:7d:03:bd:d1:b5:f4:08:77:48:9d:92:22:99:03:89:06:
         ef:bb:b9:bf:99:75:fb:85:26:7d:8d:43:21:ce:2c:f0:8d:45:
         3a:b4:b2:7d:96:c7:71:b1:7a:ae:f6:75:7e:49:61:da:43:a7:
         e4:f1:5c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:57:51 2025 by rpki-client