Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.mft
File:                     V9ChyazkChsBcJn_Y-Tgh-scvds.mft (raw, json)
Hash identifier:          Xnd46R9Woaz35YE/xMVJuoXwRrpptFREuZ1R2aCkJqQ=
Subject key identifier:   95:4E:9B:20:04:40:CE:A0:FC:5C:88:34:E3:9B:24:A0:14:77:57:32
Authority key identifier: 57:D0:A1:C9:AC:E4:0A:1B:01:70:99:FF:63:E4:E0:87:EB:1C:BD:DB
Certificate issuer:       /CN=57d0a1c9ace40a1b017099ff63e4e087eb1cbddb
Certificate serial:       0194BD4EB1D315F089A2740B3DD9F8D1626C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9ChyazkChsBcJn_Y-Tgh-scvds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.mft
Manifest number:          02CA
Signing time:             Fri 31 Jan 2025 17:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:38 +0000
Files and hashes:         1: V9ChyazkChsBcJn_Y-Tgh-scvds.crl (hash: TT+xo5Xlirp6TW5NX+D3GgIYwR84ej7hsQAFBJlDgsg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:b1:d3:15:f0:89:a2:74:0b:3d:d9:f8:d1:62:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d0a1c9ace40a1b017099ff63e4e087eb1cbddb
        Validity
            Not Before: Jan 31 17:00:38 2025 GMT
            Not After : Feb  1 17:00:38 2025 GMT
        Subject: CN=954e9b200440cea0fc5c8834e39b24a014775732
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c3:ad:f4:d2:2c:0a:ac:5e:62:37:44:84:ee:
                    c5:e5:b0:92:be:40:db:3f:6b:00:88:dc:8e:97:a4:
                    f8:cf:e8:70:77:d3:77:d0:1d:a4:ee:de:89:17:e6:
                    2e:9a:92:33:2a:e9:2a:6e:69:9c:cd:24:60:98:ce:
                    db:0a:c2:2b:df:61:2f:e9:30:80:cf:45:89:3d:71:
                    4f:60:4d:8b:2e:3c:59:4e:d1:ea:30:53:76:76:6e:
                    ff:2a:52:23:42:a3:34:df:2c:e1:04:6a:8c:61:e8:
                    7d:af:c7:89:a7:f3:9d:db:ba:dd:3d:3e:d7:20:39:
                    b6:7f:3b:c2:8c:cd:a9:15:01:49:e1:aa:28:59:d2:
                    82:7d:5c:46:ab:b5:b5:66:72:9c:47:74:f2:9c:08:
                    a8:86:b5:81:da:04:64:52:35:eb:5c:d7:51:56:5c:
                    11:8b:68:3e:38:74:52:be:48:55:d6:8c:da:5e:dc:
                    2b:ed:6a:c9:8e:1c:94:5e:3d:41:f3:ec:5e:44:e3:
                    31:b7:74:25:a7:dd:d5:da:b4:02:f6:da:35:8f:2e:
                    bf:09:72:61:e6:f0:d6:df:b1:be:65:a4:cd:3f:62:
                    53:47:de:e1:df:47:92:36:8e:53:a8:a7:ce:dc:a9:
                    89:47:cb:16:d5:d4:11:40:0f:14:6c:c7:9b:bc:c1:
                    f5:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4E:9B:20:04:40:CE:A0:FC:5C:88:34:E3:9B:24:A0:14:77:57:32
            X509v3 Authority Key Identifier:
                keyid:57:D0:A1:C9:AC:E4:0A:1B:01:70:99:FF:63:E4:E0:87:EB:1C:BD:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9ChyazkChsBcJn_Y-Tgh-scvds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/f8d3da-30e7-43b3-a9ed-43428a86f8e8/1/V9ChyazkChsBcJn_Y-Tgh-scvds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:d4:80:86:6e:fb:f5:9f:22:e4:f3:d9:1f:e4:aa:84:b3:cb:
         8a:32:d9:83:96:b6:f8:d9:a6:41:5c:0d:24:87:66:d6:8a:97:
         77:7d:1a:b2:6b:d4:67:ee:dc:d1:b6:9f:37:df:e8:d9:0d:0b:
         c3:25:22:31:67:2e:2c:d1:f1:69:12:09:48:32:5f:ac:c0:08:
         cd:f2:73:79:64:15:66:bb:55:2b:2c:01:d3:2b:2d:07:aa:f7:
         96:58:34:78:8e:76:ef:b9:8c:fa:74:aa:4f:19:ff:28:4f:7b:
         65:9b:65:a9:de:e5:91:98:46:47:8f:12:33:f6:29:db:46:63:
         95:5e:ab:bc:b4:8a:4a:3b:76:fa:ef:78:e3:c7:d9:8d:64:6b:
         8e:ea:22:20:c7:fa:95:66:bb:f0:33:13:78:ed:e4:16:72:26:
         2e:33:bf:c8:61:73:ee:68:a8:4b:32:53:96:16:8c:ba:d2:6b:
         2a:a1:ec:4f:8a:13:2f:b6:17:b2:0f:39:cf:c4:6f:70:52:6c:
         7d:36:08:8c:25:1b:66:ca:80:bd:7c:88:1c:87:6b:fc:e9:81:
         5e:c2:b4:08:56:c6:96:85:ed:6f:f9:72:2f:9f:a6:5d:1c:3f:
         48:4a:70:50:6f:2f:d5:b2:0d:8e:a3:71:3c:34:70:b0:ee:b6:
         3b:02:f1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:01 2025 by rpki-client