Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
File:                     9NCKHhy8kJJU6ea5yTn9haJoseE.mft (raw, json)
Hash identifier:          x2HihSpti7Yui5Bq5waFSN/ev8f0+l7DG6oEcVmTjqU=
Subject key identifier:   05:1E:C3:73:9E:E1:8E:BA:AD:95:76:2F:59:31:5C:E7:E5:30:72:DD
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Certificate issuer:       /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial:       0194BCE09FA61C6D44692F9310A174791A26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
Manifest number:          1122
Signing time:             Fri 31 Jan 2025 15:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:25 +0000
Files and hashes:         1: 072eA3yOXEA1OE2I6e2Pm4777BY.roa (hash: 5sOCK4KzhcRVv2G0YND9ow3hkxkvrTwTiUF6vGGuUV4=)
                          2: 1-oV8wOxM52lFBAZelvlJ1ChLVhE.roa (hash: qQM4l/X3SkEZ4h6aGb2fizqmObGG55sXX+NpcuuHKmE=)
                          3: 5DRGkm67v3ztNtkmGE9CjHe6qkM.roa (hash: c8V8b8nhOphSZmzRUJQWFcuzVB0h+VPYqSuF8VwM49s=)
                          4: 7yxzEpwrPvkVtysBCZ9w3NvniME.roa (hash: myjWs4rYeOG9qs0FigCiX4CRWLx91cNiLYd0bOOlv14=)
                          5: 92YX8_mKsRYRDoG9l3vH6epU_24.roa (hash: R3F3U2oxwWbOLay+ACJCalTUQG9HKAHuMPfnBBPm6HM=)
                          6: 9NCKHhy8kJJU6ea5yTn9haJoseE.crl (hash: JTpCEifC9oHdjZuJrHOAIuVSu+jXr61575dTP+PnFhw=)
                          7: KO2tMW1du9dekDI4Y-9_plcBYSk.roa (hash: L0Z21UNOLLnga8zui/KqFlS4YtgeuRJ/OBRssHd9hXE=)
                          8: MNDWfcZ7THpd1V-JitlFbJJvT2k.roa (hash: 8342ttspxabX1GCBeEK5LbRuFU+2GSg8qKL1eSDng9w=)
                          9: S3lKTI5vmKQJ7sGV9BbKEH5uVJ0.roa (hash: QjcGdjUUJbJBH5sbajyx3FmwhlyyHLC6WlagW5FnZUA=)
                          10: XST97aNGZZRqCU4Q2norfi4ndhI.roa (hash: Ej7Bdzjuir9bzqXEX3Za6erR0SRowgGxNRVnC/R3Coo=)
                          11: dDuXmy2-kOiyveIRPNO2zv9O6K4.roa (hash: dIZYpEJfOlH3jzzYUHlsUhacisdYiaRu3PDoh93lXCs=)
                          12: f-WBLlvCqU3gT2U4k2jp9nRYULc.roa (hash: SbHCNZepVf+SJT1VG5+nfS1tN9EtzQEtvMS4oCBecRI=)
                          13: jiF9vHMkWKJpjP76Gux54TKpnzc.roa (hash: CCXc0iW9MVKVYNnO0rxCM2yL2mQD+I1ttQ+9hGTDpvQ=)
                          14: jvpcLjBfXq2k1CyzEi-i4yMMJCg.roa (hash: d6CrkQWol3xr2PKuUL7zdsYsRYcblyvcCYZMvOC8fx8=)
                          15: nuAp8jQeL57cxcv-qMziP5TUwtY.roa (hash: vb4FRcaEF1fztUtawfL6ZNK658gxKBaRE6cvTVdZv2U=)
                          16: w1UWJINQiqIyHaTTFS0euILJR58.roa (hash: jXqC61xJbm2P2p00w1kBmanAbpZq6zjGJCspuExiIe4=)
                          17: zqpTJzjkMeBAU436_oQUMkoSagY.roa (hash: 6dneQ6CCdJzghud6hAgFytvHFfB6EXsArz41JD08zQY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:9f:a6:1c:6d:44:69:2f:93:10:a1:74:79:1a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
        Validity
            Not Before: Jan 31 15:00:25 2025 GMT
            Not After : Feb  1 15:00:25 2025 GMT
        Subject: CN=051ec3739ee18ebaad95762f59315ce7e53072dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c7:1a:94:20:29:5d:68:c5:9e:5d:6b:fb:b9:
                    1d:d6:dd:0f:4c:c8:fe:f1:74:4d:9f:18:7c:5b:8f:
                    65:1a:42:7a:fa:e1:20:56:23:cb:49:f7:d5:e8:d5:
                    b9:ae:89:d5:90:8c:d3:82:b4:79:5b:78:75:3f:3b:
                    1e:24:4f:c6:f5:48:b0:9e:e3:cd:00:82:e1:39:4f:
                    60:fc:8d:fe:3b:75:58:b5:23:c0:a6:f2:31:39:d4:
                    44:19:76:4c:5a:80:e8:db:4a:d0:df:11:10:48:54:
                    e0:c8:23:83:43:4a:0d:59:af:82:f7:69:2b:46:03:
                    02:3d:f2:3f:b2:32:2a:82:4e:4f:60:fa:cd:80:70:
                    15:97:c0:3f:de:97:3c:49:eb:76:6a:34:61:a7:5b:
                    6a:c0:4a:31:bf:84:d4:52:ab:98:4b:99:0d:df:9c:
                    ec:fa:fb:45:76:08:68:51:36:47:98:b7:3a:0f:e3:
                    cf:f2:ee:ec:a7:f7:4c:e3:9c:11:6b:7c:15:d1:d2:
                    a5:83:ae:b6:b8:e3:c2:42:bf:5a:49:10:13:3b:f7:
                    38:1f:a2:1d:77:ac:dc:6f:70:2c:9d:fa:88:58:92:
                    34:0f:1c:c8:cb:b2:52:55:4b:ab:63:96:c0:a8:5f:
                    d1:9e:22:08:a0:b0:47:2d:93:14:6b:4a:a0:4c:7d:
                    04:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:1E:C3:73:9E:E1:8E:BA:AD:95:76:2F:59:31:5C:E7:E5:30:72:DD
            X509v3 Authority Key Identifier:
                keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:02:8b:57:d3:1c:21:0d:0f:67:04:6f:98:eb:5b:5a:b8:dc:
         78:32:41:f0:2a:2b:f8:24:17:b9:b8:c2:db:4a:fa:f3:c4:a7:
         bd:c9:df:70:60:9b:fb:4e:e1:87:45:93:fa:b7:0a:f3:1c:33:
         cd:86:c8:ab:29:8c:f9:75:35:a8:e8:9d:37:d8:67:4f:6f:81:
         e8:c2:f3:72:29:5e:78:a9:c1:e5:d2:fa:1a:f2:9d:dc:eb:36:
         2b:95:c6:76:a7:a8:6f:bf:2d:3f:55:57:7e:f1:5a:3a:76:9b:
         9c:2f:0d:13:6c:e3:0b:4c:70:91:70:88:de:c2:84:f3:2b:22:
         f2:9c:15:de:57:57:0d:48:d4:f3:d0:6b:75:e4:45:a7:6b:27:
         e7:34:34:16:1e:3a:1e:16:20:d7:ca:93:13:fb:97:1e:3e:05:
         91:54:f4:9a:f4:c0:88:87:b0:05:30:ef:6e:d7:c6:ca:c2:c7:
         8c:0f:b0:90:07:aa:0b:e8:64:d6:e1:a1:c6:63:fb:61:bb:d1:
         a5:44:d8:ea:fd:68:66:e4:09:00:f0:c7:84:d0:98:32:0f:de:
         23:5c:d3:4b:4c:af:89:f1:34:da:7d:df:d1:63:bb:61:c3:22:
         2e:e1:33:cc:79:56:e2:33:5e:5f:79:5e:8a:d3:fc:b3:62:f1:
         d1:a3:0e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:18 2025 by rpki-client