Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
File:                     nuVP2fF_yXpwpb9BW3iJGxW495U.mft (raw, json)
Hash identifier:          mLxp/uPYsYeaw1NqKDT0O8ikFnK+slcNTthETU3c+K8=
Subject key identifier:   CD:CC:9D:9C:F5:30:26:2E:63:B6:95:99:94:C1:EF:B1:AA:BA:B8:BD
Authority key identifier: 9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95
Certificate issuer:       /CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
Certificate serial:       0194BC04C9FBDF4F172B2391E2FD6D8E110F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft
Manifest number:          0310
Signing time:             Fri 31 Jan 2025 11:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:17 +0000
Files and hashes:         1: nuVP2fF_yXpwpb9BW3iJGxW495U.crl (hash: MdgiyYf0LhjlrJuRkeKHKcQMuOHElv9Eak7lj+yPdOw=)
                          2: oeejnnEaMW40kAD0os79-L9Olv8.roa (hash: Gvc/AI8UECrR+ZR7n6+DgnfVkthLJTkqDD0SmDPbhaE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:c9:fb:df:4f:17:2b:23:91:e2:fd:6d:8e:11:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ee54fd9f17fc97a70a5bf415b78891b15b8f795
        Validity
            Not Before: Jan 31 11:00:17 2025 GMT
            Not After : Feb  1 11:00:17 2025 GMT
        Subject: CN=cdcc9d9cf530262e63b6959994c1efb1aabab8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:26:55:9e:92:08:83:99:5f:7b:26:a2:09:4e:
                    23:e3:b4:80:d1:d8:d3:98:f1:8d:69:66:29:46:c0:
                    f8:55:51:ab:62:9c:16:a6:51:09:ed:6f:44:de:4b:
                    b5:03:8c:af:75:d7:ff:0a:42:cf:6f:69:d6:5f:f8:
                    82:4b:cf:7a:16:05:25:4d:86:67:60:c0:2b:70:f3:
                    ed:85:b0:87:14:8b:b7:02:49:d1:70:28:eb:9a:f3:
                    ef:e0:ab:ea:8b:d3:f6:1e:55:1e:67:98:69:7e:a7:
                    e5:dc:48:ed:b6:42:b0:0b:28:8a:ce:cf:fc:8f:ee:
                    c9:99:12:d9:e6:2e:a1:a9:ba:09:f3:05:86:6e:c9:
                    19:3a:49:5a:4c:af:bd:9b:65:78:27:30:bf:91:61:
                    9d:a8:66:5b:cc:c2:60:fa:2a:4c:41:14:86:ca:e0:
                    34:3e:d1:48:ae:67:46:65:3d:b1:da:8a:01:df:59:
                    aa:8c:6b:1b:63:5e:1a:96:cb:90:0e:66:92:7a:c8:
                    cb:8b:84:58:50:0e:af:34:2a:f7:63:bf:8e:16:c4:
                    cf:bd:6d:f1:16:28:3f:9a:15:67:9e:10:05:13:69:
                    b9:1d:f0:cf:01:3c:4c:9e:26:6c:87:02:16:15:d9:
                    a0:0a:94:fa:0d:15:03:2e:0e:c8:78:e7:cf:ac:5f:
                    b2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CC:9D:9C:F5:30:26:2E:63:B6:95:99:94:C1:EF:B1:AA:BA:B8:BD
            X509v3 Authority Key Identifier:
                keyid:9E:E5:4F:D9:F1:7F:C9:7A:70:A5:BF:41:5B:78:89:1B:15:B8:F7:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nuVP2fF_yXpwpb9BW3iJGxW495U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/d9aa88-6426-4933-a69a-80b96680f043/1/nuVP2fF_yXpwpb9BW3iJGxW495U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5c:c0:31:13:f6:c3:09:1b:ff:7f:c5:20:49:57:8e:7f:9e:
         e2:c7:34:1b:2c:86:53:b1:94:9b:b2:53:e5:30:9f:a5:32:07:
         41:cc:ee:75:64:a6:28:55:f8:4f:2a:a9:5a:6d:46:6e:ba:eb:
         a3:d5:62:4e:a7:73:d3:69:da:38:71:ff:f6:1e:3c:ed:f5:fa:
         5a:e9:cd:80:e6:cc:3e:37:40:fd:18:60:6f:2b:00:05:26:c8:
         22:80:f9:0d:ce:ba:12:29:c7:d9:34:26:23:25:3f:58:74:72:
         d6:f5:84:be:a4:52:d6:3e:68:f6:9e:93:92:1c:e8:46:87:b0:
         64:f8:65:7c:4a:ad:0b:6f:f0:8a:91:86:08:24:4a:fe:8a:1a:
         71:e2:ed:02:2f:17:aa:1a:be:d4:2a:e5:90:1b:e9:23:d2:d2:
         b1:9d:89:b7:6e:a3:f7:68:dd:f2:ad:d4:e5:43:41:e1:bf:b0:
         6c:73:ef:8d:e4:b8:f6:da:fa:cd:8a:7f:67:fc:e3:3d:10:cc:
         bd:f7:6b:b0:f1:d7:99:6b:10:44:42:64:bb:ad:b2:d5:24:66:
         49:ab:fb:0c:ad:2e:79:c9:5f:29:7c:24:9b:c0:4f:c4:1b:c2:
         0f:79:13:0f:15:56:b4:a2:0a:1d:03:6e:0a:e2:84:4c:5c:b9:
         e9:13:42:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:15 2025 by rpki-client