Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
File:                     NpHSlQFF3OrADAyk61NtkoZ7ONM.mft (raw, json)
Hash identifier:          w1z/h6GpJL9USa9uI/03rFmSgD4nJY5CE4NEpEVI7+M=
Subject key identifier:   58:32:19:F1:47:4D:8B:83:E5:1D:10:04:6B:EA:8D:75:40:90:59:47
Authority key identifier: 36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3
Certificate issuer:       /CN=3691d2950145dceac00c0ca4eb536d92867b38d3
Certificate serial:       0194BCA9E44E188635F52743B5A337CC20D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft
Manifest number:          0A78
Signing time:             Fri 31 Jan 2025 14:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:38 +0000
Files and hashes:         1: AYNfqVlSCZxSkottsPIfKriDdHo.roa (hash: DR+WljYSnHEBz/1Nc0C8V29PSzaZP+WZg97TUOW5Zds=)
                          2: I7WvLIen2Qt15jt5djzF4qVwAeA.roa (hash: TDT2LdFRYTW16jzLI/jmwBH74PERZ5uRk6SAxtSvBQc=)
                          3: KX4BdF1jeIPrlBaQXcm4-FxDbVI.roa (hash: Tzk0TQLXuHX7Z8zB6m4PRwPBrghVQJ9zPu5wXgONfUs=)
                          4: Ma-ZL87NKbXOh3PKteMYs4_0CwA.roa (hash: 8ACKMnvKrVu9alfiMw6lXVKm3qwxGI4mZvc+z4si/8c=)
                          5: NpHSlQFF3OrADAyk61NtkoZ7ONM.crl (hash: 9R3guztz0ABwAEDN3Zmd2WpNSsJayKZvhrlF+gVBKCE=)
                          6: ZdlemGQCA8jrtuYIR9ZFtWke_wc.roa (hash: yL1F1JtC6s6D+a5TG0GVaaYEiJsHRH7GC/1uOa8xe0w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:e4:4e:18:86:35:f5:27:43:b5:a3:37:cc:20:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3691d2950145dceac00c0ca4eb536d92867b38d3
        Validity
            Not Before: Jan 31 14:00:38 2025 GMT
            Not After : Feb  1 14:00:38 2025 GMT
        Subject: CN=583219f1474d8b83e51d10046bea8d7540905947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:c0:ad:6d:2f:4e:4d:fd:dd:75:fa:ac:c5:cb:
                    6a:16:54:95:5c:d9:3f:14:6a:10:5b:59:90:fc:bc:
                    79:67:ff:17:bd:fd:8d:da:e8:49:3c:50:b9:22:ff:
                    2a:b1:8c:07:36:a7:57:1b:b9:06:34:b7:06:e7:ea:
                    b0:a9:0e:eb:80:42:d1:4e:00:75:22:fb:5d:c0:73:
                    0e:09:f3:df:97:28:88:56:a1:7f:c7:67:e0:08:0e:
                    77:e1:cc:73:ed:dd:a2:f5:0b:e9:7c:6e:3c:a1:0a:
                    01:c4:1b:81:78:78:2c:ae:d2:6d:73:74:f8:60:4a:
                    b2:50:6c:58:c6:b9:8e:8c:ba:a4:be:98:fd:73:3f:
                    dc:be:6a:86:e3:a2:0f:c9:84:36:85:45:25:c1:28:
                    42:3c:51:39:c5:45:30:69:7b:80:77:f2:d1:22:42:
                    e2:82:6b:a3:d0:d7:de:cb:fd:40:5d:83:e6:07:54:
                    78:f4:6d:77:e4:50:87:b9:ce:53:77:1b:20:83:f5:
                    0a:35:f1:6e:46:b7:1f:49:be:13:6a:c6:e1:e0:86:
                    2a:bb:8c:01:dd:f7:1e:c9:80:5b:10:bc:c5:f1:23:
                    41:fb:ac:17:3e:bb:30:78:77:fc:43:12:4a:5d:71:
                    cf:a5:29:5f:3b:66:3b:76:f2:81:cf:3c:07:4f:58:
                    34:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:32:19:F1:47:4D:8B:83:E5:1D:10:04:6B:EA:8D:75:40:90:59:47
            X509v3 Authority Key Identifier:
                keyid:36:91:D2:95:01:45:DC:EA:C0:0C:0C:A4:EB:53:6D:92:86:7B:38:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NpHSlQFF3OrADAyk61NtkoZ7ONM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/2a942a-f1bf-43e2-b92a-1dec40584806/1/NpHSlQFF3OrADAyk61NtkoZ7ONM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:74:18:09:63:e1:46:54:19:1b:57:de:13:3a:81:c5:96:2c:
         b3:35:5b:d6:7c:6d:1b:01:77:54:27:f1:19:b8:80:5e:27:36:
         40:65:77:c5:ae:0d:b5:c8:5b:3a:74:95:a6:e9:df:37:d8:6b:
         09:0d:31:ca:26:c5:85:e9:0d:d9:9b:aa:ed:2a:55:44:ab:14:
         e2:21:bf:80:65:b9:c2:72:29:32:28:00:87:d5:c7:a3:c2:3d:
         0b:dd:43:b9:41:29:49:fb:4d:17:90:a5:25:ae:20:60:5a:3d:
         4f:d1:fa:9f:5e:b5:72:0b:0b:46:71:21:38:5c:5e:da:82:a9:
         fc:42:9e:75:ba:87:e2:f3:1a:a5:48:7c:40:c2:c8:74:3f:aa:
         5f:90:cb:08:74:6e:70:01:d2:c1:39:59:c8:41:74:da:be:28:
         7f:4c:27:9e:29:22:39:7a:16:3c:a2:c6:fc:0c:cd:fc:ff:72:
         8b:19:83:54:b6:22:33:a5:d3:89:91:bc:09:c3:4f:9e:11:ee:
         6b:6a:49:4b:38:77:56:2b:c7:b6:d2:cb:dc:e2:37:8a:15:5a:
         36:45:59:0f:d8:9f:0f:0e:3b:39:82:d8:bf:00:4b:4e:2e:a1:
         91:c3:97:2f:6e:ce:5a:a9:76:71:cd:d5:af:97:26:63:99:6f:
         1b:23:e4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:18:19 2025 by rpki-client