Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
File:                     iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json)
Hash identifier:          NGp+N5WJ7ANtzbALLsNlwO8flQsSs3d3K0Vkl7fLbuk=
Subject key identifier:   9A:CF:FF:E8:44:F2:8C:A9:8C:32:EB:10:C2:BF:05:0E:F6:21:F7:DF
Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21
Certificate issuer:       /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
Certificate serial:       0194BD85A314BB42F8103EBEE53F050F4656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 18:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:39 +0000
Files and hashes:         1: 1AVD6_mgeoD7QDUZJl7EDizwiPA.roa (hash: cX/v9qqSG1teaYFoFOKsa3bn2RyT9qsyhWH8nkdQ7JA=)
                          2: 8nPu7g_10GykuOn6hB7ddpZ32pc.roa (hash: PE7yr9seUogU++GGlz15g0vomylBpNKOs5X1aqyCFXY=)
                          3: FuyO4nKRxR39tBuC6eKFQfxQwrc.roa (hash: GUrm17XZGeWFCxLew8/dow89FusnPuSqgk9j0BnqmKQ=)
                          4: IRm19nOK5U99-KFgT6Iyqb6FLRs.roa (hash: il+0ahEt0jHE3mPTA9QCPGv0irQio4DzrHv3lezN4EI=)
                          5: OCZT2CotgRCIuoB7CyLdArI0Xq4.roa (hash: 2KavfbQ9/xCmCPRw2wyEJR9Q6ABQMSBcOd2DtqJChbQ=)
                          6: QCfiaxU0-L0V2BF9e1C_GwYnzP4.roa (hash: VRlfNE6x9/KNibY36WnSc/VobsG0jDrCOQJvdKNN4i4=)
                          7: TrekbKofwJJgypIh3djYyzsCUwU.roa (hash: TCCyZiFHD9x34gvfVDyLYWKAPcQuU4dBBXrQhqnIl2k=)
                          8: hR_O6orQ7VIoQZRz0Ft_rQtrjmE.roa (hash: ufdueV5sW54kE98qc2NMXNaVclJV1tmEIBRjswSFBHQ=)
                          9: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: jgbKYsi9EfFOVCRkdC8PGe2MpyBpWJwjH1loPRlfXbk=)
                          10: mmf39HAPu66pAhfk5t6hl32At34.roa (hash: v8H+MR6QM0GWin6TVlCN7PLO5Ye9iX/HYlHyOCGTDCY=)
                          11: poQ9sY-40mE5OkfYNESkcevxBo8.roa (hash: t3e6WnaTkGCDqI4QgZzs43WxvQ36SKjt1xL670t+gp8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:a3:14:bb:42:f8:10:3e:be:e5:3f:05:0f:46:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21
        Validity
            Not Before: Jan 31 18:00:39 2025 GMT
            Not After : Feb  1 18:00:39 2025 GMT
        Subject: CN=9acfffe844f28ca98c32eb10c2bf050ef621f7df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:00:8c:01:4c:fa:6d:e7:08:ce:91:4c:9f:c6:
                    12:0c:97:d3:73:fe:07:f0:1a:57:b4:ac:15:5f:30:
                    22:2c:2e:66:9e:76:34:2b:fd:4b:5d:cb:e2:b0:3d:
                    34:f6:ce:c5:9b:d3:96:33:87:fc:ac:d7:ee:10:10:
                    cb:71:7c:80:30:ec:90:47:1b:b2:f0:fc:a3:fa:ad:
                    b1:f8:f3:25:64:b0:03:2c:9e:8a:50:32:97:7c:0c:
                    d6:10:a8:fe:02:4e:09:15:ae:cf:2f:43:38:d0:b1:
                    02:83:08:f4:9d:20:81:26:67:24:64:fb:67:18:22:
                    ee:e6:0a:ef:2d:a9:9b:ab:1c:1e:99:0a:7a:bd:aa:
                    b5:91:89:c2:59:a0:ac:aa:e5:0b:e1:5b:aa:c7:9d:
                    8f:1c:74:c3:fa:f1:00:79:c9:9d:d1:79:d5:90:cd:
                    06:76:20:9e:6a:4b:db:56:30:f8:86:7e:0d:bc:bb:
                    46:41:ed:e4:6c:29:ca:85:75:74:eb:87:09:24:40:
                    2c:d5:c4:7b:63:24:79:ab:a3:35:ad:10:8c:70:47:
                    f0:3b:3d:bb:7a:60:b0:2f:38:2a:d4:b4:22:f8:78:
                    0c:cb:9a:c0:24:18:dc:ac:70:24:b6:c8:10:a6:75:
                    12:a5:6f:c5:0f:99:e5:6c:ed:1f:01:93:aa:5d:50:
                    16:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:CF:FF:E8:44:F2:8C:A9:8C:32:EB:10:C2:BF:05:0E:F6:21:F7:DF
            X509v3 Authority Key Identifier:
                keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c7:2f:3e:a4:3c:95:5e:91:10:a9:68:0c:fd:dd:ce:22:07:
         3d:c2:23:89:17:77:ca:0d:15:6a:d3:e5:a6:ea:90:3f:7d:cf:
         6a:10:ce:e5:31:f9:b0:91:1f:19:e4:95:da:75:9c:b6:92:61:
         38:da:65:11:a3:af:2f:e3:1a:aa:27:77:5a:e7:62:c0:6e:89:
         c5:2b:45:30:68:6b:81:a0:5c:c4:08:7c:df:51:24:56:d2:b5:
         ec:98:c1:42:cd:2e:15:e4:e5:89:d2:04:2c:ae:3b:51:5d:0a:
         0e:cb:09:e9:b2:c5:a8:2f:e1:64:84:ca:a5:20:cb:94:ed:f8:
         09:78:86:c0:bc:82:de:4f:14:52:91:d9:44:fb:b0:c2:7e:e9:
         04:96:0c:6f:3e:b2:b4:a6:16:6c:25:60:d0:24:6d:2c:97:c2:
         c3:b2:4e:c6:ef:8f:aa:19:17:dd:8b:ca:de:ab:94:3e:4b:ad:
         a7:60:28:05:11:5d:f1:a9:24:01:79:66:b3:7e:25:dd:4a:2a:
         30:c6:40:e8:55:f6:81:d1:59:d0:fa:4b:90:89:2b:50:d6:86:
         3b:54:62:8b:3b:01:3d:42:a8:c8:2d:6c:c7:12:e3:5b:8a:0a:
         1a:17:79:f8:da:99:4d:3a:c9:08:17:ba:78:f8:7b:85:fa:29:
         af:d1:c6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:04 2025 by rpki-client