Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
File:                     b9M_nmhWjdYFvJKvwe9raeEnq9g.mft (raw, json)
Hash identifier:          aJ856ahnL7XKJ9diS+vvq3dvzzm3Cz3KulZ+LD+8k6k=
Subject key identifier:   55:E1:38:E5:B7:F2:5E:7E:2A:8A:03:25:3D:FA:A4:56:57:FA:85:05
Authority key identifier: 6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8
Certificate issuer:       /CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
Certificate serial:       0194BD17CD343549AE5B3BE516C360786786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft
Manifest number:          0D96
Signing time:             Fri 31 Jan 2025 16:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:41 +0000
Files and hashes:         1: QgZP-cnsGLbXLiB8i-j6fiH8Sys.roa (hash: S2EGBlisrDeYdPuuPvmxq5XQnasXOcn30j5uFZy7zjM=)
                          2: b9M_nmhWjdYFvJKvwe9raeEnq9g.crl (hash: P46BSfIYpgeefhZ8/ljBll4DNyeLx20uaf23cGsVamw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:cd:34:35:49:ae:5b:3b:e5:16:c3:60:78:67:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fd33f9e68568dd605bc92afc1ef6b69e127abd8
        Validity
            Not Before: Jan 31 16:00:41 2025 GMT
            Not After : Feb  1 16:00:41 2025 GMT
        Subject: CN=55e138e5b7f25e7e2a8a03253dfaa45657fa8505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:60:90:d4:05:50:d2:79:d4:8a:4f:70:f4:bd:
                    d9:43:56:da:44:85:7a:74:23:8e:a5:b1:f7:ba:6e:
                    24:fe:ba:b1:43:09:92:d5:7c:2b:81:17:a4:4c:5a:
                    32:a5:a8:37:18:08:fd:7e:5b:c9:41:31:0c:97:e2:
                    fc:cc:92:ca:80:6d:33:a6:8d:59:c9:61:59:51:3b:
                    53:13:1a:ad:a0:6e:8c:bd:3f:51:b5:5e:43:43:0a:
                    26:74:65:af:11:11:73:fe:8b:b8:c7:63:9e:8c:8f:
                    6b:14:87:b0:28:75:66:70:db:3f:e4:97:1b:83:e0:
                    4e:a9:7c:87:c1:f2:c6:43:59:7b:a9:b3:df:b1:e4:
                    ec:05:2e:6f:5d:e4:56:4b:83:ec:81:9f:4f:31:99:
                    a3:d8:bd:ec:02:a1:6a:1a:9c:de:2e:73:0b:f2:67:
                    04:ff:0c:8a:3f:00:f1:10:d1:70:9a:45:0a:dd:7e:
                    42:d0:89:84:b8:7d:68:78:ab:59:35:eb:bd:ff:aa:
                    60:40:18:43:f9:f3:fa:94:f4:7f:0c:f2:7f:c7:69:
                    78:92:ce:a0:55:36:ae:ac:a8:3b:d1:f1:38:65:da:
                    c1:fe:5a:e6:ec:82:49:92:9e:b6:49:b5:82:bf:34:
                    c3:dd:39:7d:dc:7f:c7:e4:a7:f5:bc:8e:06:dd:4f:
                    ed:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:E1:38:E5:B7:F2:5E:7E:2A:8A:03:25:3D:FA:A4:56:57:FA:85:05
            X509v3 Authority Key Identifier:
                keyid:6F:D3:3F:9E:68:56:8D:D6:05:BC:92:AF:C1:EF:6B:69:E1:27:AB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9M_nmhWjdYFvJKvwe9raeEnq9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a1c7f5-1ea9-4a1f-a3e4-8c27c97663dc/1/b9M_nmhWjdYFvJKvwe9raeEnq9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:fb:94:70:f8:95:cf:31:b6:ce:86:a8:9e:bb:c9:e1:be:42:
         81:83:f1:95:b1:4a:09:12:01:0d:17:cb:1a:91:8d:92:a0:85:
         05:f0:4f:76:09:77:19:13:76:00:51:a4:29:de:c6:4b:df:5f:
         9c:53:2d:96:eb:f2:cf:8d:92:b5:84:e8:5f:88:e6:6e:a7:40:
         35:6e:c0:e0:89:ab:fe:38:0c:11:42:f9:ab:3e:bb:a0:b8:0c:
         bb:4b:8c:56:b9:ed:fd:cd:0f:16:80:cc:59:bc:01:cd:3f:d5:
         5b:98:67:28:04:48:01:d3:9c:3e:8e:2d:42:40:9b:ed:58:a0:
         bb:b8:8e:41:14:bc:38:ea:a3:97:dc:3d:75:96:1f:fa:c8:50:
         7e:f7:72:c4:5e:90:51:6f:9e:e0:22:22:45:90:84:0d:a1:5e:
         20:12:24:83:49:ee:24:93:a3:21:7f:07:9d:41:c5:e7:88:4e:
         d8:1b:cf:f6:cb:c8:88:af:8b:22:cf:bc:63:96:78:d7:75:12:
         d1:64:e0:7d:5a:7e:1b:11:b7:ff:f6:b9:2f:e8:14:5c:b9:52:
         41:47:77:d8:92:65:a3:6b:fa:e7:06:8c:f9:22:a9:5d:01:71:
         47:26:aa:1b:03:da:1a:27:d1:fc:a6:9f:08:17:28:17:92:97:
         6a:a1:50:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:03 2025 by rpki-client