Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
File:                     NY82t7AwW9n_68U3oadWt04E1eQ.mft (raw, json)
Hash identifier:          DmJ8Q2Cb9k/ez7i6eJGQutq+tRwcHZZ8qEoitbB7CIo=
Subject key identifier:   B4:4F:80:6F:6E:9F:B0:07:65:B4:CE:11:0F:BC:31:A5:88:83:54:85
Authority key identifier: 35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4
Certificate issuer:       /CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
Certificate serial:       0194BCE09590CF9F5761240761B08A2E7368
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft
Manifest number:          0464
Signing time:             Fri 31 Jan 2025 15:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:22 +0000
Files and hashes:         1: 8ID8kgv1Se1rg2FGJCKuXeDTZdw.roa (hash: mtFporZGWALvI1bFzQb9Xpsj858BjBk/glbS/pmBQi4=)
                          2: NY82t7AwW9n_68U3oadWt04E1eQ.crl (hash: OCMHW+CGiBlzcyYP6+K4de9aKPUYtXdiHAM0CULc2EI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:95:90:cf:9f:57:61:24:07:61:b0:8a:2e:73:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=358f36b7b0305bd9ffebc537a1a756b74e04d5e4
        Validity
            Not Before: Jan 31 15:00:22 2025 GMT
            Not After : Feb  1 15:00:22 2025 GMT
        Subject: CN=b44f806f6e9fb00765b4ce110fbc31a588835485
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:34:e4:6b:d1:68:31:f6:a5:95:0c:dc:72:c8:
                    5f:1b:b9:53:bf:2b:45:74:1f:fa:bd:ae:c2:f3:22:
                    29:ab:97:a4:e1:32:82:34:ca:6f:38:48:3d:a3:a7:
                    34:17:cd:96:fc:fb:ff:c8:8a:67:a2:39:b1:1a:f7:
                    41:13:51:c9:00:aa:8d:00:03:f2:f8:19:33:48:3c:
                    f2:02:7f:94:27:96:f2:ed:81:1b:14:08:0d:aa:57:
                    1b:d5:3b:9f:b1:83:59:e3:6d:fd:0d:bd:db:64:2b:
                    91:f9:50:b6:a0:af:bc:17:8f:5d:3b:ef:5d:1d:08:
                    77:84:82:4d:01:a6:29:74:4b:3a:62:57:c2:67:08:
                    80:8a:22:69:1d:33:12:d1:e0:0b:af:4a:f3:12:2f:
                    ab:7a:56:b2:da:d2:80:8d:28:02:7a:8f:ea:db:f5:
                    63:08:67:10:44:12:2f:20:d7:44:c1:7a:67:d0:ff:
                    85:6c:5b:88:2b:9e:01:2a:95:d1:8d:3a:72:d9:0f:
                    e5:f0:b6:ed:d4:89:65:90:84:74:e7:8e:a3:28:68:
                    9e:79:aa:28:61:fb:4c:7d:7d:42:bc:88:94:a2:60:
                    df:cf:e7:4c:60:f4:ba:e6:1e:f1:bd:64:cc:d6:27:
                    e8:d5:29:48:68:38:35:c3:86:b6:f7:99:4a:8f:25:
                    74:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4F:80:6F:6E:9F:B0:07:65:B4:CE:11:0F:BC:31:A5:88:83:54:85
            X509v3 Authority Key Identifier:
                keyid:35:8F:36:B7:B0:30:5B:D9:FF:EB:C5:37:A1:A7:56:B7:4E:04:D5:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NY82t7AwW9n_68U3oadWt04E1eQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8c9067-cc6d-4c4a-b661-37d15719a2d0/1/NY82t7AwW9n_68U3oadWt04E1eQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:11:16:9a:a1:8b:99:c1:b9:4a:b4:3d:6c:21:33:31:1f:ee:
         c0:26:2b:31:72:2a:7c:62:3e:67:b2:9f:6a:2d:08:f3:72:b9:
         cc:a2:c3:fd:0b:2f:7c:f7:bf:be:b5:40:c3:75:99:5a:c4:ee:
         64:b0:2f:3e:57:c7:cc:60:42:99:ef:65:1b:a9:45:03:fb:6d:
         a9:eb:61:f9:fd:de:eb:0c:5b:38:ea:be:ac:1f:db:cb:09:f7:
         c2:a0:cc:fa:3e:8f:b2:64:b8:a8:91:07:14:97:85:10:d5:cc:
         24:ee:ca:70:e4:bb:9a:bc:22:3e:62:db:85:5d:df:7f:40:00:
         1a:29:69:4d:fa:5b:e4:94:3d:03:65:70:26:e0:ef:ec:92:4a:
         fb:ca:d4:8f:16:e4:e5:2a:64:8a:bd:18:bb:95:16:29:20:e0:
         b6:55:f0:9f:5a:97:53:24:86:1a:62:5f:e8:da:30:0a:19:0d:
         ef:24:ca:9b:ed:dc:9e:f6:cf:f4:69:8a:8e:40:b0:c6:ad:7f:
         ed:c6:5d:d5:ac:4a:43:e1:78:ef:f0:98:10:9d:74:df:95:a6:
         67:c6:fb:1b:73:c5:6a:6c:4f:ed:0a:06:09:83:77:13:39:11:
         be:7f:87:82:a3:0e:0f:ed:d3:1b:3e:e0:2c:9f:07:3e:49:8a:
         b3:f6:33:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:27 2025 by rpki-client