Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
File:                     nHPZRT--37gMRUO7Up_DMMH4wc4.mft (raw, json)
Hash identifier:          +OET3tjtBESSQjwWzoFA9faejRs/+AfdBOfw8aUxZCQ=
Subject key identifier:   D6:DC:87:04:1D:F4:DA:AC:FA:F3:14:1E:A2:A5:B7:FB:C5:FA:D7:8B
Authority key identifier: 9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE
Certificate issuer:       /CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
Certificate serial:       0194BC3C551E9FBA1071E2D8BCD6205E24EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft
Manifest number:          09DF
Signing time:             Fri 31 Jan 2025 12:00:58 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:58 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:58 +0000
Files and hashes:         1: AMTfdcOhvN2UxA7mt3gv3KECuGg.roa (hash: k51GSY+oL6d3vSnVOqR7gGcER+6PBSvBsmHDXYmEq2c=)
                          2: IZ4_8o0uG1RVAax56_hcAW3WTtc.roa (hash: BLF9NvSAp12xGKGCWF6fmakXoIQEimqM8wkdCYNJdbY=)
                          3: OfxRKdN2bPZI0fvyGrpUm_OCPQs.roa (hash: lVQukuR8pvFzQlCkS5KRF6YO+By1WT+Hs0uHk5OATm0=)
                          4: ieAfCh_vwbBTbF3DGBJXQYMx9Pw.roa (hash: N095uXaZbk2Jvru/0oYsrQzeZ/eKCMXo6ETE3DefpcQ=)
                          5: j4cd6L8tYRDjLejdv94aClKAGXU.roa (hash: WlNinENED4PfFKrXHfbYinzDLlIPfYjUPCjvbvhk+i8=)
                          6: nHPZRT--37gMRUO7Up_DMMH4wc4.crl (hash: Mm+4/jJERbQATCuPQTmFllg1MSgqzp8450/HSzWzDzY=)
                          7: xe-87aH9X1grSznD-2-c4OZyYHo.roa (hash: S80ekAfHbqsZOpsBTbZwj0DAL1iEaOufRZ1+nQUXDqE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:55:1e:9f:ba:10:71:e2:d8:bc:d6:20:5e:24:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c73d9453fbedfb80c4543bb529fc330c1f8c1ce
        Validity
            Not Before: Jan 31 12:00:58 2025 GMT
            Not After : Feb  1 12:00:58 2025 GMT
        Subject: CN=d6dc87041df4daacfaf3141ea2a5b7fbc5fad78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9c:d8:93:87:3d:23:c1:e8:c4:66:b0:43:62:
                    d2:c2:dc:76:fc:b5:e2:2f:21:ae:7a:1a:25:22:cc:
                    81:3f:4f:b9:f3:5a:e2:ee:5a:5d:1d:a7:e7:01:38:
                    af:c9:b7:60:17:e6:b1:ce:9b:a7:c3:42:8a:85:5c:
                    3d:36:d3:11:88:83:ce:d3:82:aa:a4:00:cd:34:ae:
                    c8:23:2b:21:c0:f2:e8:8e:49:9b:5d:11:84:e0:5f:
                    52:ea:6b:a6:fe:f6:4c:c3:7d:51:77:0d:dc:11:f8:
                    e6:6b:6a:1d:1c:53:0d:e9:ad:7b:c4:96:f5:53:fa:
                    42:03:79:25:92:b9:d4:92:d0:e1:23:f9:60:b1:b9:
                    ee:28:25:ef:f8:4f:0b:b4:51:57:b9:e3:ea:d5:0c:
                    c8:7a:d6:eb:a4:17:3b:df:80:62:18:e8:9e:1e:c0:
                    85:cf:cb:9d:8d:ac:16:df:b9:b1:38:2e:60:ef:a2:
                    e4:e7:54:d0:38:bc:d8:fa:8b:3d:7b:1e:d6:8d:3d:
                    e8:31:1b:e0:fd:6e:d2:07:89:15:e6:6c:83:56:91:
                    c1:43:fd:df:28:96:09:44:b6:f2:83:80:50:48:d5:
                    2c:0c:1e:34:ac:82:a1:67:40:b1:5b:df:00:d1:58:
                    0f:0a:08:8e:14:a4:07:00:9b:c5:3e:ce:8a:bd:59:
                    b5:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:DC:87:04:1D:F4:DA:AC:FA:F3:14:1E:A2:A5:B7:FB:C5:FA:D7:8B
            X509v3 Authority Key Identifier:
                keyid:9C:73:D9:45:3F:BE:DF:B8:0C:45:43:BB:52:9F:C3:30:C1:F8:C1:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHPZRT--37gMRUO7Up_DMMH4wc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/b35379-2122-4191-8821-c47e18df0371/1/nHPZRT--37gMRUO7Up_DMMH4wc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f8:1e:bc:21:db:c1:27:4a:4d:3f:04:82:17:b9:8f:94:8a:
         2f:0a:f2:7c:bf:64:34:2d:50:ab:7c:74:8c:55:c8:8d:10:86:
         ff:7e:55:81:af:f6:a7:7d:3f:ea:24:39:2b:94:2d:63:8e:70:
         60:37:20:c9:ef:53:8d:10:bf:79:d2:e6:e3:d4:ff:61:0a:16:
         cc:c3:2d:d7:14:93:87:4f:9d:da:19:1b:a0:56:b4:69:a6:21:
         55:52:cf:c4:08:14:0d:97:64:be:36:c9:69:dd:e1:1c:ed:50:
         d3:8f:22:3d:ad:56:f7:78:77:75:f6:b7:d5:99:c1:7d:a6:bc:
         13:c4:64:37:c0:46:bb:63:92:c2:dd:74:40:b3:20:f8:ef:cd:
         0b:d2:fb:46:cf:e4:9b:c2:f8:17:60:34:71:2e:09:fb:99:0b:
         5b:72:cb:3b:d5:5c:0e:d4:b1:55:a3:74:3b:dd:11:60:5c:54:
         9e:8f:17:46:c4:4c:d1:f1:bb:d5:cd:80:50:2f:03:8d:f8:ab:
         ce:03:c6:87:8c:c2:dc:2c:69:55:d2:92:8d:93:ba:ae:37:1d:
         ca:be:b3:5c:f6:d3:4b:ff:e9:75:1c:0e:bc:e6:bc:08:63:98:
         d3:ff:6b:ce:03:de:d0:06:0a:65:80:5b:bb:18:40:16:b2:fe:
         cd:39:55:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:36 2025 by rpki-client