Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
File:                     mZP-d_Y77pCIj83hoSWt_mU12BY.mft (raw, json)
Hash identifier:          bFOh5nlfFJBg0idFHGtmNAJTk7cUQvcjEzNioMTeaOA=
Subject key identifier:   83:46:CA:30:44:7A:B1:C7:94:12:DF:2F:ED:28:9A:97:89:1F:E2:88
Authority key identifier: 99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16
Certificate issuer:       /CN=9993fe77f63bee90888fcde1a125adfe6535d816
Certificate serial:       0194BC04F14898AB08BDCD1556A11158F387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft
Manifest number:          4D
Signing time:             Fri 31 Jan 2025 11:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:27 +0000
Files and hashes:         1: 4EtVjJk4lsZOZCX63edsZ70D8bI.roa (hash: EUz3DyoqW1g2YIoKqC8Ka1J3A0ypQWGdk4dQmoae3Fs=)
                          2: mZP-d_Y77pCIj83hoSWt_mU12BY.crl (hash: fwKPG9Z910uWbPcXLVb06IFDK1uV6lFUfdvfZCTSE/I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:f1:48:98:ab:08:bd:cd:15:56:a1:11:58:f3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9993fe77f63bee90888fcde1a125adfe6535d816
        Validity
            Not Before: Jan 31 11:00:27 2025 GMT
            Not After : Feb  1 11:00:27 2025 GMT
        Subject: CN=8346ca30447ab1c79412df2fed289a97891fe288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:83:15:58:ba:ef:d0:a1:fb:70:96:09:60:0b:
                    30:d5:c8:dc:55:8f:82:7d:8f:8a:11:7e:6d:eb:66:
                    85:ca:96:f6:8b:e9:0e:e3:57:3b:48:ae:9e:5d:fa:
                    1f:8a:c5:fb:5f:fc:ea:9f:0d:07:3f:2a:dd:ab:12:
                    50:4b:2f:b8:42:c3:de:01:e3:b7:13:fe:ee:94:8f:
                    30:24:1c:38:5d:44:10:48:cf:4e:ee:46:e2:d7:50:
                    16:65:d2:34:29:66:63:b1:95:c9:a3:00:ad:82:56:
                    61:ed:83:0b:e7:5b:46:0f:a1:f6:a7:5c:94:24:1f:
                    78:ea:60:a6:bf:ab:ca:5b:35:c1:6a:4a:28:96:e5:
                    9c:91:2e:2b:3f:bc:16:41:a1:5f:29:ef:b1:50:5d:
                    07:c2:69:6d:fa:dc:62:d0:20:a7:a1:91:98:2c:04:
                    06:4a:47:5d:e1:9a:42:ce:39:63:91:f6:e5:48:75:
                    4e:0a:2f:d3:b1:4e:06:85:48:70:db:8b:6c:f0:b8:
                    fe:fd:b9:7d:ac:45:14:27:9f:15:97:5e:4a:94:e9:
                    71:45:f5:9d:24:97:81:40:f5:42:ce:1d:7d:90:ae:
                    d9:5d:81:ff:51:63:bc:2c:a3:19:8a:0d:24:15:ab:
                    cc:e7:e5:c8:5b:06:28:6f:91:17:a3:7d:c7:26:fa:
                    89:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:46:CA:30:44:7A:B1:C7:94:12:DF:2F:ED:28:9A:97:89:1F:E2:88
            X509v3 Authority Key Identifier:
                keyid:99:93:FE:77:F6:3B:EE:90:88:8F:CD:E1:A1:25:AD:FE:65:35:D8:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mZP-d_Y77pCIj83hoSWt_mU12BY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/f9b6aa-a917-496f-a24f-66959e1bb7fe/1/mZP-d_Y77pCIj83hoSWt_mU12BY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:6f:ac:ea:40:6d:b7:b4:0d:9f:1e:14:f9:a7:8c:ac:83:8b:
         4f:15:4e:e1:3a:86:c5:9b:db:bc:f5:06:88:63:5d:e0:5f:a2:
         6e:5f:f9:79:e0:e8:9d:49:8a:f0:ef:e1:98:7b:e2:72:e3:1f:
         48:da:55:b3:e6:eb:9b:04:eb:f2:aa:4a:53:ba:a1:ae:7a:5b:
         64:98:64:6a:f3:71:73:96:75:88:2d:34:c7:90:46:42:eb:c3:
         aa:dd:c4:1c:37:a7:80:ea:1d:fb:d7:00:78:c3:e9:a6:09:60:
         44:94:fe:e6:a6:a7:7f:5c:44:ec:5a:16:60:16:c1:b7:5f:24:
         14:ab:ce:5e:09:db:5c:04:81:6b:f1:65:fb:e9:3a:56:aa:cc:
         d2:cb:7b:9f:82:74:52:3d:93:7e:72:4f:40:9f:e2:05:9d:1a:
         84:ea:53:53:b8:51:db:0d:72:20:73:be:03:52:cf:3b:2e:99:
         83:99:6b:0d:41:f7:d1:c4:38:82:3d:21:3b:0c:e3:5c:d2:20:
         8c:18:63:45:7f:93:a5:9f:77:73:bc:10:95:45:4c:d4:12:5d:
         b6:8a:76:23:2b:11:a8:80:a8:c0:d4:48:21:ff:f9:52:02:14:
         ef:06:0a:a1:d9:f9:f3:9b:65:a9:7b:98:29:32:bf:9b:83:12:
         f7:3e:16:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:21:12 2025 by rpki-client