Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
File:                     n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json)
Hash identifier:          DcvKdw/iiF2WUelVHMtBwFdRWMFb2fcuWY0/e53D0aI=
Subject key identifier:   F0:80:4D:11:24:07:1E:54:98:8C:77:21:84:E5:C8:EA:F1:06:33:83
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Certificate issuer:       /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial:       0194BCA9D56556CA4B77676F930B5D3328CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
Manifest number:          0AFE
Signing time:             Fri 31 Jan 2025 14:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:34 +0000
Files and hashes:         1: 1rNQC9Pmf5K1eRYu1hkhr5zZk2Q.roa (hash: x5fQIv4POV9mBCJLuhdzQlSn9HXra5gwr9JL2VOeY1M=)
                          2: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: nnvYXnbgJVC7HByNySsOQdBU8kejV72SIG/wq0bleHQ=)
                          3: wILLHD-thZnbY2_hVwSd8tKmVuU.roa (hash: 2k1puHfj5prqotEB5UejW81dxBofSqdytblBomrOVEg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:d5:65:56:ca:4b:77:67:6f:93:0b:5d:33:28:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
        Validity
            Not Before: Jan 31 14:00:34 2025 GMT
            Not After : Feb  1 14:00:34 2025 GMT
        Subject: CN=f0804d1124071e54988c772184e5c8eaf1063383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e9:0d:19:c3:d4:90:8a:97:ac:9a:d0:b0:dc:
                    b0:73:07:f0:26:f4:0b:44:10:1d:a1:68:5e:e7:74:
                    c6:7f:e8:85:2a:0d:39:dc:2d:b4:7e:85:85:67:bf:
                    93:1d:f8:66:7f:e7:ef:d1:c5:7d:35:ba:de:4c:bb:
                    29:de:2b:94:d1:14:1d:ed:8c:a4:26:d6:6d:7b:d0:
                    b3:8b:6e:b5:ca:1b:c3:3e:ec:81:73:e4:ed:97:c2:
                    5f:5b:28:b2:23:60:c2:e2:19:28:69:8c:04:4d:ab:
                    41:d1:37:58:fc:2a:0e:08:33:d8:1b:4d:57:9c:fc:
                    79:8f:d5:bd:bb:c8:d7:49:a2:75:ba:94:50:c5:11:
                    63:53:fb:2d:08:29:d5:76:65:23:87:a0:73:c9:08:
                    01:9c:a6:92:96:a1:d2:ea:88:34:2b:e0:c8:02:b8:
                    07:e8:d9:63:14:30:15:62:a8:05:80:8c:c3:c6:ef:
                    4e:e8:00:42:e6:90:73:55:5e:bd:a2:aa:cd:61:aa:
                    c6:8b:fc:77:d2:e0:dd:93:c8:83:41:5b:86:25:2c:
                    e8:90:82:09:41:3e:cd:97:bc:e9:51:71:e4:b6:d7:
                    74:85:26:d0:0f:7b:8a:e5:e2:38:9f:35:de:75:4e:
                    26:6b:a4:ee:50:05:24:5c:52:94:ce:2c:f6:2a:3c:
                    21:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:80:4D:11:24:07:1E:54:98:8C:77:21:84:E5:C8:EA:F1:06:33:83
            X509v3 Authority Key Identifier:
                keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:76:65:0f:50:46:1d:70:c8:5e:15:02:c8:b2:80:88:10:0e:
         91:85:f3:50:64:33:b3:cd:36:4a:af:42:7d:a2:41:c3:fb:ab:
         a2:33:ea:1e:20:20:98:ef:bb:da:d0:e5:d1:d2:5f:39:64:09:
         27:92:3a:c2:f3:bc:87:02:b7:38:02:70:60:c9:19:0d:fa:ef:
         2f:fb:14:03:1a:33:b0:58:27:67:04:d9:58:54:54:e6:f0:df:
         09:6c:f1:93:b8:82:ec:fa:91:33:86:c8:5b:9f:42:3d:56:57:
         6b:79:4c:60:f8:97:01:1a:93:d6:81:2d:85:4b:42:0c:72:23:
         12:ed:ac:26:e9:21:12:e0:ee:60:d8:e4:b1:63:e8:33:b5:9c:
         69:81:30:a0:61:04:be:81:fa:ee:b1:3f:7c:1e:5e:fb:c0:0c:
         68:26:2e:60:ca:58:04:67:cf:6f:28:8a:9d:c5:12:13:69:3b:
         02:f0:cd:35:c8:e1:3c:ea:39:fc:c1:b9:64:e5:53:2c:04:e9:
         dd:7c:be:79:b0:6b:fe:22:50:e2:96:58:b1:a5:57:69:30:04:
         d0:b1:3b:ae:b6:35:13:e1:ae:80:41:7d:08:c6:8a:fc:64:23:
         58:87:29:86:77:41:8d:61:79:c2:9c:14:a8:dd:55:0e:eb:87:
         f8:58:c7:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:07 2025 by rpki-client