Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
File:                     ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json)
Hash identifier:          RCSFezR1GbCWNJd5SVjz3oHiojR3J/QCcj0nv6SV19k=
Subject key identifier:   FB:17:BA:5A:B7:A1:EA:68:66:FB:DF:57:7B:75:42:F4:D0:3F:0F:8E
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Certificate issuer:       /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial:       0194BC3BC7EABE80F81BE02CDC423679566C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
Manifest number:          0D54
Signing time:             Fri 31 Jan 2025 12:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:21 +0000
Files and hashes:         1: 1-0vipuRl0AJvwZtEBk-maQes6Cg.roa (hash: DSWGxdza7oD2/3uUVZoXyDrmHTWT++tTuwdDtQTvs4k=)
                          2: Dp9S7DtPUM200gi6O6yBPEaasas.roa (hash: nHFRQ6xLBtePKwuFF9sGQ8KR62EZEyHkOj5R88bM4qI=)
                          3: F6eX9oz_j-ZT8QfPBURiHjJkBos.roa (hash: 9C2+49g0ve8uLFJHYFMwlwYj/+2J3SnLoalOE2MN4Mk=)
                          4: Hiu-YkREzGKKTtSRBgf6M5S0mUM.roa (hash: fxvguMnjN9xF6RFcgtEIfOjUPdwUBHDkuyyelgRCorQ=)
                          5: U4lJvipYbr4AZQbw3vQ4rpXfXN4.roa (hash: J4umHHc1mv/sPeURzjqZJEkjClmBGK0Hvn8O5Rexq5Y=)
                          6: YhZQFWzwDUGT-HjSfFHnpvcFMTY.roa (hash: /ssHfW4YZnp/Q+YD/IpItVTTmqCd5HemhWXsBRiqt1A=)
                          7: ZeYihmicLm5VKfWSSFIon1HTDC4.roa (hash: skxZCw+YKxKcl1188es30U08xjm3mZlLt8pygJEcJ10=)
                          8: jdKmvZ_WGiUDxDAHKJg_Wed6rVo.roa (hash: CRiOfMtNCT5H0OJU8c1YHET8V3YfGy03z8wKH951O6Y=)
                          9: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: EDHozYoCCpfqoc9C3X7TZiBuHYHVbOgO5WcceAocEJE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:c7:ea:be:80:f8:1b:e0:2c:dc:42:36:79:56:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
        Validity
            Not Before: Jan 31 12:00:21 2025 GMT
            Not After : Feb  1 12:00:21 2025 GMT
        Subject: CN=fb17ba5ab7a1ea6866fbdf577b7542f4d03f0f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:53:2d:84:47:66:0b:9c:f0:8a:54:77:14:
                    8b:a1:f1:2c:d9:64:ae:18:a1:36:93:e5:ac:30:11:
                    2a:a2:83:61:d6:c2:10:c9:4a:1e:e8:66:d5:4d:92:
                    5e:f4:83:37:67:a9:09:99:56:ff:8e:7b:cb:24:58:
                    6e:0e:34:e1:7d:ac:90:81:05:82:b7:74:42:92:1f:
                    69:23:76:93:f5:ac:cd:a5:f2:b7:3d:6b:f5:54:ee:
                    79:5b:c6:15:08:15:65:90:28:16:88:df:3b:da:69:
                    85:7c:c7:7f:b7:c7:ee:4b:0f:40:a4:82:8d:6a:73:
                    3b:ca:82:51:1d:d5:19:77:cc:c1:ed:1b:21:f3:e6:
                    7d:a8:cf:b7:f3:0b:71:7c:9e:f8:56:d7:65:92:2d:
                    71:95:36:60:07:0f:5e:dd:38:68:3b:6d:4f:bd:9e:
                    a3:8a:fd:8b:8c:ce:05:4b:38:65:fa:c5:0b:94:83:
                    a1:af:98:60:ba:25:c1:fd:4b:3d:2c:ff:f7:a2:59:
                    f5:73:04:04:9b:1b:05:2b:c7:e4:38:bf:ff:66:ff:
                    eb:14:27:6f:4c:01:fc:15:61:59:73:31:d9:c5:a6:
                    9f:e7:15:96:81:0b:b1:5a:fa:f9:2a:28:e1:bb:0d:
                    47:37:1c:9e:f9:a3:71:c1:1e:5e:ad:d2:5b:36:a6:
                    40:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:17:BA:5A:B7:A1:EA:68:66:FB:DF:57:7B:75:42:F4:D0:3F:0F:8E
            X509v3 Authority Key Identifier:
                keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:b3:85:dd:fe:d8:c2:1e:d5:46:8b:05:42:48:8d:4d:a0:31:
         82:8f:f1:d8:d8:56:b2:a9:35:e4:6c:cc:19:51:a8:97:3b:27:
         57:f6:18:4e:00:6d:d9:f5:42:7d:57:74:56:f0:87:31:04:ba:
         8f:1e:a6:11:47:60:44:b7:20:67:18:d0:1e:7b:8a:1a:81:30:
         48:30:06:14:33:36:a3:8b:23:08:88:2d:a9:8e:80:53:06:0b:
         91:90:df:bc:06:3f:38:45:ad:45:3c:12:30:45:b6:97:5e:3e:
         9c:08:1b:9b:fb:5f:50:ef:dc:c0:c0:36:06:f1:ad:28:24:51:
         cd:a8:4b:41:1d:c2:6b:b8:dc:5b:f9:60:f8:e9:52:45:90:43:
         a4:59:ec:02:2d:a3:00:b1:1b:73:c0:f4:0e:c5:f2:5d:ae:da:
         7c:8d:8c:19:e6:18:29:b8:1b:eb:cd:9a:6c:91:1e:ca:cc:20:
         38:f0:f6:ae:2f:7c:14:85:5c:51:14:1e:21:1f:d7:ab:ab:5a:
         b6:eb:fe:ae:3b:65:57:df:9b:49:0a:a0:b5:fa:f3:1e:f2:fe:
         78:37:71:0b:1a:e5:11:1a:7f:eb:c8:63:2e:ef:15:dd:9c:d2:
         2b:b2:9b:ad:1b:59:f2:3e:2c:90:39:a9:b4:e6:7b:6c:f1:73:
         a2:0d:4a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:20 2025 by rpki-client