Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
File:                     mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft (raw, json)
Hash identifier:          CsnvyDf1df434ihxds2s4BeZVnAka/eXxLdooY+1FjE=
Subject key identifier:   FE:0E:41:95:D0:17:33:8E:52:16:90:1D:AE:79:64:E0:C6:23:00:4F
Authority key identifier: 99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB
Certificate issuer:       /CN=99252ff7f4dcf62234d22f86a1135b344923daab
Certificate serial:       0194BC3C1944D0BF81CC99B6F04399DA4EA9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft
Manifest number:          06E1
Signing time:             Fri 31 Jan 2025 12:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:42 +0000
Files and hashes:         1: 7qi71OAs6leux75HGJJKxd48zLc.roa (hash: z9Iokxbw9AVC6K3SxkWdhXBi3p5Bja4hYfL/NkWRSQw=)
                          2: mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl (hash: l4esDzQSRYQRWg0CajdwmPgZ77Q8/0XG3a7Y6T+aZfQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:19:44:d0:bf:81:cc:99:b6:f0:43:99:da:4e:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99252ff7f4dcf62234d22f86a1135b344923daab
        Validity
            Not Before: Jan 31 12:00:42 2025 GMT
            Not After : Feb  1 12:00:42 2025 GMT
        Subject: CN=fe0e4195d017338e5216901dae7964e0c623004f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:f2:d5:52:ae:05:e0:98:79:e0:10:30:d1:
                    82:e7:35:66:bf:66:29:8b:4d:e2:d9:50:8e:e2:f2:
                    8c:c8:5f:a5:a8:a1:88:7e:e2:cf:ef:4f:ee:d0:fa:
                    8b:dc:39:83:d3:29:1d:70:72:ac:7a:ba:2f:ce:69:
                    4a:27:48:95:7b:9d:6d:b5:23:92:50:2f:ae:8e:f6:
                    bc:39:e6:b9:cd:83:38:54:39:f0:14:aa:6f:47:93:
                    a7:95:e9:36:c3:11:4a:3b:28:cf:3f:7f:63:ce:25:
                    89:9c:d6:fe:63:b1:89:ab:1e:c1:45:3f:50:48:6f:
                    26:08:77:c8:1c:60:96:0f:b3:cf:5e:94:cb:b7:da:
                    61:15:b4:06:3e:ab:eb:5a:ea:42:a0:3a:13:d6:c5:
                    ef:7d:e4:23:f2:d5:50:32:a2:6a:1e:35:68:33:69:
                    6f:ec:bd:7f:02:46:7a:35:0a:8c:88:8a:b2:a5:21:
                    4c:31:2d:06:77:f3:63:27:0d:dd:6e:76:e7:f8:d0:
                    28:48:ea:6f:b8:80:5f:3d:37:23:02:ff:17:8f:52:
                    95:c4:a9:b8:f7:c5:ce:d0:c8:8e:4a:dd:00:3a:53:
                    73:5c:8f:21:b3:b7:6f:1d:f9:a2:4c:d1:8a:9a:69:
                    aa:fd:50:7c:a4:5b:74:96:7f:bd:50:77:15:2a:d0:
                    92:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:0E:41:95:D0:17:33:8E:52:16:90:1D:AE:79:64:E0:C6:23:00:4F
            X509v3 Authority Key Identifier:
                keyid:99:25:2F:F7:F4:DC:F6:22:34:D2:2F:86:A1:13:5B:34:49:23:DA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mSUv9_Tc9iI00i-GoRNbNEkj2qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/c920da-1df8-4927-8831-ab0664e63fb6/1/mSUv9_Tc9iI00i-GoRNbNEkj2qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:14:a4:1b:38:41:84:4e:d9:20:1b:11:a3:7f:d0:fc:ff:ee:
         e5:ae:78:d7:10:7e:b1:1a:05:26:36:fe:7a:b1:b1:8c:7f:5a:
         f3:59:d9:96:e4:f1:77:fe:f8:b3:4b:6c:e9:71:74:f8:14:66:
         17:80:cf:49:39:b6:a3:8d:b5:9a:02:7b:8d:51:cb:c0:e2:89:
         fc:2a:a9:31:30:cf:bd:51:b2:7d:7c:f0:5b:c7:53:44:b1:1c:
         53:5f:9c:ec:31:c1:4d:94:f6:40:89:fa:9c:57:d2:e2:bd:66:
         46:56:4b:c0:5f:50:46:9b:ae:01:75:46:9a:8d:48:12:53:7d:
         cc:6f:bb:51:ac:89:c3:50:30:52:2c:b9:79:bc:56:39:e7:cb:
         76:5a:c2:e8:bf:c3:ef:9d:c5:8c:2e:a5:ff:f7:6c:ca:52:8f:
         a9:df:b6:ce:09:26:be:a7:88:a4:5b:f4:d1:1d:1b:1b:7c:1d:
         73:c0:a7:e8:d7:55:f1:a3:fb:eb:dd:9d:f9:24:00:fe:c4:c0:
         5a:53:a4:91:71:c5:77:d5:e5:e0:a1:ee:3f:a4:9f:ca:b9:96:
         6d:ae:f6:89:3b:b8:c2:09:5b:dd:61:87:b9:29:83:f1:e4:cb:
         fc:fa:fd:b9:78:ff:12:01:cf:99:9a:e8:3e:f4:90:72:5e:df:
         31:6e:18:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:06:43 2025 by rpki-client