Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft
File:                     9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft (raw, json)
Hash identifier:          e1ecI5tbiNOGlWTWbTEH/Bm7/yDoU9+sRuiV0UpKrGk=
Subject key identifier:   92:EB:C3:85:06:37:28:A6:6F:EE:76:06:3B:3E:8A:A1:2E:53:57:04
Authority key identifier: F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE
Certificate issuer:       /CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee
Certificate serial:       0194BCA9C1734C88B920AEA2476846FE738A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft
Manifest number:          0FEF
Signing time:             Fri 31 Jan 2025 14:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:29 +0000
Files and hashes:         1: 9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl (hash: iNpg+jKgcBJhlmawdpQrUftF2ThC8/GiK4FxohsoKPY=)
                          2: NdVRxEIMNBunZfZP9qXNSfaySc4.roa (hash: KRJlcuUveV33SEu3V+UuJaoqvZJ1ZgJGxVWpQ++tEBk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:c1:73:4c:88:b9:20:ae:a2:47:68:46:fe:73:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f69f8bcf2a2ec10f9e4b6302e1b3509f3d0336ee
        Validity
            Not Before: Jan 31 14:00:29 2025 GMT
            Not After : Feb  1 14:00:29 2025 GMT
        Subject: CN=92ebc385063728a66fee76063b3e8aa12e535704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d0:48:63:30:fa:34:76:ed:f2:c6:51:5c:34:
                    80:cb:c3:34:00:d7:aa:81:ad:16:dd:c3:4a:b6:40:
                    90:4a:22:a9:97:df:cf:75:8e:b3:61:d2:db:71:9e:
                    e9:0f:62:54:b7:4e:22:ad:37:75:3f:48:c0:b2:91:
                    ae:a2:7b:cc:db:cb:3e:0b:53:29:1b:5c:47:93:53:
                    c9:df:14:e3:54:95:44:73:f9:49:e7:81:1b:e6:92:
                    a6:e6:db:ff:58:bb:f2:bc:2c:24:99:15:8f:53:f4:
                    7d:dc:10:91:0c:f0:a0:bf:06:a6:35:00:ed:9d:f6:
                    ad:70:97:dc:5b:7b:7a:a0:aa:d4:a3:04:53:f9:27:
                    a4:ad:ed:ff:3a:e9:86:62:17:7a:55:dd:f9:68:be:
                    39:13:ae:ad:2b:2b:0b:b6:39:c9:83:9d:3c:e8:3e:
                    40:87:bb:ec:92:4a:b0:29:13:6c:d2:2e:8f:47:35:
                    61:ef:63:d6:23:58:9a:42:a4:64:86:9b:e3:1f:e3:
                    be:01:d2:4f:c1:45:96:4b:c2:bd:44:34:a4:63:38:
                    80:ca:54:8d:15:63:48:cf:de:35:91:bd:f1:2f:78:
                    1e:bb:2f:4d:d9:e4:de:40:f2:2e:39:6d:8b:a2:d3:
                    3b:b3:73:a5:5a:12:c3:05:47:7a:45:03:86:a9:17:
                    22:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:EB:C3:85:06:37:28:A6:6F:EE:76:06:3B:3E:8A:A1:2E:53:57:04
            X509v3 Authority Key Identifier:
                keyid:F6:9F:8B:CF:2A:2E:C1:0F:9E:4B:63:02:E1:B3:50:9F:3D:03:36:EE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9p-LzyouwQ-eS2MC4bNQnz0DNu4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9c8ba1-8407-4c2a-912a-00a7704774e1/1/9p-LzyouwQ-eS2MC4bNQnz0DNu4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:cf:f6:40:50:51:88:fa:a6:02:86:a7:db:1c:ba:aa:02:b5:
         a3:dd:62:61:e4:1b:7c:6a:63:d2:63:7e:f4:c8:06:f0:eb:68:
         37:00:dc:1b:96:f9:17:39:18:0b:bd:6a:12:08:62:8a:b5:11:
         11:84:33:de:49:22:1c:e8:7b:99:91:67:81:5b:98:d3:93:a1:
         72:56:cb:74:da:8f:82:d1:ab:91:5b:02:0d:b1:88:28:31:0f:
         33:9c:48:50:a9:c2:8c:b9:ac:e0:cf:20:77:c8:f9:27:70:99:
         03:a3:9f:31:15:a2:39:df:70:09:4c:8b:b5:f2:5b:56:cb:ad:
         1d:26:87:0d:fc:c9:ca:47:1b:dc:5a:2d:5b:e1:15:06:fb:7d:
         14:bf:d0:bc:cd:8e:27:9a:1c:55:ef:00:ca:28:b3:4e:b9:fd:
         1e:1c:d4:ac:c5:01:3f:dd:6f:82:2b:59:0f:c7:54:79:b3:ef:
         33:42:4a:0c:46:e5:24:ab:ec:e2:0f:91:f3:0e:c5:e9:52:31:
         7a:09:ef:d0:5f:1c:1d:d6:eb:6d:71:fe:3b:0c:d7:63:63:6b:
         a8:19:e9:be:9c:5c:24:17:f0:7c:2b:0b:f3:1b:4f:3e:52:7f:
         4a:24:c8:ad:7a:a5:c2:ca:8b:29:2d:17:03:fd:29:50:55:60:
         4e:93:a4:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:12 2025 by rpki-client