Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
File:                     nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft (raw, json)
Hash identifier:          gW0uGmwMPcAzTIFi/TVaQfWQZDcZsPRtejkisEJ0/QA=
Subject key identifier:   C7:6E:2A:FB:22:4E:1F:FA:E8:79:7F:0A:11:F8:B4:AB:F8:E1:5D:25
Authority key identifier: 9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29
Certificate issuer:       /CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
Certificate serial:       0194BC04AE5630734FADD5EA09520FC79C4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft
Manifest number:          066C
Signing time:             Fri 31 Jan 2025 11:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:10 +0000
Files and hashes:         1: Jc4wKdZujtBQlnsZSGZ-Msh3t-U.roa (hash: yoz3wQ6+m9WewYaNOk0D0h3Hx6RkufI02fLU4g+5owo=)
                          2: nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl (hash: 2xJX1jodDFSnwPdT5Z7EZPeu62ranxmbfuhdPEJBBoU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:ae:56:30:73:4f:ad:d5:ea:09:52:0f:c7:9c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ea73fb87c87b6ff8462016147764e7e4f0ead29
        Validity
            Not Before: Jan 31 11:00:10 2025 GMT
            Not After : Feb  1 11:00:10 2025 GMT
        Subject: CN=c76e2afb224e1ffae8797f0a11f8b4abf8e15d25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:f0:a3:e5:52:e5:32:a7:d4:8b:4b:ba:c7:
                    ba:db:fa:f0:af:cb:4e:6e:9d:6e:04:c7:5b:c1:eb:
                    f9:2f:4f:e0:31:50:fc:c2:9b:20:a4:8f:e6:fc:8a:
                    de:b8:6b:01:3a:16:5a:14:63:3c:af:a9:39:07:b5:
                    4f:03:be:d7:0e:c3:31:2a:9d:c7:ce:b1:16:77:c6:
                    b9:f8:90:cb:88:0d:c8:e5:c4:bc:9a:9e:e7:8a:fb:
                    67:77:03:b9:38:6b:26:18:19:d5:88:27:57:76:cc:
                    dd:63:c3:a2:08:02:a2:e4:bf:0b:cd:e6:3d:32:8e:
                    20:6f:aa:ec:d9:d9:0f:20:1a:61:6e:2b:b4:02:39:
                    9d:56:12:3c:f0:75:f2:27:86:31:84:7c:74:5e:99:
                    36:75:9a:78:5b:aa:52:30:c5:da:7a:06:25:ee:3e:
                    14:2a:23:34:27:a6:6e:05:3d:13:5f:43:1c:4d:4b:
                    a2:c3:0b:ae:0d:e8:b6:64:d4:cc:36:0b:af:bf:62:
                    56:0b:e0:fb:cf:ef:8c:d8:9a:06:fd:6b:80:3c:c4:
                    45:d2:d5:44:db:da:f8:0f:fa:59:75:26:5f:c2:7a:
                    5a:31:fe:a8:66:d0:aa:f7:f2:ff:70:eb:7f:b6:ae:
                    d2:b2:79:33:04:8b:52:23:3e:66:96:82:3a:48:23:
                    c1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6E:2A:FB:22:4E:1F:FA:E8:79:7F:0A:11:F8:B4:AB:F8:E1:5D:25
            X509v3 Authority Key Identifier:
                keyid:9E:A7:3F:B8:7C:87:B6:FF:84:62:01:61:47:76:4E:7E:4F:0E:AD:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/366830-c634-4644-a752-820914022158/1/nqc_uHyHtv-EYgFhR3ZOfk8OrSk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:20:b1:16:a2:f6:c0:7c:1e:aa:b1:52:94:d4:32:e6:d6:18:
         6b:41:a6:8e:3d:ae:87:13:27:03:e7:97:a9:0c:24:71:f7:9a:
         d7:70:3d:31:2b:7b:de:45:62:73:ce:54:25:84:ec:69:54:91:
         e4:75:27:4f:8c:53:ea:28:ab:53:8f:8d:8d:68:22:a3:55:61:
         ab:ea:d0:da:ce:8f:63:af:73:3f:2a:e5:8d:a8:41:5d:af:2b:
         d0:1a:8f:0e:74:da:bd:81:d3:f0:ca:d3:c3:be:a1:da:2e:5a:
         00:73:07:4f:cd:12:56:4e:64:85:1f:d1:20:7c:90:53:88:6d:
         c0:8e:6b:20:4a:3b:44:99:f2:41:c3:71:e6:58:94:96:4e:5f:
         c6:db:ba:34:58:5d:cf:a7:ae:b6:cc:bc:79:1e:39:8e:99:1d:
         36:54:cd:2a:53:82:cc:c4:0b:c9:df:ca:5a:b4:6e:e8:b2:f7:
         cb:cf:10:d0:df:71:38:e7:1c:87:46:ef:ca:db:c2:f6:f7:c8:
         a6:0e:8d:93:dc:02:97:ca:6e:20:e6:70:6e:aa:d0:7e:05:dd:
         95:ea:e7:dc:f7:d2:a4:0c:bf:6f:27:bd:60:37:98:0c:59:7f:
         b5:64:21:2c:50:e7:fd:72:0c:95:53:8d:af:60:f8:70:4d:e9:
         00:e9:51:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:05 2025 by rpki-client