Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.mft
File:                     himZ5D_2yece78WG-jpj_f6irkw.mft (raw, json)
Hash identifier:          r8GNSFPa0BRaENI99YaysyJlZlhEW7eCH1yHErEJSKY=
Subject key identifier:   9A:9C:97:E2:65:69:93:92:CE:0A:85:53:84:1E:E5:A7:19:13:B3:02
Authority key identifier: 86:29:99:E4:3F:F6:C9:E7:1E:EF:C5:86:FA:3A:63:FD:FE:A2:AE:4C
Certificate issuer:       /CN=862999e43ff6c9e71eefc586fa3a63fdfea2ae4c
Certificate serial:       0197866060910BC791AECF58FE8307C8E9CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/himZ5D_2yece78WG-jpj_f6irkw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.mft
Manifest number:          0380
Signing time:             Thu 19 Jun 2025 04:09:12 +0000
Manifest this update:     Thu 19 Jun 2025 04:09:12 +0000
Manifest next update:     Fri 20 Jun 2025 04:09:12 +0000
Files and hashes:         1: himZ5D_2yece78WG-jpj_f6irkw.crl (hash: 4VyV9W6GH83CHaaZk8l6rLhNAq4LXuuwNAYJBm/rk9o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:86:60:60:91:0b:c7:91:ae:cf:58:fe:83:07:c8:e9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862999e43ff6c9e71eefc586fa3a63fdfea2ae4c
        Validity
            Not Before: Jun 19 04:09:12 2025 GMT
            Not After : Jun 20 04:09:12 2025 GMT
        Subject: CN=9a9c97e265699392ce0a8553841ee5a71913b302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:75:08:5d:d4:63:91:95:d8:26:ae:42:e6:c9:
                    1a:3b:bc:cf:d8:ff:35:23:77:23:35:5b:b3:37:0b:
                    72:65:e1:35:46:27:13:92:08:a2:69:34:0d:17:1d:
                    89:33:00:6b:df:88:bb:be:e7:b3:ac:c3:0b:a6:d9:
                    2f:29:10:6a:bf:09:32:6c:9f:c2:1f:20:cc:49:59:
                    b6:6e:8a:df:dc:93:91:1d:6f:26:c9:ce:98:76:ef:
                    2f:eb:02:14:93:e5:dc:ac:a1:5b:cc:36:43:af:79:
                    d3:fd:51:01:de:76:7a:67:c9:7f:ba:1f:68:89:f1:
                    2f:d3:a5:20:7d:31:3c:bb:6c:bb:a1:3a:a6:e2:d5:
                    59:b5:31:93:81:37:57:6d:39:02:2d:b4:90:41:1e:
                    e1:b4:a2:b1:9d:8d:0a:b9:7a:63:89:2e:ee:97:f5:
                    cd:e7:de:6c:15:24:b4:c3:02:64:1b:a6:bd:d0:cc:
                    30:f0:07:b6:82:b7:7f:15:50:5f:65:e4:14:63:40:
                    88:eb:22:16:46:5f:6a:90:3a:ec:92:2e:a6:3a:59:
                    56:26:3f:f0:38:82:8d:f0:80:6b:0f:4a:b2:7d:ca:
                    6e:95:6c:40:bd:60:c9:50:0c:63:65:62:95:85:69:
                    69:7e:1d:e0:dd:3c:d9:26:ab:c3:5b:48:4e:27:a3:
                    6e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:9C:97:E2:65:69:93:92:CE:0A:85:53:84:1E:E5:A7:19:13:B3:02
            X509v3 Authority Key Identifier:
                keyid:86:29:99:E4:3F:F6:C9:E7:1E:EF:C5:86:FA:3A:63:FD:FE:A2:AE:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/himZ5D_2yece78WG-jpj_f6irkw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/e7c92c-08e0-4758-b830-f5dfaa0cbdd0/1/himZ5D_2yece78WG-jpj_f6irkw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:bb:89:37:73:77:94:d0:7e:e3:72:43:c3:77:77:34:30:3b:
         e8:f2:10:97:f7:4a:74:55:a0:ec:f1:c4:2f:bd:01:f8:56:71:
         c3:87:d1:6b:3c:fd:ee:40:2e:fb:e5:c6:e7:42:ce:c0:ab:cf:
         e0:19:7f:32:82:df:d1:7d:58:23:c8:d0:ce:f8:fe:21:af:a1:
         5d:f0:9f:3e:61:de:fc:27:6e:dd:68:dd:e7:67:4e:5b:aa:d1:
         e5:34:b9:16:9b:36:77:43:4f:32:95:31:e6:13:97:8e:42:08:
         63:43:7c:7f:e6:a3:7a:18:42:9a:86:95:ed:a7:fb:b8:93:39:
         76:67:7e:8e:98:0a:3f:e2:8b:ed:95:b5:bc:ef:15:54:8f:51:
         8c:55:51:a5:5e:88:e9:b8:3e:54:b0:df:8f:4a:e4:a7:f2:0b:
         4d:37:4d:6d:19:fa:f3:df:f8:80:0f:e1:b9:5f:d3:fb:3b:d9:
         a1:48:17:8b:f3:4e:be:32:67:a0:3f:ea:fa:cd:88:d9:47:02:
         04:35:99:c7:0c:51:a0:ff:b1:99:70:91:90:f1:2e:ff:88:3c:
         4f:b1:38:ed:ce:b3:03:67:22:84:27:d6:db:77:d0:0a:a8:a1:
         38:e3:df:dc:f0:9d:7a:cd:45:56:93:39:04:bd:93:4f:6a:fa:
         58:09:8e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:50:25 2025 by rpki-client