Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/023f71-fa9b-48ec-b838-043ba4418ce9/1/dQnyDhn-pqeeaK0ii9uFzJ35Ork.mft
File:                     dQnyDhn-pqeeaK0ii9uFzJ35Ork.mft (raw, json)
Hash identifier:          CSF+1iAsgQmtwdEcpi/2ktuW6O/YBKZr+nKrZE1kM2U=
Subject key identifier:   AA:B0:6A:4F:08:B2:18:DE:05:36:CB:18:C2:13:C6:FD:DA:86:1E:46
Authority key identifier: 75:09:F2:0E:19:FE:A6:A7:9E:68:AD:22:8B:DB:85:CC:9D:F9:3A:B9
Certificate issuer:       /CN=7509f20e19fea6a79e68ad228bdb85cc9df93ab9
Certificate serial:       0191D63C287F22776458B0B7B06524D3F68B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dQnyDhn-pqeeaK0ii9uFzJ35Ork.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/023f71-fa9b-48ec-b838-043ba4418ce9/1/dQnyDhn-pqeeaK0ii9uFzJ35Ork.mft
Manifest number:          098C
Signing time:             Mon 09 Sep 2024 10:02:32 +0000
Manifest this update:     Mon 09 Sep 2024 10:02:32 +0000
Manifest next update:     Tue 10 Sep 2024 10:02:32 +0000
Files and hashes:         1: 7y94-ylWBzas4_wbCMpJFT4LZ50.roa (hash: RKmvWaobOhl2nWEIk3SWbUjNocfocFNSK9BVyhco1fY=)
                          2: dQnyDhn-pqeeaK0ii9uFzJ35Ork.crl (hash: +GLhHCTxKgom0ywbvxZsTzZdRg+fmCvsD12Lb7l3ZZk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:91:d6:3c:28:7f:22:77:64:58:b0:b7:b0:65:24:d3:f6:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7509f20e19fea6a79e68ad228bdb85cc9df93ab9
        Validity
            Not Before: Sep  9 10:02:32 2024 GMT
            Not After : Sep 10 10:02:32 2024 GMT
        Subject: CN=aab06a4f08b218de0536cb18c213c6fdda861e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:db:63:24:a4:dd:c9:52:eb:7a:bb:28:eb:d8:
                    52:f2:67:86:0d:32:32:55:3a:1b:9b:cf:5f:89:43:
                    2a:61:b8:9d:76:60:e7:19:f7:d7:00:d1:a5:1e:09:
                    90:ec:62:1e:3d:ef:5f:55:f8:fb:b6:77:61:91:fc:
                    11:0c:34:5d:81:ac:87:f1:e0:e1:60:db:38:fe:d6:
                    45:d8:5f:12:55:cc:34:b8:2c:f4:5c:3b:99:19:bb:
                    de:68:2d:13:6d:a7:91:d1:0d:5f:72:d3:57:59:11:
                    99:f6:cf:42:1e:aa:9c:97:a9:7d:bc:36:fc:34:a7:
                    61:b6:81:b4:aa:fb:ab:a3:bd:8d:00:31:d5:6f:93:
                    76:0f:03:5f:71:3e:79:d9:ad:95:83:93:12:7e:ab:
                    8a:fb:ed:66:57:77:5b:65:00:07:c3:70:f7:c0:d7:
                    4d:e6:7e:bf:66:ac:bb:0e:a0:26:c6:9f:a6:c1:5a:
                    17:8e:05:2d:b8:fc:df:d8:5f:13:ca:70:6a:55:da:
                    21:a6:40:77:ce:3e:bf:ab:48:1a:04:85:a8:a2:aa:
                    c8:69:4a:c9:02:00:79:12:a4:db:31:16:20:6d:f6:
                    8e:8b:88:51:94:5d:ec:08:5b:36:55:b9:eb:fc:db:
                    1f:fc:1c:16:00:ef:eb:de:42:7a:68:72:a6:43:17:
                    28:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B0:6A:4F:08:B2:18:DE:05:36:CB:18:C2:13:C6:FD:DA:86:1E:46
            X509v3 Authority Key Identifier:
                keyid:75:09:F2:0E:19:FE:A6:A7:9E:68:AD:22:8B:DB:85:CC:9D:F9:3A:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQnyDhn-pqeeaK0ii9uFzJ35Ork.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/023f71-fa9b-48ec-b838-043ba4418ce9/1/dQnyDhn-pqeeaK0ii9uFzJ35Ork.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/023f71-fa9b-48ec-b838-043ba4418ce9/1/dQnyDhn-pqeeaK0ii9uFzJ35Ork.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:e2:57:76:df:44:db:c5:47:72:88:49:6f:38:42:b8:7e:dc:
         4f:96:af:bf:e4:2a:dd:7c:9c:0b:e5:fd:2a:a6:83:1c:73:41:
         dc:2c:04:62:c4:b8:b8:9c:4f:53:ce:c4:9f:67:1b:dc:a9:e8:
         48:e5:b4:7a:a1:08:1f:a3:e7:61:28:7d:df:a9:29:b8:6f:39:
         19:d0:13:bb:d8:f9:93:53:0f:34:45:50:e4:b6:b4:98:11:93:
         e7:e1:d9:4a:71:94:42:3d:e8:dc:b9:9e:3f:50:e8:6d:ee:be:
         86:01:09:57:2f:c1:e5:e8:bf:83:f3:17:79:1f:1d:3c:f3:2a:
         1f:cf:49:d5:cd:14:81:1a:94:54:52:bf:dc:33:5f:0f:d5:7e:
         31:00:8e:50:68:0e:f1:92:28:be:64:fd:de:ec:d6:99:46:f7:
         d6:43:d6:d7:77:e8:36:0e:9b:89:80:d5:e0:c9:cc:31:46:19:
         01:2f:a3:74:35:ba:71:87:9a:2b:8d:b8:cc:a8:79:f5:f0:0c:
         b2:77:ed:92:b8:ef:06:72:67:a6:5a:f2:8e:56:e7:75:d5:06:
         d4:43:23:4c:d1:57:a4:e2:54:aa:d1:4d:61:dd:2e:15:f6:e3:
         5f:31:f7:00:18:7f:b2:cf:3a:da:b2:cf:fa:09:20:ff:ca:1d:
         a2:81:0f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:59:31 2025 by rpki-client