Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/819e39-c00c-49b0-a768-4406688eef85/1/dNNKu-mvuigEMsKrg4mMe5UN96w.mft
File:                     dNNKu-mvuigEMsKrg4mMe5UN96w.mft (raw, json)
Hash identifier:          sfvC+k4c9AuWBot/CQPpiz9DxmjhnCQEXjUhENt+7T8=
Subject key identifier:   00:25:1A:B6:07:E2:C2:3F:CF:9D:EB:2F:55:7F:64:F6:75:0A:D0:EE
Authority key identifier: 74:D3:4A:BB:E9:AF:BA:28:04:32:C2:AB:83:89:8C:7B:95:0D:F7:AC
Certificate issuer:       /CN=74d34abbe9afba280432c2ab83898c7b950df7ac
Certificate serial:       019444801B1DBEA65F0F9AC94243F3C8C4D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dNNKu-mvuigEMsKrg4mMe5UN96w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/01/819e39-c00c-49b0-a768-4406688eef85/1/dNNKu-mvuigEMsKrg4mMe5UN96w.mft
Manifest number:          0939
Signing time:             Wed 08 Jan 2025 06:00:33 +0000
Manifest this update:     Wed 08 Jan 2025 06:00:33 +0000
Manifest next update:     Thu 09 Jan 2025 06:00:33 +0000
Files and hashes:         1: OAHDY3Esd2bFMqfXH9wjGqOdXkA.roa (hash: ezGRfrEUgs6GAni5G5KnMMu2HuLSOxs8x40d/tWUdSI=)
                          2: dNNKu-mvuigEMsKrg4mMe5UN96w.crl (hash: q7Qrf1ufoVnzHwsCT9VwFz+EB0mkacZimkFuIR2Pkh8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:44:80:1b:1d:be:a6:5f:0f:9a:c9:42:43:f3:c8:c4:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d34abbe9afba280432c2ab83898c7b950df7ac
        Validity
            Not Before: Jan  8 06:00:33 2025 GMT
            Not After : Jan  9 06:00:33 2025 GMT
        Subject: CN=00251ab607e2c23fcf9deb2f557f64f6750ad0ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:13:81:fc:5d:88:78:c0:aa:0e:94:d4:7b:33:
                    4f:8e:1b:34:20:e1:58:98:d0:c9:cd:a5:f6:fe:33:
                    cd:fa:66:7a:50:8a:63:eb:b6:0d:54:c6:7d:85:a5:
                    dc:5a:bd:d4:77:17:3e:6f:b0:82:92:9c:60:6c:22:
                    f4:ab:da:dd:84:49:5f:fb:22:8e:be:f0:66:f1:a1:
                    a5:d4:2b:f0:28:2d:59:b7:99:ac:9e:1e:47:f9:09:
                    83:c2:76:b4:54:37:08:f3:dd:ce:66:73:90:04:5a:
                    56:09:45:71:88:cc:b4:1e:2a:9c:92:1c:38:fc:32:
                    d3:14:8c:30:13:7b:f4:06:d0:32:53:47:61:b9:24:
                    d9:48:9a:c9:ad:c6:10:73:ea:fe:84:a8:5b:d2:47:
                    5b:8a:e8:79:0e:c8:48:c1:39:30:2f:69:36:98:84:
                    28:3d:64:40:4c:d0:d3:79:4c:78:ff:8a:5f:1f:c3:
                    65:31:93:33:79:48:aa:0c:41:8e:bf:92:4e:5a:c7:
                    7e:b1:65:e5:25:2e:79:c8:d2:97:9d:91:2c:88:1f:
                    2e:c6:e1:01:28:b5:7e:3d:63:62:0e:6c:11:9b:98:
                    01:e8:69:74:a7:2b:f5:99:d8:1c:3a:7e:c0:3b:b0:
                    d3:cc:86:8d:cf:bc:34:7d:71:f9:3f:78:a1:45:15:
                    15:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:25:1A:B6:07:E2:C2:3F:CF:9D:EB:2F:55:7F:64:F6:75:0A:D0:EE
            X509v3 Authority Key Identifier:
                keyid:74:D3:4A:BB:E9:AF:BA:28:04:32:C2:AB:83:89:8C:7B:95:0D:F7:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNNKu-mvuigEMsKrg4mMe5UN96w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/819e39-c00c-49b0-a768-4406688eef85/1/dNNKu-mvuigEMsKrg4mMe5UN96w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/01/819e39-c00c-49b0-a768-4406688eef85/1/dNNKu-mvuigEMsKrg4mMe5UN96w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:da:84:88:35:e5:b0:5d:85:e6:ed:ea:45:3e:c6:4e:5d:ae:
         1d:3e:dd:1a:de:db:e9:98:b8:ae:74:4b:9f:36:f4:34:fb:af:
         92:af:75:a0:4a:cb:9e:69:99:d9:e0:4e:e6:83:02:ed:01:4b:
         04:0e:8b:54:01:0f:29:51:b3:9b:fa:e3:36:01:10:63:d5:e6:
         b0:e8:88:0d:f7:38:b3:5b:35:89:4d:0a:d1:6d:94:17:ae:33:
         b5:fd:bf:55:da:e8:52:df:f5:fb:8a:84:fd:89:0a:c7:c7:ef:
         cb:ce:21:a1:f8:a1:1e:45:d7:9e:16:5b:fa:ab:45:db:90:f9:
         a4:d8:2c:87:22:f4:2e:11:37:13:8e:18:24:04:ea:6b:16:47:
         8e:66:80:6c:6b:c9:57:1d:fd:35:b5:08:59:5a:b7:67:3d:05:
         38:29:02:b1:0f:07:88:63:d9:c3:dc:35:08:a2:55:cb:4d:8e:
         ea:a2:98:2e:90:90:f4:25:07:e9:40:0a:0d:69:a9:2d:26:57:
         a2:a7:40:a0:e7:52:8b:6c:f8:70:3a:f0:b7:38:cc:6c:b8:0f:
         d3:d0:4d:c3:1c:8e:a0:7b:62:e6:b4:18:6b:94:eb:d7:09:24:
         48:7b:fa:fd:77:cc:f3:ce:58:58:53:6b:ad:3a:ba:a3:20:8c:
         04:0f:2b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:01:20 2025 by rpki-client