Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
File:                     N1oGTzAQJrw8-HZm1qggEoISqBE.mft (raw, json)
Hash identifier:          D6qhL0Y4UsYG6VEa9on45MBlSwoq3Fa5Jis5fVZyJcM=
Subject key identifier:   83:F9:DB:D7:1D:5B:00:F1:2D:A2:0F:1C:51:3A:FB:3E:7D:DD:64:F5
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Certificate issuer:       /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial:       0195E1599946067FCD1B23B835DA0B00BE96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
Manifest number:          14FB
Signing time:             Sat 29 Mar 2025 10:01:40 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:40 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:40 +0000
Files and hashes:         1: BnXCHb06Dj0tdI2yKB0zGdO2IU8.roa (hash: ys02cLDkHPrswTiSU0uDFel33CB3A73HP1Azmx6rhbA=)
                          2: IX5R2XsrF811pCyYXDNZoJSyFRA.roa (hash: /gZBIGQCMYCl4cQjL9WjQOfClbjeyQFk5ObTpmqIsLs=)
                          3: N1oGTzAQJrw8-HZm1qggEoISqBE.crl (hash: g0wO2oUoQsVLE7PJnmZc1aDCRnEANflJXit9okp3dAg=)
                          4: Np1AqOGsTVm4b7PU4q2Ym4AhTQ4.roa (hash: gOor81zffrAZ51A4wHFBhBWmMuS0TeHsEmFrT2SiKO8=)
                          5: Tbof-4aZ0VQUdZsgIoMBC5FBick.roa (hash: QIa6RV95cu9pHdFNYbOKsVEQPNGhX431Y5yIZA5T6KM=)
                          6: lbz_04eUBmkCrsObDIi_l3hQ9kE.roa (hash: 9b+KSYQE0O1uMcRhVoqK3mtyhTf347ICutm/lJE1J/Q=)
                          7: vMQcu8dVQTXwOHWQwcsxAHzUOxA.roa (hash: KCT7eisgtXh1YmsQ/Nh86nF1rLU2oyDhZb6B9PyRluA=)
                          8: yp2315R2ufQovlLYyqvF4L6qpic.roa (hash: 38mTLXaspclVGWUyPHzLZfab7SdFQNnMV+B1NXi8FuU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:99:46:06:7f:cd:1b:23:b8:35:da:0b:00:be:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
        Validity
            Not Before: Mar 29 10:01:40 2025 GMT
            Not After : Mar 30 10:01:40 2025 GMT
        Subject: CN=83f9dbd71d5b00f12da20f1c513afb3e7ddd64f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:aa:d7:36:5a:40:dd:c9:cf:7d:c1:a2:e4:19:
                    6a:12:0d:f6:0a:fc:e7:c3:b2:97:20:36:17:29:4b:
                    cf:a5:62:34:a7:04:af:9d:b9:c8:42:e4:05:3a:9b:
                    6b:06:85:4d:ff:b0:5d:b6:d1:61:14:7e:9b:05:89:
                    1c:93:98:e9:8d:6e:c1:09:37:90:a2:b3:8b:22:03:
                    f1:73:89:7f:e9:fc:7a:e6:10:38:37:da:c0:f1:c4:
                    12:f4:2c:b9:19:e0:7e:f9:c2:8c:7b:9b:a3:76:0f:
                    bf:df:23:42:5d:5a:f6:01:54:02:ae:57:0b:7f:e8:
                    8d:e0:2e:1a:7d:e9:e5:1e:a9:0d:62:04:f4:6f:91:
                    69:3b:da:8d:d6:49:ed:23:b5:5d:10:79:e1:fa:d7:
                    90:6e:b5:e5:38:4a:f5:64:e5:04:04:1d:1e:98:d3:
                    77:a7:a8:f7:f7:34:bf:db:cb:0a:12:c4:01:28:ed:
                    d0:69:49:dc:7e:e1:ae:28:16:71:42:48:15:9f:83:
                    81:84:4d:66:21:d4:25:d8:d8:6b:e0:9f:78:83:9c:
                    55:0e:2d:01:d9:4b:dc:3c:2b:00:ce:68:4e:4b:d8:
                    d5:b5:5c:dc:94:b5:f1:07:5e:19:c8:b1:78:36:0f:
                    b8:b8:a1:15:48:01:33:24:cb:b7:e8:65:67:01:fd:
                    19:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F9:DB:D7:1D:5B:00:F1:2D:A2:0F:1C:51:3A:FB:3E:7D:DD:64:F5
            X509v3 Authority Key Identifier:
                keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:89:ef:36:ee:9c:c9:a6:09:cc:00:b1:2b:70:fe:40:85:aa:
         08:f8:ad:95:f2:18:d4:75:19:98:58:86:2a:89:3b:88:ef:94:
         56:30:8a:89:56:dd:25:2b:b9:b9:59:0c:38:8d:8f:44:36:da:
         5f:c3:9b:d7:1b:ce:b0:8c:11:7e:5c:a2:10:d3:06:21:2c:ff:
         45:64:c9:37:a2:db:b0:8c:4a:fe:44:92:3b:a1:fd:e4:78:c0:
         58:30:d9:ea:2a:0a:81:72:aa:37:d3:6c:16:2a:7b:91:f4:29:
         ce:18:c2:17:3e:3e:c8:27:d8:ad:50:8c:a4:00:ec:80:c0:bd:
         27:a1:40:88:b0:66:95:8e:1b:72:61:70:21:a8:d8:51:94:9c:
         e7:4c:26:ac:4d:0b:18:6e:f4:1b:2a:4c:4b:fb:35:e0:02:eb:
         0e:a7:12:73:95:8b:1d:46:dc:be:b4:9e:9e:44:31:b4:ee:d0:
         37:8a:98:cb:4b:6e:ba:2f:a6:9b:ff:2f:a1:7c:ff:1c:3d:ec:
         e2:9e:b1:3c:cd:56:60:6e:29:e7:73:68:df:fa:02:f6:aa:64:
         21:67:a3:4d:48:d8:6d:30:82:c8:96:18:90:95:26:8f:ca:b5:
         61:bc:c9:50:ec:e9:19:e8:8c:e3:3b:74:8b:45:34:d7:af:40:
         ea:d7:ab:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:28 2025 by rpki-client