Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
File:                     nlUyAHdpaUSxYTwujJxgah4G63k.mft (raw, json)
Hash identifier:          BReUSLFYRaA/BO9bsjqYK0ha3ZqrAjETHUYvcwUHI9c=
Subject key identifier:   E8:B4:CC:36:41:52:7C:26:9F:2E:C2:0E:15:61:39:FE:7B:85:9C:36
Authority key identifier: 9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79
Certificate issuer:       /CN=9e55320077696944b1613c2e8c9c606a1e06eb79
Certificate serial:       0195E0B45D8F734CA7E47A490E8D2A0E0523
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft
Manifest number:          14DF
Signing time:             Sat 29 Mar 2025 07:01:11 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:11 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:11 +0000
Files and hashes:         1: QJqE80vTZcABh8uMbWp_f5_BfGo.roa (hash: KSZyfhop/9B2Ebujy/Ez1nbME08Ct9341a602ePTFAM=)
                          2: QjtWj02YBmI5Jv7YvgwRw2CvoyA.roa (hash: xzR/aqYGTG/UIUSP1rL50ozgA3zAN0ypP0J4BQa6rSk=)
                          3: crvEgPTpcYjRSHsrYeLgXXEBKUk.roa (hash: 7eXEVTxEH/UTzDacXKPIjatCFJu/CB4kzr15IvQwXDk=)
                          4: hvCCVUZ3vm78utey9zVykeFfmZg.roa (hash: 8LKNeWR/ydRJi6I0838T1dU97Q8jY2cXv/vQVdAuDbQ=)
                          5: nlUyAHdpaUSxYTwujJxgah4G63k.crl (hash: 2qQ3Yy8saAsegrDVKHSo2jAbEGNrsWhjPmPrq3rzHAk=)
                          6: oGavUwYGf9k8hmqppcV6OhAR0l8.roa (hash: xxSUypsCBzVEfCKjWpeRgbmsfcja4p6HlyrSFwzu1Eo=)
                          7: ofJM-BOf8d42dE82c9Ub9dgl42A.roa (hash: 5Kr1/Loqh5IoZ9YAjtlJKKCAtdpo/Xrh4HBNFY8lq58=)
                          8: qealtEqMLJg3Xy2LvZJt_teWrWQ.roa (hash: jUDg3WMKq6N0QAPZM0fHhLPl0mZhBgxm/pe95LVDZy0=)
                          9: yU3PmPgtk_Q1_ItafnX_KVBrbCk.roa (hash: GoQsAvbsk/WPOH6IvKcU+h1jpthGhWlcRsfJ2nlir2A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:5d:8f:73:4c:a7:e4:7a:49:0e:8d:2a:0e:05:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e55320077696944b1613c2e8c9c606a1e06eb79
        Validity
            Not Before: Mar 29 07:01:11 2025 GMT
            Not After : Mar 30 07:01:11 2025 GMT
        Subject: CN=e8b4cc3641527c269f2ec20e156139fe7b859c36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:be:43:ef:4f:57:61:4e:e7:22:27:71:80:0d:
                    2b:9f:4f:1e:64:d9:8a:32:47:6d:bd:fb:b4:95:15:
                    d3:65:6e:f4:fc:a4:61:52:38:40:1f:65:f3:af:74:
                    1d:7f:d7:fe:37:30:d4:82:43:a5:9c:1f:89:d6:23:
                    c8:64:47:09:1c:63:a9:66:f0:3b:87:7f:35:b4:a2:
                    19:7e:6d:fd:65:15:31:de:b2:4e:c4:2b:bc:94:3b:
                    43:a8:7a:d4:8d:2b:3c:ff:47:3e:13:5e:3c:47:13:
                    92:8b:e0:c8:b7:00:76:94:41:6f:02:a0:a3:1f:b4:
                    d5:61:50:fd:17:ba:c5:d5:11:9e:af:94:fe:58:6b:
                    c6:16:31:32:bf:d4:b6:ad:b2:5f:fb:71:10:0a:b6:
                    ec:90:f5:d3:bd:72:48:d1:43:78:c6:bd:cc:a6:25:
                    ed:6b:b1:90:b2:64:11:ed:d8:9d:59:ca:9b:a6:3d:
                    c1:28:ef:74:02:cd:38:24:fa:ba:99:b7:41:9f:e7:
                    76:e0:2e:22:ba:16:a6:c8:c5:0d:82:f4:3b:f8:c8:
                    4f:ce:68:78:98:e3:0c:08:84:82:d9:c0:57:d6:4f:
                    24:29:ba:07:3d:5c:4e:52:d2:9f:12:23:bd:b9:7a:
                    23:02:0e:14:b2:74:01:05:65:ae:0c:df:70:58:00:
                    3c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:B4:CC:36:41:52:7C:26:9F:2E:C2:0E:15:61:39:FE:7B:85:9C:36
            X509v3 Authority Key Identifier:
                keyid:9E:55:32:00:77:69:69:44:B1:61:3C:2E:8C:9C:60:6A:1E:06:EB:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlUyAHdpaUSxYTwujJxgah4G63k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/260b61-a348-4d47-92f6-1e0e8b909e34/1/nlUyAHdpaUSxYTwujJxgah4G63k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:78:10:1d:60:d1:c9:eb:09:3a:6f:3e:7c:67:b9:c9:0c:34:
         f5:28:02:61:fb:65:a3:0c:ba:94:cd:11:a9:ce:34:07:33:a3:
         67:83:40:40:25:12:f6:54:2b:77:6e:27:d5:5a:3c:be:bc:aa:
         9e:d3:e6:d4:cd:d0:33:33:c9:d4:8a:00:f0:49:d1:aa:93:ec:
         f5:28:c0:a0:5b:85:d4:f7:75:c9:86:3a:c4:4b:f7:3e:21:90:
         28:7c:19:3c:b8:a0:be:0b:61:63:30:d8:48:be:12:1a:56:b0:
         e8:96:ed:dc:6b:7c:89:7d:50:7e:ff:c2:dd:2f:16:e3:0e:70:
         f2:d3:e5:12:05:f9:d9:d6:ed:eb:f6:07:cf:81:e8:0c:f4:cc:
         84:5a:f4:15:72:fd:2a:ab:46:aa:90:9a:62:44:b6:2b:48:b6:
         8f:5f:c8:8d:5d:f1:a7:1d:47:42:bb:ea:63:79:61:84:21:57:
         21:a6:63:37:0d:fe:4d:4a:a7:60:57:ec:55:da:be:21:df:ea:
         70:6f:8c:98:ef:ae:9f:89:7b:78:58:00:0a:aa:01:a8:fa:ca:
         29:8d:c1:08:e8:36:36:96:29:07:cd:80:e0:ab:fa:65:08:06:
         40:cf:ec:44:dc:c2:7d:a2:40:78:e7:be:ad:27:86:ca:0e:3d:
         46:af:31:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:37:49 2025 by rpki-client