Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ba9940-338d-420b-a500-548f512f4f29/1/nZYG7e75CJWc5DNqs5XKkIMxYQg.mft
File:                     nZYG7e75CJWc5DNqs5XKkIMxYQg.mft (raw, json)
Hash identifier:          1IfeWP/ZC18Y54VUYsY3Zd/vP5BnCFYAxjD4JEfZDlk=
Subject key identifier:   26:72:88:19:25:EA:12:22:CC:8C:54:4C:AC:30:38:3F:5E:87:3E:3D
Authority key identifier: 9D:96:06:ED:EE:F9:08:95:9C:E4:33:6A:B3:95:CA:90:83:31:61:08
Certificate issuer:       /CN=9d9606edeef908959ce4336ab395ca9083316108
Certificate serial:       0193CE45191D5F4EE4D2A380ECF0A6B81BBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nZYG7e75CJWc5DNqs5XKkIMxYQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/ba9940-338d-420b-a500-548f512f4f29/1/nZYG7e75CJWc5DNqs5XKkIMxYQg.mft
Manifest number:          0B95
Signing time:             Mon 16 Dec 2024 07:00:55 +0000
Manifest this update:     Mon 16 Dec 2024 07:00:55 +0000
Manifest next update:     Tue 17 Dec 2024 07:00:55 +0000
Files and hashes:         1: SYyp1vjl1UswcMC-82zPJUhJgrI.roa (hash: 170JhmyG6oOYBtfQQhNpu594gEQZ9mAJ9lPD1R4IRMU=)
                          2: nZYG7e75CJWc5DNqs5XKkIMxYQg.crl (hash: I59426QPBdYIaABzX1ZJVCcoYD8z/ezlawaekb8lMBo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:ce:45:19:1d:5f:4e:e4:d2:a3:80:ec:f0:a6:b8:1b:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d9606edeef908959ce4336ab395ca9083316108
        Validity
            Not Before: Dec 16 07:00:55 2024 GMT
            Not After : Dec 17 07:00:55 2024 GMT
        Subject: CN=2672881925ea1222cc8c544cac30383f5e873e3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:28:7f:da:67:11:3d:24:86:f8:07:fc:9d:1f:
                    42:d4:fc:60:c4:94:00:ce:98:30:51:85:14:e9:e4:
                    cf:45:37:1a:5a:03:4a:20:48:6d:d2:61:6b:f0:89:
                    b0:59:a5:4a:73:2f:f8:6c:33:2b:ac:94:72:a8:f9:
                    08:ee:b8:0f:c1:7e:ed:69:c1:12:12:3b:ad:a3:18:
                    ca:3e:03:f2:05:6b:91:42:bd:bd:d2:65:b4:d5:9e:
                    ca:30:72:21:da:8f:fc:bd:59:7c:ac:9d:ec:79:af:
                    a8:27:10:40:00:38:49:ff:f7:e3:01:3a:e2:58:37:
                    3f:d4:44:14:d1:e7:5f:a6:2a:60:ac:9f:58:b3:a4:
                    6e:80:10:d9:15:ce:b6:1d:e4:0e:68:a1:d8:8f:f9:
                    2a:fd:27:0d:48:11:0f:5a:c1:bc:1a:93:18:43:15:
                    e4:a9:0a:06:07:4d:06:80:00:0b:1b:ca:2b:45:c5:
                    d6:26:b2:a6:bc:31:4c:ac:af:9d:28:82:ae:52:2f:
                    d6:b0:6b:f4:3f:13:77:b5:2a:b4:0e:3d:95:e0:0c:
                    1b:5a:71:86:d8:59:61:89:c0:35:40:e6:06:fb:75:
                    f6:47:e9:7c:c9:87:d2:70:2f:4d:18:0f:7c:b9:26:
                    61:b7:e9:67:0d:22:84:70:37:7f:40:50:f7:55:ec:
                    55:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:72:88:19:25:EA:12:22:CC:8C:54:4C:AC:30:38:3F:5E:87:3E:3D
            X509v3 Authority Key Identifier:
                keyid:9D:96:06:ED:EE:F9:08:95:9C:E4:33:6A:B3:95:CA:90:83:31:61:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZYG7e75CJWc5DNqs5XKkIMxYQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ba9940-338d-420b-a500-548f512f4f29/1/nZYG7e75CJWc5DNqs5XKkIMxYQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ba9940-338d-420b-a500-548f512f4f29/1/nZYG7e75CJWc5DNqs5XKkIMxYQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:65:e7:8f:ec:2a:60:83:7f:83:af:e5:a0:73:45:84:bc:34:
         89:d5:51:a9:cb:0a:13:f7:6a:a4:63:ec:4e:17:1e:84:b8:3c:
         19:0b:32:47:66:37:9a:90:fd:82:5c:be:3a:17:ee:fd:13:b8:
         dc:c2:01:8f:be:89:40:c9:1b:c1:51:4f:7c:72:4b:93:ae:08:
         d9:db:e4:2e:5f:db:88:7d:42:4d:5f:ab:f4:d8:de:6d:50:a6:
         20:c2:b2:30:62:06:3b:6c:8f:04:57:8f:3c:77:35:a2:c4:37:
         9f:6d:ca:16:38:e5:4d:9f:6c:9c:80:87:48:19:5f:9e:56:b0:
         12:f0:df:23:a8:6d:d7:f5:2a:fc:d7:68:1a:58:db:53:00:e8:
         ca:94:b4:b8:a7:13:c0:cc:c3:7a:db:61:47:f7:81:eb:3e:2f:
         8e:f4:b0:c6:f4:00:9a:9c:1b:e3:44:78:a8:7d:e4:d2:1b:ca:
         c7:59:26:3b:9f:2d:35:f0:43:e7:c4:c7:f9:35:ff:75:45:b5:
         9a:f2:16:d8:2a:36:d4:c5:ac:f8:6a:2e:90:c7:78:9f:cf:b7:
         2d:8e:69:9c:6d:07:75:a5:ac:eb:85:61:c3:85:6e:c1:14:51:
         0c:5e:22:f1:01:cb:4b:7b:f6:6a:29:82:18:86:2e:21:43:fd:
         85:69:0a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 12:33:09 2025 by rpki-client