Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/286a48-8684-40f9-b662-97044c1d8299/1/V9T1VNl2L-AbiFULTmN_faba1uA.mft
File:                     V9T1VNl2L-AbiFULTmN_faba1uA.mft (raw, json)
Hash identifier:          nqiXCoMcQu4lvtb68Klc9GdIah+x4DyIm99i6TqRyNg=
Subject key identifier:   1F:29:4A:87:2B:FF:E3:93:B5:E9:8F:DD:0B:35:2A:C4:4B:37:71:C0
Authority key identifier: 57:D4:F5:54:D9:76:2F:E0:1B:88:55:0B:4E:63:7F:7D:A6:DA:D6:E0
Certificate issuer:       /CN=57d4f554d9762fe01b88550b4e637f7da6dad6e0
Certificate serial:       0193AAA6D68DB472200D2579F9258EFE7F28
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9T1VNl2L-AbiFULTmN_faba1uA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/286a48-8684-40f9-b662-97044c1d8299/1/V9T1VNl2L-AbiFULTmN_faba1uA.mft
Manifest number:          0558
Signing time:             Mon 09 Dec 2024 09:01:20 +0000
Manifest this update:     Mon 09 Dec 2024 09:01:20 +0000
Manifest next update:     Tue 10 Dec 2024 09:01:20 +0000
Files and hashes:         1: I7oVPtSiIaRBTG-AiF7QSiXpBAQ.roa (hash: CuKsdCiAg23KdxhxzmnfWo8Xu7IB3WzfTwBYE+UR7BQ=)
                          2: V9T1VNl2L-AbiFULTmN_faba1uA.crl (hash: Q2zm6/tAc0kY9VZ2qol7c1ZAP++Gp1UAVL4lTkHlmkA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:aa:a6:d6:8d:b4:72:20:0d:25:79:f9:25:8e:fe:7f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d4f554d9762fe01b88550b4e637f7da6dad6e0
        Validity
            Not Before: Dec  9 09:01:20 2024 GMT
            Not After : Dec 10 09:01:20 2024 GMT
        Subject: CN=1f294a872bffe393b5e98fdd0b352ac44b3771c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:30:68:56:7e:da:9b:b0:1a:58:85:1c:07:2e:
                    6d:2d:03:fa:74:09:31:81:04:0b:ed:90:0b:a6:8b:
                    cb:d9:23:b2:5d:e1:73:cb:df:2c:59:2d:0b:a3:c7:
                    7a:ab:ca:fd:b6:c9:23:63:59:af:a0:b0:31:9d:5c:
                    91:30:7e:68:a7:b3:e8:07:11:6b:f6:c0:89:e4:b7:
                    1d:76:59:89:ff:a5:9a:7b:f3:6d:57:77:1f:2e:bb:
                    4e:54:fc:e7:ed:1d:e3:d4:17:7e:6e:09:3c:e3:ca:
                    70:b7:63:ac:68:05:af:bb:b7:6d:1a:ac:80:8f:9c:
                    a0:aa:d4:5a:57:fe:29:f1:f2:30:0e:b2:d0:37:0f:
                    ea:4d:ba:a7:fe:d8:de:f5:f0:63:40:cb:68:8b:e7:
                    af:f3:34:e5:c6:68:92:df:bd:ce:f0:8b:3b:b1:d8:
                    9e:d7:19:9e:cb:92:57:da:30:61:a2:92:e8:4e:9e:
                    f1:68:39:63:4c:d3:75:f1:6f:0e:0c:c9:85:a4:cf:
                    6a:6d:80:5b:d2:d8:00:2b:8c:7b:c4:b0:32:e2:9d:
                    e0:21:ea:ea:e2:8c:44:9b:89:ed:2c:72:4e:82:44:
                    d1:02:fc:78:1d:46:c1:dd:e9:f3:3c:6a:79:e4:3e:
                    17:0e:ab:3b:77:7a:4a:99:22:c0:4f:b0:71:4e:70:
                    b8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:29:4A:87:2B:FF:E3:93:B5:E9:8F:DD:0B:35:2A:C4:4B:37:71:C0
            X509v3 Authority Key Identifier:
                keyid:57:D4:F5:54:D9:76:2F:E0:1B:88:55:0B:4E:63:7F:7D:A6:DA:D6:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9T1VNl2L-AbiFULTmN_faba1uA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/286a48-8684-40f9-b662-97044c1d8299/1/V9T1VNl2L-AbiFULTmN_faba1uA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/286a48-8684-40f9-b662-97044c1d8299/1/V9T1VNl2L-AbiFULTmN_faba1uA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:4b:44:36:9f:3c:a5:2d:de:78:de:d7:cc:45:b2:fd:d7:f5:
         d1:b6:97:f7:c9:47:c3:cd:ce:20:d9:cd:98:0d:37:9d:d6:0c:
         1e:fd:dd:e4:d4:5d:5b:80:d7:62:fc:83:f6:09:10:1d:66:da:
         c8:76:51:ce:3f:a0:6d:84:87:18:93:eb:9f:52:5e:45:70:57:
         c9:b4:b5:4e:3a:43:c3:2b:8e:9d:0f:1c:a9:51:aa:28:35:7d:
         b2:6f:8c:39:a4:1b:45:20:0b:11:af:7d:8b:f1:5b:36:86:4a:
         4a:b0:95:f2:c8:df:d8:06:aa:49:58:59:ec:9d:6f:1c:72:c1:
         9b:9a:69:c8:5a:6d:f6:d7:37:46:05:15:25:fe:61:52:2b:ed:
         7b:ab:d2:c1:a9:d8:78:cb:bd:11:e9:ba:3a:0d:e6:10:bf:50:
         ce:42:7c:c8:f4:f6:5c:a4:0b:95:3e:f7:24:9e:12:64:9e:f3:
         f1:22:78:d7:83:f3:b8:0b:4a:a7:3d:72:10:11:82:e2:31:fe:
         a7:0a:e1:3c:95:28:76:5f:5c:3a:e8:82:3c:84:a8:57:ef:bc:
         d2:be:88:47:42:02:89:e3:73:40:27:8b:35:94:5d:01:f2:e7:
         c7:0e:2c:5b:1f:4c:be:3d:e1:82:d1:24:1e:0f:df:f2:a1:03:
         4e:88:17:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 16:05:04 2025 by rpki-client