Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/c12541-27b0-465c-b577-12e431c0b933/1/nXtvF5O_KALLOj1_rTLMqtjYrS4.mft
File:                     nXtvF5O_KALLOj1_rTLMqtjYrS4.mft (raw, json)
Hash identifier:          xztnHr94UtdguH/tgMbHu0ojbyW2MP+fpElCuBMgHHM=
Subject key identifier:   1F:A9:C8:A7:FA:13:9E:B9:9B:75:B5:AC:62:6A:0C:C1:8A:EE:2F:84
Authority key identifier: 9D:7B:6F:17:93:BF:28:02:CB:3A:3D:7F:AD:32:CC:AA:D8:D8:AD:2E
Certificate issuer:       /CN=9d7b6f1793bf2802cb3a3d7fad32ccaad8d8ad2e
Certificate serial:       019417A93A5B79F5287C695CF018BEA58D20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nXtvF5O_KALLOj1_rTLMqtjYrS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/c12541-27b0-465c-b577-12e431c0b933/1/nXtvF5O_KALLOj1_rTLMqtjYrS4.mft
Manifest number:          08F5
Signing time:             Mon 30 Dec 2024 13:02:33 +0000
Manifest this update:     Mon 30 Dec 2024 13:02:33 +0000
Manifest next update:     Tue 31 Dec 2024 13:02:33 +0000
Files and hashes:         1: KcQ5_rlr8B3UUKpvwYoaJQ7AGiM.roa (hash: CpvU52qnN5Ry6S7kQUOAwZkNs79rbvDLj3Xj4FBPZws=)
                          2: nXtvF5O_KALLOj1_rTLMqtjYrS4.crl (hash: 6p33m13pdNGfLn5GAd1/dwdKgUlUYYUBnRuuuSPkaIM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:17:a9:3a:5b:79:f5:28:7c:69:5c:f0:18:be:a5:8d:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d7b6f1793bf2802cb3a3d7fad32ccaad8d8ad2e
        Validity
            Not Before: Dec 30 13:02:33 2024 GMT
            Not After : Dec 31 13:02:33 2024 GMT
        Subject: CN=1fa9c8a7fa139eb99b75b5ac626a0cc18aee2f84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e6:f1:52:8b:d2:9d:17:26:5c:b5:d5:af:d4:
                    4c:ff:a4:d2:ed:b1:34:6b:25:52:de:f5:ab:c5:a4:
                    4e:8a:40:e0:3e:2c:31:bf:35:9a:dc:3a:0f:e2:fe:
                    df:00:d5:24:4e:88:7f:33:8f:e5:66:c5:43:04:d7:
                    56:aa:d8:3f:bc:e3:c7:53:24:56:bc:ac:49:8c:d0:
                    a1:1a:bf:5c:09:39:a3:0d:34:c8:62:97:d6:45:4d:
                    b5:4b:e8:fb:06:1a:68:16:fc:7f:6c:c6:79:4f:20:
                    60:31:7f:00:97:fc:f1:c7:92:71:94:a5:a7:30:10:
                    7e:0b:fc:7c:24:9e:25:51:03:37:92:3e:4f:0b:44:
                    4f:3e:ed:aa:e6:f4:e4:a3:0c:e8:49:22:19:e0:23:
                    f8:35:f3:ec:74:3f:c4:ca:c8:f1:46:2d:a8:c9:4a:
                    7c:80:23:8e:2b:1d:1d:1b:bb:cb:1c:47:e6:70:9c:
                    bc:c4:14:2c:07:19:40:3f:e6:ba:ce:2c:70:a7:9b:
                    96:49:67:11:92:1e:3a:7b:b6:d5:dc:dd:dc:c6:9f:
                    c2:96:47:e6:5a:ad:b8:0e:21:af:87:e3:64:99:8a:
                    79:8f:42:11:68:0e:51:28:e8:93:d1:5f:e0:24:12:
                    21:bc:9f:f1:a0:c3:b3:d5:b2:34:16:72:2e:3a:1e:
                    6f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:A9:C8:A7:FA:13:9E:B9:9B:75:B5:AC:62:6A:0C:C1:8A:EE:2F:84
            X509v3 Authority Key Identifier:
                keyid:9D:7B:6F:17:93:BF:28:02:CB:3A:3D:7F:AD:32:CC:AA:D8:D8:AD:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nXtvF5O_KALLOj1_rTLMqtjYrS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c12541-27b0-465c-b577-12e431c0b933/1/nXtvF5O_KALLOj1_rTLMqtjYrS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/c12541-27b0-465c-b577-12e431c0b933/1/nXtvF5O_KALLOj1_rTLMqtjYrS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:77:d1:67:73:1c:6b:98:69:61:11:af:ec:23:09:03:1e:df:
         e3:8f:48:43:b3:a7:cd:9a:62:eb:fe:2f:2a:c3:bb:df:a3:78:
         3a:90:d0:cd:b8:63:d7:78:8c:31:fe:a1:79:67:39:f4:60:31:
         05:d9:b4:1d:a3:36:30:1f:21:20:0b:9b:49:2b:a3:c5:3b:18:
         87:e7:5b:96:d1:c5:dc:e9:5c:4c:63:cb:54:bb:a0:9d:93:d9:
         01:b2:b0:94:8d:30:cf:44:70:51:b8:81:2e:39:3d:69:31:b3:
         21:58:94:2e:ee:80:cf:a5:59:92:8f:53:45:c6:ad:76:73:85:
         3b:21:28:d7:e7:bc:72:f4:25:4c:6c:c2:a0:c1:3c:db:43:fb:
         01:3e:2e:6e:7a:a0:1b:4a:e5:83:a4:05:81:ba:d2:2b:8b:1c:
         89:b4:2e:2f:0a:fb:64:90:f8:c4:0d:92:58:47:c4:ea:2a:43:
         fa:0d:a6:98:ac:7c:3d:b8:36:42:56:0e:7e:55:79:30:3a:fb:
         d5:ff:b3:5f:80:8e:fc:49:c6:53:fb:8a:f4:f9:76:b0:4a:2c:
         2d:ac:cc:a2:8a:58:bc:16:28:b1:76:22:65:d0:07:6c:84:ec:
         5d:18:6a:5b:ca:13:99:92:cb:4e:68:59:bf:0d:fe:2b:7f:6d:
         e5:d5:34:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 02:43:37 2025 by rpki-client