Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.mft
File:                     nIRA0-Vbq66SvGk-o5CS9uT1DCQ.mft (raw, json)
Hash identifier:          H4/qL7tTv9UxPY3FczxlWv1z/WXEXW4q5Ax527sJzNY=
Subject key identifier:   EF:AD:E3:C6:C4:52:3F:20:3E:F6:1A:F9:29:8D:E3:F0:6D:69:08:E0
Authority key identifier: 9C:84:40:D3:E5:5B:AB:AE:92:BC:69:3E:A3:90:92:F6:E4:F5:0C:24
Certificate issuer:       /CN=9c8440d3e55babae92bc693ea39092f6e4f50c24
Certificate serial:       018875F7EED1629FCCD642C0242C91096740
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.mft
Manifest number:          050A
Signing time:             Thu 01 Jun 2023 07:59:22 +0000
Manifest this update:     Thu 01 Jun 2023 07:59:22 +0000
Manifest next update:     Fri 02 Jun 2023 07:59:22 +0000
Files and hashes:         1: nIRA0-Vbq66SvGk-o5CS9uT1DCQ.crl (hash: Tl0dPrVSApm+NLwLZhj1LjmhgpzAFXh+Kq2mTwm2L4M=)
                          2: qOgqE3TuZZjFA0zi4S62GnMz7KY.roa (hash: r/sFMWjXzlFmcek6C+kr4eygXusXe56noe1eG8EXcRs=)
                          3: rXbiu1MD5PJ5spMbXCOr3tUPMTc.roa (hash: gijy68kazBpQTXWXgdWfNE+xW8kdu0W7p7+cdjN9QL8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:75:f7:ee:d1:62:9f:cc:d6:42:c0:24:2c:91:09:67:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c8440d3e55babae92bc693ea39092f6e4f50c24
        Validity
            Not Before: Jun  1 07:59:22 2023 GMT
            Not After : Jun  2 07:59:22 2023 GMT
        Subject: CN=efade3c6c4523f203ef61af9298de3f06d6908e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:76:c2:18:56:d8:e2:7b:42:41:b2:b2:b6:36:
                    7a:36:44:24:e3:56:38:32:24:c3:fa:0c:51:2a:4e:
                    77:ea:51:da:19:ff:15:f4:c8:77:99:19:62:97:a2:
                    cd:8e:53:96:45:02:2d:dc:f1:5e:f1:0d:1b:c8:40:
                    8d:2b:1d:52:35:06:1c:93:45:f8:d4:6d:06:d2:9c:
                    d8:07:d8:2b:8b:d0:ae:c4:23:71:ea:49:bc:7d:7f:
                    6d:0c:58:ec:65:e1:28:e5:76:4e:24:5f:a9:34:1c:
                    7c:8d:3c:f1:43:84:2a:53:15:d7:fa:ae:a3:8b:0a:
                    4a:a8:dd:bc:10:b6:9d:25:22:dd:68:2f:01:fd:3f:
                    0c:80:9c:86:ca:46:0f:ab:b8:7e:da:9c:47:2c:a3:
                    79:d7:b7:34:a9:87:28:5a:7d:77:6a:40:c2:90:cf:
                    7d:f0:1b:71:50:f9:7d:ff:18:75:c0:42:60:89:87:
                    1b:18:eb:0d:5f:44:0d:95:66:4b:b2:76:13:c5:46:
                    58:16:84:a2:65:e5:45:4a:9b:97:14:13:01:5d:28:
                    9f:1e:03:c7:b0:7e:f8:ec:bb:01:c7:4c:d2:bd:1b:
                    6a:1e:e1:55:c8:ea:1f:81:0d:5e:6e:f9:f8:5f:8b:
                    97:26:0e:dd:0c:9d:0d:f3:dc:2f:e9:17:44:1b:69:
                    ab:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:AD:E3:C6:C4:52:3F:20:3E:F6:1A:F9:29:8D:E3:F0:6D:69:08:E0
            X509v3 Authority Key Identifier:
                keyid:9C:84:40:D3:E5:5B:AB:AE:92:BC:69:3E:A3:90:92:F6:E4:F5:0C:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/269486-09dc-4d49-84e5-968bc32d9adc/1/nIRA0-Vbq66SvGk-o5CS9uT1DCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d0:70:f8:b7:9f:f3:88:18:d0:e6:df:66:fd:5d:67:6f:ac:
         d2:bf:1d:ad:99:a9:7b:d5:91:a0:ec:63:3a:d9:bc:18:39:2b:
         25:97:86:77:ad:e7:85:6c:d9:69:42:b3:64:8f:a7:25:e0:3d:
         e0:cc:97:c3:ac:b3:01:d1:fa:24:16:cd:5e:89:f3:09:54:1b:
         4e:e0:da:83:5d:7a:23:da:b5:ba:ac:36:6d:ff:8c:b4:3a:ef:
         62:56:56:e5:c6:04:e2:c0:06:35:cd:19:aa:28:d0:2e:65:28:
         76:cf:27:db:f4:45:9c:d9:d0:34:cb:f5:be:18:03:f6:90:cf:
         5b:90:95:0b:8e:9d:3e:5d:08:6c:e1:cd:5c:70:84:ab:09:02:
         cc:ae:8d:06:a7:71:63:35:c2:28:e7:a7:e2:e9:48:87:8e:16:
         53:cc:19:14:e5:62:ec:2e:32:c7:4b:a0:c8:fa:2d:a2:d8:66:
         29:f8:aa:c7:50:13:f3:f4:43:1b:f4:68:5f:d0:e3:23:de:be:
         a9:06:1b:34:d9:c4:9e:3d:52:7b:02:1e:5c:d0:9e:17:24:da:
         e6:03:08:70:47:21:8d:28:f1:a5:5a:46:fc:3a:8d:66:cb:fc:
         24:81:c4:65:4b:bf:b9:f2:3e:2e:fd:fe:92:bd:93:ba:18:ac:
         4a:6a:21:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:09:04 2025 by rpki-client