Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/06af59-fd8e-478b-b710-b0e70b269d8c/1/ndmtptqmPMZROxnuiHNBpJhkMP4.mft
File:                     ndmtptqmPMZROxnuiHNBpJhkMP4.mft (raw, json)
Hash identifier:          aWQBVjZ5ozJ92nQwPNQNPC5m2M9xwuAmYDHJxwDJcrg=
Subject key identifier:   58:F8:34:85:29:43:DB:1B:A1:44:2A:A5:E8:2C:3A:99:AB:BB:2E:6A
Authority key identifier: 9D:D9:AD:A6:DA:A6:3C:C6:51:3B:19:EE:88:73:41:A4:98:64:30:FE
Certificate issuer:       /CN=9dd9ada6daa63cc6513b19ee887341a4986430fe
Certificate serial:       B316EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ndmtptqmPMZROxnuiHNBpJhkMP4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/06af59-fd8e-478b-b710-b0e70b269d8c/1/ndmtptqmPMZROxnuiHNBpJhkMP4.mft
Manifest number:          E4
Signing time:             Wed 23 Mar 2022 08:20:17 +0000
Manifest this update:     Wed 23 Mar 2022 08:20:17 +0000
Manifest next update:     Thu 24 Mar 2022 08:20:17 +0000
Files and hashes:         1: 2xkMqyd9oD384zi1AyM63muazzs.roa (hash: kg0CaJcCq0AG5RAUXiStb8hs8P1i5kD7eCKBSlddELk=)
                          2: H2QcDZGkbHZp9lQKZ49rMGv-5Dc.roa (hash: 46fepxsKk1gC5Sn20hCQlyy7JRG+tV2EVk7KCTzRd7I=)
                          3: ndmtptqmPMZROxnuiHNBpJhkMP4.crl (hash: N+8xV18RtByVe/gobkBhu/RAAfRbwro0fqKII9/n+H0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11736812 (0xb316ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9dd9ada6daa63cc6513b19ee887341a4986430fe
        Validity
            Not Before: Mar 23 08:20:17 2022 GMT
            Not After : Mar 24 08:20:17 2022 GMT
        Subject: CN=58f834852943db1ba1442aa5e82c3a99abbb2e6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:72:50:1a:f7:e7:3d:b6:61:0e:a9:db:da:3f:
                    e4:43:1f:a9:89:76:7e:28:8e:aa:9b:28:14:57:7a:
                    ec:bb:8e:21:23:02:01:72:81:0b:06:f1:34:cb:74:
                    91:db:9f:60:9d:f9:2f:78:59:32:00:1e:62:33:65:
                    1a:bd:d3:2f:23:8e:72:7e:49:60:83:14:5b:5f:db:
                    78:df:aa:86:4e:23:7e:09:6c:e2:70:f7:37:e3:ef:
                    5b:42:e2:fb:90:4d:f6:a3:4f:f8:b6:c9:52:d7:53:
                    69:43:b5:8b:8f:23:e6:0c:ad:0f:2a:41:52:69:2e:
                    55:cc:6b:77:6e:72:a0:34:a9:6c:ad:3a:5b:14:11:
                    62:87:ec:a4:87:8d:6c:d6:24:84:c6:33:82:76:90:
                    98:ad:92:ea:47:20:d5:87:d7:ec:3d:f7:70:08:66:
                    9a:18:b2:2f:6a:85:e9:1a:cc:57:02:02:ec:87:50:
                    42:18:36:ff:ee:4b:00:5b:24:02:40:7e:e1:7f:52:
                    2a:de:42:d4:7a:fa:cb:20:35:ce:18:86:b6:6a:8c:
                    e0:85:b3:3c:d2:96:7e:7d:b6:98:41:76:f1:60:34:
                    14:fa:c1:dd:63:fe:18:47:88:da:1a:56:8a:4a:9e:
                    b8:00:70:f5:0a:f9:59:f3:7f:30:fe:ac:72:a2:02:
                    bb:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F8:34:85:29:43:DB:1B:A1:44:2A:A5:E8:2C:3A:99:AB:BB:2E:6A
            X509v3 Authority Key Identifier:
                keyid:9D:D9:AD:A6:DA:A6:3C:C6:51:3B:19:EE:88:73:41:A4:98:64:30:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ndmtptqmPMZROxnuiHNBpJhkMP4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06af59-fd8e-478b-b710-b0e70b269d8c/1/ndmtptqmPMZROxnuiHNBpJhkMP4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/06af59-fd8e-478b-b710-b0e70b269d8c/1/ndmtptqmPMZROxnuiHNBpJhkMP4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:7f:30:fb:54:2c:5c:a8:84:2c:13:e9:d7:2a:25:4e:39:e2:
         19:a0:ee:41:32:f3:34:7a:0c:3d:8e:06:66:24:bc:35:4a:cf:
         58:cd:83:e8:b7:c9:2c:3b:4b:18:db:95:2f:dd:32:e1:40:85:
         88:20:c1:ef:a2:5b:e9:63:35:5e:44:97:3f:81:59:4e:bb:1e:
         b8:10:07:c9:fc:a7:7f:67:9e:f6:c8:c2:38:84:5c:5a:c4:16:
         b1:38:38:b2:27:a5:09:2a:61:da:b6:6a:b8:70:fe:4a:1e:c9:
         8d:8b:b2:48:ae:76:39:e5:d9:e0:11:14:8d:b1:78:a2:3c:53:
         9b:b5:bd:1e:52:74:0c:87:4f:9c:7f:a2:c4:c6:98:ef:8a:7c:
         f3:ff:2c:bf:68:db:d7:cc:e2:84:ec:fe:50:78:13:06:c6:f3:
         c3:0d:9f:fd:c8:c0:86:45:61:b0:7e:c3:11:f9:c9:a0:43:e8:
         67:8e:7a:ef:d7:c1:62:fb:28:e2:de:73:db:78:6d:8f:f7:77:
         36:d0:86:47:da:ff:cf:e6:7b:56:4b:b2:f9:1f:00:dd:7e:e7:
         10:5a:7c:8d:42:b1:8e:19:b3:13:65:b2:be:a4:6a:2b:d6:18:
         df:b7:75:3c:30:96:a4:4a:8a:ec:a6:9a:ca:97:27:94:a7:5b:
         b8:cd:03:43
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEALMW7DANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
ZGQ5YWRhNmRhYTYzY2M2NTEzYjE5ZWU4ODczNDFhNDk4NjQzMGZlMB4XDTIyMDMy
MzA4MjAxN1oXDTIyMDMyNDA4MjAxN1owMzExMC8GA1UEAxMoNThmODM0ODUyOTQz
ZGIxYmExNDQyYWE1ZTgyYzNhOTlhYmJiMmU2YTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIZyUBr35z22YQ6p29o/5EMfqYl2fiiOqpsoFFd67LuOISMC
AXKBCwbxNMt0kdufYJ35L3hZMgAeYjNlGr3TLyOOcn5JYIMUW1/beN+qhk4jfgls
4nD3N+PvW0Li+5BN9qNP+LbJUtdTaUO1i48j5gytDypBUmkuVcxrd25yoDSpbK06
WxQRYofspIeNbNYkhMYzgnaQmK2S6kcg1YfX7D33cAhmmhiyL2qF6RrMVwIC7IdQ
Qhg2/+5LAFskAkB+4X9SKt5C1Hr6yyA1zhiGtmqM4IWzPNKWfn22mEF28WA0FPrB
3WP+GEeI2hpWikqeuABw9Qr5WfN/MP6scqICuykCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBRY+DSFKUPbG6FEKqXoLDqZq7suajAfBgNVHSMEGDAWgBSd2a2m2qY8xlE7
Ge6Ic0GkmGQw/jAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L25kbXRwdHFtUE1aUk94bnVpSE5CcEpoa01QNC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNTAvMDZhZjU5LWZkOGUtNDc4Yi1iNzEwLWIwZTcwYjI2OWQ4Yy8x
L25kbXRwdHFtUE1aUk94bnVpSE5CcEpoa01QNC5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTAv
MDZhZjU5LWZkOGUtNDc4Yi1iNzEwLWIwZTcwYjI2OWQ4Yy8xL25kbXRwdHFtUE1a
Uk94bnVpSE5CcEpoa01QNC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGl/MPtULFyohCwT6dcqJU454hmg
7kEy8zR6DD2OBmYkvDVKz1jNg+i3ySw7SxjblS/dMuFAhYggwe+iW+ljNV5Elz+B
WU67HrgQB8n8p39nnvbIwjiEXFrEFrE4OLInpQkqYdq2arhw/koeyY2Lskiudjnl
2eARFI2xeKI8U5u1vR5SdAyHT5x/osTGmO+KfPP/LL9o29fM4oTs/lB4EwbG88MN
n/3IwIZFYbB+wxH5yaBD6GeOeu/XwWL7KOLec9t4bY/3dzbQhkfa/8/me1ZLsvkf
AN1+5xBafI1CsY4ZsxNlsr6kaivWGN+3dTwwlqRKiuymmsqXJ5SnW7jNA0M=
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:39 2025 by rpki-client