Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
File:                     njUz1mLD8Na7HmkvP6tte6OCTCg.mft (raw, json)
Hash identifier:          Kmmf7tO3BvMnl95ZsYEICNK45pcBb5G3qdiTKChUi+4=
Subject key identifier:   F3:5E:B4:5B:9F:68:8A:B7:4A:57:9F:92:C6:E1:89:79:39:09:86:0F
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Certificate issuer:       /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial:       0195E0EB524309BD08641F103B7F3762441D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
Manifest number:          147E
Signing time:             Sat 29 Mar 2025 08:01:13 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:13 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:13 +0000
Files and hashes:         1: 1tI7Gq6wrPLRpjeUzC_GrOYPqZ0.roa (hash: xlDzBukhszCg1ynm8q0OHDdDRpBK+e0yk8+3eMgwkrM=)
                          2: GRF2bMt45GUg8Rs22zB5kafSnfw.roa (hash: POA0gjYA6M0Utx5jRtzJV0tvSkimO4coFlCnQ2NmufU=)
                          3: RBsyWLfZJ_zLx9s-cNB-ptFfujg.roa (hash: IyFw4v8rAxvkA10wGK9XNcDIKqaq/q2xa7mB4hR4CMY=)
                          4: Zi1iA2N22K6D1EqWuXGSwJbaToE.roa (hash: zSMKFbT/uwlzQj5z6cjWhjz6p9cPAfNZU2ZZ9FmRbIU=)
                          5: ejMCCeC2MDhcNB2cVYC221LlZf0.roa (hash: KH+fBxO9uWEjS3q9OKeQXfnZoTvKao3+H/qtLjbPkOk=)
                          6: jgu3roXa-ppD5Voc7wD-A3FJYsA.roa (hash: IK8p6mGX+CwHf/aA4cC2k9uGzhRGeTYhI8MfPoXscu0=)
                          7: njUz1mLD8Na7HmkvP6tte6OCTCg.crl (hash: ZmpMPnhfDZzud4lP9vrgAILlFi7XRpfiUVyLL4BCBbI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:52:43:09:bd:08:64:1f:10:3b:7f:37:62:44:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
        Validity
            Not Before: Mar 29 08:01:13 2025 GMT
            Not After : Mar 30 08:01:13 2025 GMT
        Subject: CN=f35eb45b9f688ab74a579f92c6e189793909860f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:31:29:e1:11:75:1a:c5:cd:44:c5:2b:70:3e:
                    6f:ee:dd:f5:57:66:52:e9:d4:43:a1:2e:88:18:08:
                    7a:61:eb:0e:28:bd:66:ca:13:76:78:b3:3a:71:6a:
                    68:65:da:4d:59:cd:5d:50:01:86:ac:4b:6c:fa:fd:
                    37:cb:5f:b3:e3:7a:f8:9b:c8:f1:29:d9:94:7c:d9:
                    58:93:2e:4e:79:c8:0f:82:24:92:5b:33:27:08:f1:
                    a6:08:35:23:ff:35:ce:92:17:0c:4e:92:d0:da:98:
                    e6:8d:ff:b4:b0:0e:60:c8:21:a3:e8:93:7b:38:4b:
                    b5:8f:25:4c:63:26:b1:01:7d:e0:04:8c:36:ff:43:
                    87:5c:5b:7c:25:38:e8:22:ce:cc:75:62:2f:5e:a6:
                    3b:dd:55:8b:af:f7:05:2a:eb:2d:be:71:ca:d9:84:
                    2f:85:0e:05:12:9f:fe:77:a6:41:b1:13:a3:57:96:
                    4f:78:1c:21:92:ce:d6:05:d8:9f:00:33:22:3a:56:
                    f3:2d:c3:6d:85:31:6a:ae:2b:be:70:13:07:6f:cc:
                    7d:d2:b3:1c:fb:12:e0:27:d1:58:bd:9d:bd:b0:d4:
                    7a:c4:6e:38:a8:4a:b9:96:a3:bb:56:c3:ae:5c:88:
                    01:ec:a5:1b:6d:fb:04:e3:c8:0f:56:11:d7:60:95:
                    e0:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:5E:B4:5B:9F:68:8A:B7:4A:57:9F:92:C6:E1:89:79:39:09:86:0F
            X509v3 Authority Key Identifier:
                keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:ef:00:d3:45:00:db:4f:5e:ef:51:ed:13:ec:c0:4a:55:2c:
         c9:00:fd:e2:9a:54:6d:37:38:49:5c:8c:43:82:ed:93:03:40:
         e2:97:19:f6:f3:d1:b3:be:49:d4:fa:5c:60:b0:a9:ab:38:fe:
         87:40:b0:54:ea:8f:68:81:69:38:b4:de:0c:e9:be:0b:48:4d:
         f2:7a:33:27:33:2e:85:20:0d:c9:cd:dc:e2:13:8d:bf:89:26:
         9d:90:0a:f3:05:a5:85:dd:2f:2a:7e:5e:fe:82:a8:2d:b7:2a:
         a7:ba:7f:cf:a2:15:88:74:45:02:aa:62:00:60:e2:95:06:a1:
         4d:f7:33:99:20:7a:14:6e:64:62:0a:40:e5:f0:52:f5:62:63:
         3a:00:29:a8:b9:6a:48:05:3e:c8:03:64:08:3b:77:3c:4d:ae:
         a4:41:d1:36:3e:18:fb:07:d4:b2:5e:79:1b:a0:61:8b:15:53:
         81:54:89:c5:95:06:00:65:03:75:49:ba:ca:5f:fa:08:4e:fe:
         9c:e9:57:6f:a6:cc:a7:de:4f:1f:bc:8a:98:7a:db:63:d3:ad:
         05:74:0e:f9:0b:fb:ab:50:cd:78:72:64:d9:14:e1:cf:9a:03:
         ea:39:e2:a0:2b:12:fa:4b:9f:f2:c7:b2:3a:db:2f:20:e7:f1:
         d0:5b:6a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:19:10 2025 by rpki-client