Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.mft
File:                     1T9rmtMLZVX6WlTn6xUrK_QS8iY.mft (raw, json)
Hash identifier:          SKiB1T2V2eNbD/8apIpw/vhfYMCR99/J1EfvvovbUXM=
Subject key identifier:   8F:27:54:FC:CE:39:CC:02:D3:9B:22:5D:AC:E3:DB:87:D6:C7:E0:D8
Authority key identifier: D5:3F:6B:9A:D3:0B:65:55:FA:5A:54:E7:EB:15:2B:2B:F4:12:F2:26
Certificate issuer:       /CN=d53f6b9ad30b6555fa5a54e7eb152b2bf412f226
Certificate serial:       0195F517041AD4D568DAAB30BABC64C3F071
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1T9rmtMLZVX6WlTn6xUrK_QS8iY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.mft
Manifest number:          03F3
Signing time:             Wed 02 Apr 2025 06:01:21 +0000
Manifest this update:     Wed 02 Apr 2025 06:01:21 +0000
Manifest next update:     Thu 03 Apr 2025 06:01:21 +0000
Files and hashes:         1: 1T9rmtMLZVX6WlTn6xUrK_QS8iY.crl (hash: 7X0FpYuJeY40IiNU1zpcP2/tu1/v/a/hSeKpGFHxozo=)
                          2: ygeNrsucj-rGn8JTBcNIhnNtCcU.roa (hash: KBkElyIB1u/4stezxnXDGq1lV/mlLUiRmV5TkOx/9qs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:f5:17:04:1a:d4:d5:68:da:ab:30:ba:bc:64:c3:f0:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d53f6b9ad30b6555fa5a54e7eb152b2bf412f226
        Validity
            Not Before: Apr  2 06:01:21 2025 GMT
            Not After : Apr  3 06:01:21 2025 GMT
        Subject: CN=8f2754fcce39cc02d39b225dace3db87d6c7e0d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:91:88:5f:04:43:01:56:b0:df:f6:cd:96:24:
                    8e:4a:db:5f:d2:3d:ae:2a:bb:3b:e9:21:ae:38:81:
                    bc:64:7a:bc:b3:9b:8f:29:c4:79:3e:24:a6:24:11:
                    11:48:0b:58:a7:68:a2:9c:c5:31:09:2f:53:24:09:
                    39:bb:7b:3d:67:2b:15:e6:5b:c8:75:36:f5:01:44:
                    f3:5c:e6:11:bf:73:f9:ca:37:af:58:d5:6c:99:7b:
                    c7:86:26:fd:c1:98:0e:aa:68:fa:1d:7f:e2:55:86:
                    75:53:5e:01:86:bb:04:51:8e:77:10:36:0a:7e:83:
                    13:3e:b9:21:76:f1:54:a0:95:8a:3c:b1:db:29:d5:
                    d4:06:f0:7a:6a:e8:e8:f5:32:3c:9d:d3:a3:9e:a6:
                    be:24:4a:7b:25:44:05:17:03:94:95:88:ef:b9:ac:
                    fd:3c:1e:a0:1a:5b:d3:f6:e2:56:a4:a7:c8:55:71:
                    ee:83:f3:ed:7b:51:b2:f3:20:5a:f6:f6:e9:59:2e:
                    b2:3a:a2:c0:03:70:96:c8:27:b6:8e:15:6b:b8:24:
                    ac:47:fc:af:ca:2c:f2:94:6a:37:e5:b8:4b:d6:da:
                    fa:dc:18:b6:c1:ec:08:93:81:59:9d:e6:4a:af:16:
                    21:4c:7a:9f:f8:5b:17:8d:c6:87:64:48:9d:06:0e:
                    b3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:27:54:FC:CE:39:CC:02:D3:9B:22:5D:AC:E3:DB:87:D6:C7:E0:D8
            X509v3 Authority Key Identifier:
                keyid:D5:3F:6B:9A:D3:0B:65:55:FA:5A:54:E7:EB:15:2B:2B:F4:12:F2:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T9rmtMLZVX6WlTn6xUrK_QS8iY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:1d:4e:18:a8:1f:08:26:6a:75:db:58:37:4d:4c:08:4c:52:
         e7:e3:32:b5:49:0f:47:7f:59:74:c6:c7:3b:82:ad:1d:7e:5c:
         b8:8b:78:60:69:47:aa:4a:ea:17:b3:1a:7e:d6:59:78:e4:61:
         aa:4c:ee:90:e1:a2:a2:15:94:fc:81:ab:62:64:61:21:ab:13:
         3d:6e:8d:b9:54:54:a0:17:9d:2b:e7:8d:ac:cc:80:cf:f8:34:
         d0:b5:26:09:68:c7:95:84:58:38:89:8f:89:02:e2:eb:d5:30:
         19:a8:ae:59:de:05:19:ee:a4:d2:83:c8:ac:02:19:81:72:35:
         f5:ca:2e:8d:e2:e1:1a:3d:f0:20:a5:7a:bd:85:eb:b0:17:f9:
         7a:58:ba:65:18:fb:c9:d9:c8:ff:5e:ca:60:97:1a:30:0c:97:
         c6:e3:d6:cd:d7:12:e2:fd:7c:50:9a:f8:2b:91:c6:c9:8e:97:
         99:a1:54:4f:40:d3:8f:d5:50:33:d7:17:c9:26:07:70:4d:82:
         e0:0e:b1:ef:21:bf:1d:9e:f1:71:18:59:7e:93:d3:ab:4e:50:
         ea:7f:97:7c:a9:f5:95:3c:e4:fc:11:df:ac:32:79:b7:9a:a1:
         71:6f:dc:6c:41:60:76:64:fd:00:b3:3a:8d:a7:8a:a5:48:ae:
         2b:54:b1:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 15:34:34 2025 by rpki-client