Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/6b0707-1584-41db-899b-3abed42221f6/1/N2aIyDcCNnG8XofYP_oXg7fOq04.mft
File:                     N2aIyDcCNnG8XofYP_oXg7fOq04.mft (raw, json)
Hash identifier:          s7AGEVxaRQmY+wOu1I5/TEpCkEXifP/clfXfyZa61XA=
Subject key identifier:   0F:F4:60:24:9C:1E:72:22:39:9E:FF:41:D3:24:13:7B:ED:B8:94:15
Authority key identifier: 37:66:88:C8:37:02:36:71:BC:5E:87:D8:3F:FA:17:83:B7:CE:AB:4E
Certificate issuer:       /CN=376688c837023671bc5e87d83ffa1783b7ceab4e
Certificate serial:       01826BA39CEC567C19223574F085C5E0C222
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N2aIyDcCNnG8XofYP_oXg7fOq04.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/6b0707-1584-41db-899b-3abed42221f6/1/N2aIyDcCNnG8XofYP_oXg7fOq04.mft
Manifest number:          0467
Signing time:             Fri 05 Aug 2022 01:34:20 +0000
Manifest this update:     Fri 05 Aug 2022 01:34:20 +0000
Manifest next update:     Sat 06 Aug 2022 01:34:20 +0000
Files and hashes:         1: N2aIyDcCNnG8XofYP_oXg7fOq04.crl (hash: jvWIYDkSPITNpHeY8sUYrCCSpoAhhuawM+elVYB8BUw=)
                          2: wGfbxVvzYf8zK0y43XjI7kQp5IA.roa (hash: 8ckOMTY7Fz2EXvc0bMNioReMCEaZpMteZnLWbUU0LLc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:82:6b:a3:9c:ec:56:7c:19:22:35:74:f0:85:c5:e0:c2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=376688c837023671bc5e87d83ffa1783b7ceab4e
        Validity
            Not Before: Aug  5 01:34:20 2022 GMT
            Not After : Aug  6 01:34:20 2022 GMT
        Subject: CN=0ff460249c1e7222399eff41d324137bedb89415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:51:30:9c:2e:ea:ed:f5:53:da:84:05:40:79:
                    2e:8e:be:06:71:46:0e:f0:6d:ea:50:a8:e6:74:d8:
                    cb:38:3c:66:ec:4f:d4:39:45:00:e1:52:1e:f9:43:
                    b0:26:79:1c:e0:35:64:7f:87:70:72:49:7d:0b:a0:
                    af:6d:d1:ed:e9:c2:0c:8f:08:cd:1d:4f:6f:85:f4:
                    f2:6b:39:24:50:cb:2c:d8:6b:99:1c:c2:65:e7:ca:
                    a5:e0:56:18:6e:29:09:34:a0:a4:7d:f4:3b:43:d8:
                    15:a8:c2:07:49:56:82:10:31:9e:32:b5:2e:cd:6b:
                    73:19:e3:9c:81:69:90:f8:e3:3b:69:43:51:06:61:
                    a9:91:13:9f:65:54:7f:12:17:da:ef:d7:23:48:12:
                    d4:1e:4d:1f:29:ae:59:a6:9c:32:4f:b4:2e:a6:5d:
                    2a:d4:bd:fd:22:20:94:9c:2f:9e:c6:d3:d2:38:48:
                    21:69:d0:ef:66:1f:75:21:a8:d6:32:f4:c9:b9:c0:
                    cb:f3:a7:8b:b8:b5:18:cf:69:31:61:dd:a5:36:d4:
                    24:79:aa:c3:0b:21:7c:cc:79:80:0f:3e:0a:0b:00:
                    45:dd:a1:07:70:ff:ef:90:ef:99:32:ec:76:39:b7:
                    dc:92:6e:66:56:08:59:c5:1d:22:2b:92:19:35:98:
                    62:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F4:60:24:9C:1E:72:22:39:9E:FF:41:D3:24:13:7B:ED:B8:94:15
            X509v3 Authority Key Identifier:
                keyid:37:66:88:C8:37:02:36:71:BC:5E:87:D8:3F:FA:17:83:B7:CE:AB:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2aIyDcCNnG8XofYP_oXg7fOq04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6b0707-1584-41db-899b-3abed42221f6/1/N2aIyDcCNnG8XofYP_oXg7fOq04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6b0707-1584-41db-899b-3abed42221f6/1/N2aIyDcCNnG8XofYP_oXg7fOq04.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:75:5e:ba:55:84:38:2b:4e:13:ad:94:92:ba:90:65:ba:00:
         3c:d8:4d:ed:c4:60:82:1d:68:45:97:bc:1a:f3:3f:b0:9d:7b:
         08:f9:67:51:a8:00:9e:1a:d8:a2:c2:5a:a9:08:64:55:77:29:
         84:ac:dd:f6:59:1d:e3:d8:66:28:ae:98:00:a6:b6:d5:f8:87:
         4e:a4:2a:40:71:78:7b:4b:85:93:d3:8b:ef:ee:d9:16:51:58:
         78:ac:be:71:aa:49:18:56:bd:68:d5:90:5a:3d:94:37:e6:a8:
         03:70:dc:0c:8d:b7:d1:da:ee:74:83:26:33:2d:c4:1b:75:65:
         51:35:c6:dd:ec:68:8a:04:48:2e:46:c1:f9:d8:17:0a:d5:c8:
         1f:37:3d:b6:39:a1:13:c3:e2:82:2f:79:14:ae:26:a8:72:5f:
         c0:fb:c3:ed:ab:51:3c:ee:d6:d6:eb:32:f3:b0:9f:e7:c3:80:
         81:70:76:fb:1e:a3:8e:ad:c0:79:64:4d:68:e0:e7:01:15:8f:
         6f:01:7d:3e:26:6a:b0:c5:8c:57:63:1b:6b:8c:c3:99:ce:68:
         fe:8c:d4:f2:2f:fa:32:75:9a:30:8b:85:d5:6a:4a:f7:0d:7d:
         69:8c:4c:71:af:79:96:78:8d:3b:05:9b:dc:b5:1c:fe:54:22:
         86:2c:84:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:34 2025 by rpki-client