Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
File:                     njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft (raw, json)
Hash identifier:          5jMxQmS42uBWlAjhz9jWXALHcjQukqGbtsatlUBZ8+A=
Subject key identifier:   07:D3:73:90:69:3F:2D:A2:14:93:82:DB:8D:82:FF:DF:8B:67:96:72
Authority key identifier: 9E:33:D4:6D:20:27:0F:49:C9:0F:19:83:EB:04:42:DA:2C:6D:D6:24
Certificate issuer:       /CN=9e33d46d20270f49c90f1983eb0442da2c6dd624
Certificate serial:       0199C90F328F0851CF9E59F016A4D6A8E513
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft
Manifest number:          0D6E
Signing time:             Thu 09 Oct 2025 13:00:39 +0000
Manifest this update:     Thu 09 Oct 2025 13:00:39 +0000
Manifest next update:     Fri 10 Oct 2025 13:00:39 +0000
Files and hashes:         1: njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl (hash: m1MO3DO+TkBK2c1T+KMBeEZEDXDShgeSjKR/LN0F/l0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:c9:0f:32:8f:08:51:cf:9e:59:f0:16:a4:d6:a8:e5:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e33d46d20270f49c90f1983eb0442da2c6dd624
        Validity
            Not Before: Oct  9 13:00:39 2025 GMT
            Not After : Oct 10 13:00:39 2025 GMT
        Subject: CN=07d37390693f2da2149382db8d82ffdf8b679672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:be:e5:41:14:24:32:9d:aa:39:ce:13:f5:
                    87:6b:37:dd:7d:5c:a5:81:47:66:ab:01:96:b9:7e:
                    b4:de:54:38:55:6b:58:2c:bb:1e:14:43:2f:56:0e:
                    b9:5a:77:03:be:0d:cb:57:e3:67:37:01:fc:66:88:
                    9b:bf:6f:36:9b:58:d9:f1:d1:9b:6b:a2:84:66:aa:
                    30:23:63:1d:fb:8d:d4:de:b2:72:e0:85:32:05:7c:
                    72:e7:0f:7f:46:1e:24:25:62:14:a8:1c:ca:ed:4b:
                    1f:a4:21:59:d2:66:87:01:6c:f2:e0:93:8f:b7:85:
                    f5:f3:39:88:86:47:be:89:cb:e3:f7:10:96:85:79:
                    72:a5:fe:42:dd:55:5f:06:ca:30:37:24:fe:25:a9:
                    35:d4:ba:7f:2f:4d:e6:0b:c1:e6:8d:91:f6:ac:30:
                    49:6f:42:e5:93:e8:cf:61:27:1d:13:d5:34:82:fc:
                    08:9d:99:46:bf:9d:ec:1b:c6:6b:04:74:d9:56:6b:
                    64:e7:5c:75:93:a3:4f:12:0e:49:5e:45:78:98:61:
                    5b:89:e8:71:0a:87:85:f1:da:43:a9:31:b7:1c:41:
                    ed:b5:3b:73:df:23:34:21:fd:c3:90:99:44:b1:81:
                    04:fc:cc:88:c4:e6:13:30:b0:16:c8:51:0c:57:95:
                    bb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D3:73:90:69:3F:2D:A2:14:93:82:DB:8D:82:FF:DF:8B:67:96:72
            X509v3 Authority Key Identifier:
                keyid:9E:33:D4:6D:20:27:0F:49:C9:0F:19:83:EB:04:42:DA:2C:6D:D6:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njPUbSAnD0nJDxmD6wRC2ixt1iQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/49b69d-2375-46a9-91b9-18d90027c2f9/1/njPUbSAnD0nJDxmD6wRC2ixt1iQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:2b:b7:1d:a0:cf:8a:98:01:9c:0d:c0:74:49:38:40:63:88:
         75:12:50:3f:e3:e2:4a:2f:b0:7f:da:17:02:4e:11:38:88:dc:
         b6:05:88:26:4d:cd:5a:5d:cd:92:41:0e:b9:7b:fe:bc:f6:d0:
         71:a2:5d:8e:4a:f9:05:58:78:77:df:2e:5b:a3:bb:aa:c2:bb:
         48:6b:be:48:57:1d:a6:b5:95:4d:30:bc:1f:e0:2c:81:5d:ff:
         0e:23:cd:c2:06:04:bc:c8:6e:b6:5c:0e:c0:3a:87:30:ca:be:
         2b:31:c8:bf:66:4d:7d:12:94:ee:00:28:07:a6:97:80:48:d9:
         3a:ea:cf:8f:c8:08:db:47:69:1d:72:66:5e:78:0d:a3:46:2b:
         b9:b8:a2:76:88:87:a3:0c:e7:bc:1b:20:26:c5:1b:7a:86:4a:
         c4:bc:90:89:54:a7:fd:6b:1a:35:3c:45:ba:ae:6c:f9:11:b2:
         77:08:26:c0:15:fa:93:de:78:55:cb:8d:ae:8e:cd:90:36:05:
         10:e1:f3:ec:5b:13:55:09:83:dc:48:b5:55:e0:f6:41:b9:f1:
         21:c7:8a:ba:89:b5:9f:d5:3a:b9:98:04:6e:f3:50:d2:93:ee:
         31:51:82:8f:74:28:a3:a2:58:69:27:91:7c:24:a7:48:e8:d6:
         eb:41:03:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 01:15:33 2025 by rpki-client