Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
File:                     nnagejNft6He1jqsxRM4rchHJnA.mft (raw, json)
Hash identifier:          3Z8L6wHrbZdqhjwPnmHeJ4zh27e5gm1g4ZvzeGSYjEE=
Subject key identifier:   5B:FA:4D:F9:50:2B:6A:1E:06:29:BB:AB:2F:32:20:B2:2D:A7:64:6E
Authority key identifier: 9E:76:A0:7A:33:5F:B7:A1:DE:D6:3A:AC:C5:13:38:AD:C8:47:26:70
Certificate issuer:       /CN=9e76a07a335fb7a1ded63aacc51338adc8472670
Certificate serial:       01987DF8016E757EFAA7E2809844DF4E9F98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft
Manifest number:          0CED
Signing time:             Wed 06 Aug 2025 06:01:01 +0000
Manifest this update:     Wed 06 Aug 2025 06:01:01 +0000
Manifest next update:     Thu 07 Aug 2025 06:01:01 +0000
Files and hashes:         1: nnagejNft6He1jqsxRM4rchHJnA.crl (hash: roskj9cj5mSCNIz63mIE2c75oHpRFPIySo0DculoA4I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:7d:f8:01:6e:75:7e:fa:a7:e2:80:98:44:df:4e:9f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9e76a07a335fb7a1ded63aacc51338adc8472670
        Validity
            Not Before: Aug  6 06:01:01 2025 GMT
            Not After : Aug  7 06:01:01 2025 GMT
        Subject: CN=5bfa4df9502b6a1e0629bbab2f3220b22da7646e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e5:90:ac:b7:ae:46:17:68:c7:9c:75:30:79:
                    1c:7e:a7:12:42:37:22:23:27:5b:2b:2a:5a:e3:5c:
                    70:55:17:2c:d3:36:9d:5d:06:28:a1:bd:4b:64:b1:
                    43:50:8c:a4:b9:c9:2e:19:3c:48:66:c1:6e:89:51:
                    f3:6d:59:47:ec:8a:d6:d8:c1:dc:ff:bc:0c:02:7b:
                    9f:aa:1d:95:b7:b1:bd:9d:dc:ee:84:2b:08:10:80:
                    a0:27:45:9c:d4:85:18:0a:51:5b:25:bc:db:9b:92:
                    37:d4:d1:44:29:a0:aa:e2:82:29:6c:e5:47:97:5b:
                    28:14:08:12:d7:24:4e:b4:18:c0:ce:d3:e4:ae:b8:
                    9c:64:ac:50:2e:81:0c:74:34:b0:f3:15:09:f9:d1:
                    22:91:58:26:8b:6a:0d:1d:40:18:10:1b:83:8e:56:
                    3f:a0:f9:6c:ea:62:af:93:2b:24:72:2d:53:77:ef:
                    4f:14:1e:5b:fa:85:8d:63:f1:f2:40:e8:a7:0b:f7:
                    10:c4:29:c1:1b:aa:55:98:44:ed:ef:e0:c1:5c:47:
                    c8:44:da:cb:ed:8e:66:6c:d6:52:38:ff:b7:f3:35:
                    85:8f:a3:09:3c:c7:35:92:1c:8c:96:b3:7a:0d:ee:
                    14:d8:9c:29:82:38:79:ea:c7:87:22:12:05:8c:17:
                    7a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:FA:4D:F9:50:2B:6A:1E:06:29:BB:AB:2F:32:20:B2:2D:A7:64:6E
            X509v3 Authority Key Identifier:
                keyid:9E:76:A0:7A:33:5F:B7:A1:DE:D6:3A:AC:C5:13:38:AD:C8:47:26:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnagejNft6He1jqsxRM4rchHJnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/4a8b67-cc91-4e96-8060-82bcab16656f/1/nnagejNft6He1jqsxRM4rchHJnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:9c:ae:8b:5e:12:e7:a9:77:7d:11:52:fc:b3:85:3b:21:e0:
         b5:9a:cc:58:e2:e1:a3:8e:0b:37:31:46:0e:1a:03:83:0d:15:
         e3:e4:65:55:98:37:47:38:39:0a:fd:aa:07:5d:b9:86:ba:a3:
         3f:72:52:d0:9c:b8:e3:65:57:ba:50:fa:ee:ca:85:af:35:76:
         b3:fc:3d:57:3f:16:33:4d:68:0b:86:07:7f:6c:40:09:e7:13:
         59:dd:47:ad:8e:4c:53:eb:4e:4c:47:69:37:7c:04:4e:d7:34:
         ec:7f:fa:88:94:cd:d7:3a:1b:00:ff:f1:ab:3a:17:14:7e:85:
         fe:71:49:ac:08:a8:5c:31:4c:6f:d7:38:8b:f0:38:f6:e0:c8:
         45:1c:21:d5:a1:22:0d:f0:c4:04:e8:6e:0d:ae:5d:bc:52:25:
         eb:b4:61:b0:09:b1:e0:cd:63:08:00:21:80:4d:45:8f:03:d4:
         5e:33:a3:85:0d:46:ce:ff:61:e6:b4:08:82:7e:b4:5f:7c:0d:
         ea:2b:1c:b9:74:8d:bb:28:76:5a:a1:e3:2c:c3:36:bd:81:9d:
         73:73:bf:27:aa:bc:73:c6:89:17:14:18:c7:ae:81:f7:52:28:
         52:0e:da:67:f9:8c:3d:7b:0d:56:7c:98:20:99:01:72:1b:7b:
         e7:f1:66:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:24:04 2025 by rpki-client