Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/031554-78c4-4577-8058-9b6b87138ae7/1/32d5WjuqRaia2o3afoTpa7euB4c.mft
File:                     32d5WjuqRaia2o3afoTpa7euB4c.mft (raw, json)
Hash identifier:          iKcoPkoYhcxgUoDQJMrNZan2755WYqNn+jUWrTWUB5M=
Subject key identifier:   B4:09:42:F1:1C:15:0A:BA:F7:F3:89:BE:1D:47:A1:A2:71:4C:B3:60
Authority key identifier: DF:67:79:5A:3B:AA:45:A8:9A:DA:8D:DA:7E:84:E9:6B:B7:AE:07:87
Certificate issuer:       /CN=df67795a3baa45a89ada8dda7e84e96bb7ae0787
Certificate serial:       01953B79FA4FB907DC7D2C18594C4DFCE7EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/32d5WjuqRaia2o3afoTpa7euB4c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/031554-78c4-4577-8058-9b6b87138ae7/1/32d5WjuqRaia2o3afoTpa7euB4c.mft
Manifest number:          08E4
Signing time:             Tue 25 Feb 2025 05:00:04 +0000
Manifest this update:     Tue 25 Feb 2025 05:00:04 +0000
Manifest next update:     Wed 26 Feb 2025 05:00:04 +0000
Files and hashes:         1: 32d5WjuqRaia2o3afoTpa7euB4c.crl (hash: DfRdiMibS0ShGNvzDZMGkbt/GF+EioWbdFDRz26ffrk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:3b:79:fa:4f:b9:07:dc:7d:2c:18:59:4c:4d:fc:e7:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df67795a3baa45a89ada8dda7e84e96bb7ae0787
        Validity
            Not Before: Feb 25 05:00:04 2025 GMT
            Not After : Feb 26 05:00:04 2025 GMT
        Subject: CN=b40942f11c150abaf7f389be1d47a1a2714cb360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a6:91:d3:00:d7:c5:f6:b1:06:6b:46:a4:d7:
                    93:9a:45:5c:e0:45:be:24:4b:43:45:dd:e3:4b:db:
                    bb:d1:79:db:b1:22:6f:38:ab:49:45:99:68:12:84:
                    fd:95:38:da:f4:79:db:55:fd:c7:62:87:e5:e0:6e:
                    ed:be:c7:a8:0a:e1:60:13:f1:c8:71:d1:97:e3:37:
                    46:dc:da:37:19:42:4e:63:33:89:6b:b5:f7:5c:64:
                    cf:ca:f8:91:9e:61:3f:13:f8:cc:f8:d6:4f:c6:9a:
                    52:00:ae:da:49:6e:63:22:33:4f:b0:65:05:5d:fb:
                    54:da:fd:d1:a0:f3:09:d8:d0:be:1c:fd:5c:4e:f7:
                    33:73:12:28:06:c1:5d:e5:99:74:8d:2d:8e:2e:d5:
                    ab:82:63:ea:2c:0b:2b:fd:cb:2e:2e:7f:16:5e:52:
                    7e:41:ad:ff:5b:25:57:10:68:06:a8:96:ba:14:66:
                    fb:cc:a4:56:fb:61:17:d0:f8:92:48:b4:72:24:db:
                    49:78:f1:90:2f:ba:e1:5c:f0:e8:25:ae:ed:81:4d:
                    60:db:f3:9c:13:04:f9:34:c8:1d:b6:51:b9:74:d1:
                    b2:2d:d5:b6:52:8e:b3:89:a0:45:1e:ee:0c:25:32:
                    b0:0b:9a:c4:74:94:16:24:be:d3:ef:36:e7:de:a2:
                    e6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:09:42:F1:1C:15:0A:BA:F7:F3:89:BE:1D:47:A1:A2:71:4C:B3:60
            X509v3 Authority Key Identifier:
                keyid:DF:67:79:5A:3B:AA:45:A8:9A:DA:8D:DA:7E:84:E9:6B:B7:AE:07:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/32d5WjuqRaia2o3afoTpa7euB4c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/031554-78c4-4577-8058-9b6b87138ae7/1/32d5WjuqRaia2o3afoTpa7euB4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/031554-78c4-4577-8058-9b6b87138ae7/1/32d5WjuqRaia2o3afoTpa7euB4c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:02:d4:76:16:bf:14:87:0c:57:ba:7d:a1:dd:1d:5c:49:ba:
         e5:e2:44:5d:04:a0:bd:e3:ee:e1:5c:cc:b2:a1:d9:56:c4:d2:
         f8:77:54:21:59:71:47:a3:26:a7:16:f5:6e:12:48:9f:04:0b:
         dd:93:fa:bb:54:83:c7:f2:b0:28:7a:9f:7d:74:22:54:49:68:
         be:05:1d:51:ac:da:29:c7:1a:bf:fa:96:c2:63:d3:9c:65:61:
         cd:f9:e3:84:cf:b8:b0:65:55:09:df:4b:39:08:17:6f:95:62:
         1d:5e:28:b6:8d:22:97:d6:f3:e3:30:43:3b:bb:9e:14:f5:fa:
         88:71:14:d0:63:7a:8a:44:64:1b:70:7a:61:ff:6f:54:08:42:
         13:1d:df:97:30:bb:ce:d8:59:b7:45:9e:86:12:eb:30:ff:da:
         2b:ac:37:0f:95:df:df:49:7d:77:fd:79:de:4f:2c:85:cf:31:
         b8:3e:28:c6:8f:1b:9e:91:cd:1f:cd:95:c9:5d:d2:5b:8b:c2:
         44:1c:ed:2a:39:81:fb:e6:19:31:2d:2d:41:c6:23:6f:62:b0:
         fc:11:83:50:d4:5e:d3:77:e6:f7:85:34:af:c9:33:43:ba:79:
         c2:00:e4:9a:76:31:fd:4d:17:7d:24:4f:8d:2c:c9:87:5c:91:
         f0:94:11:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:53:38 2025 by rpki-client