Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/15c410-b2e8-4b9b-9f70-01e275e94e44/1/NtMz8-kpQUbC4qH3Rv4BFvaF-Mo.mft
File:                     NtMz8-kpQUbC4qH3Rv4BFvaF-Mo.mft (raw, json)
Hash identifier:          cKLr0JGAEYs5nzrVg42R8yk69vn41b7RV1iutcM78gA=
Subject key identifier:   DD:0A:AF:10:B6:BB:66:13:BC:5C:EC:00:0C:76:A3:F5:B0:26:C3:A3
Authority key identifier: 36:D3:33:F3:E9:29:41:46:C2:E2:A1:F7:46:FE:01:16:F6:85:F8:CA
Certificate issuer:       /CN=36d333f3e9294146c2e2a1f746fe0116f685f8ca
Certificate serial:       01883441297347A0079309ECB3BA0A5C2579
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NtMz8-kpQUbC4qH3Rv4BFvaF-Mo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/15c410-b2e8-4b9b-9f70-01e275e94e44/1/NtMz8-kpQUbC4qH3Rv4BFvaF-Mo.mft
Manifest number:          0D8C
Signing time:             Fri 19 May 2023 13:44:25 +0000
Manifest this update:     Fri 19 May 2023 13:44:25 +0000
Manifest next update:     Sat 20 May 2023 13:44:25 +0000
Files and hashes:         1: NtMz8-kpQUbC4qH3Rv4BFvaF-Mo.crl (hash: KZF90IYBKHuukMBlUn3rYPPizM6LOpcGogfd+tqb07Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:88:34:41:29:73:47:a0:07:93:09:ec:b3:ba:0a:5c:25:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36d333f3e9294146c2e2a1f746fe0116f685f8ca
        Validity
            Not Before: May 19 13:44:25 2023 GMT
            Not After : May 20 13:44:25 2023 GMT
        Subject: CN=dd0aaf10b6bb6613bc5cec000c76a3f5b026c3a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:68:51:95:3f:b5:d2:ea:58:f6:85:ec:0a:27:
                    9e:95:95:db:8a:69:5e:b9:6e:bb:0f:1b:39:6e:d5:
                    64:12:4c:33:fc:d1:ce:30:9a:10:11:cd:44:eb:65:
                    f0:27:dc:7e:ba:60:ab:48:fe:4e:c8:4a:6f:e3:43:
                    03:6c:d6:02:81:36:56:8c:78:5f:99:24:3c:0e:6f:
                    d1:f8:f1:a2:5a:cb:fd:11:cd:06:6c:ba:b6:8c:16:
                    f1:85:58:f5:b6:17:7a:ac:cb:10:23:6a:bc:ea:23:
                    74:b6:5d:42:7e:f2:e9:03:3f:ed:b7:35:fe:3f:81:
                    2f:39:0a:88:66:75:94:c0:3e:82:c8:d8:b5:ac:25:
                    fd:17:db:c4:d7:f9:aa:e0:bb:34:07:a6:76:fb:2a:
                    08:d5:6e:d6:0f:e8:01:54:0e:2e:f2:93:43:bb:96:
                    33:ca:8a:fe:17:c3:d8:56:c0:37:f7:90:d5:a5:b1:
                    29:f9:15:54:c2:00:c6:20:bf:bf:b1:6a:0b:b4:25:
                    33:0f:08:d1:ee:17:59:af:02:5f:a2:5c:c6:e2:59:
                    c4:ac:43:34:2a:b9:c8:9a:34:81:c4:b1:bc:97:b4:
                    96:13:2a:69:b9:b1:73:a0:92:b0:ce:91:d7:90:1f:
                    1f:3c:65:c3:cb:fe:56:a4:64:b2:b2:f4:9b:15:62:
                    17:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:0A:AF:10:B6:BB:66:13:BC:5C:EC:00:0C:76:A3:F5:B0:26:C3:A3
            X509v3 Authority Key Identifier:
                keyid:36:D3:33:F3:E9:29:41:46:C2:E2:A1:F7:46:FE:01:16:F6:85:F8:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtMz8-kpQUbC4qH3Rv4BFvaF-Mo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/15c410-b2e8-4b9b-9f70-01e275e94e44/1/NtMz8-kpQUbC4qH3Rv4BFvaF-Mo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/15c410-b2e8-4b9b-9f70-01e275e94e44/1/NtMz8-kpQUbC4qH3Rv4BFvaF-Mo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:1c:e3:c4:bc:5d:9a:d7:90:86:19:34:bf:8a:55:4e:28:40:
         ad:7d:b0:73:90:f2:28:b5:39:f4:48:76:2f:cf:89:89:e9:a4:
         a6:39:f0:b8:92:53:d8:07:d5:78:9a:07:e8:fd:71:62:45:51:
         5a:5a:b7:26:44:b1:cf:32:bc:87:4b:73:14:07:9c:eb:5a:fd:
         5c:88:d7:87:ae:20:42:34:2a:03:7a:46:1b:a5:c8:a1:87:e7:
         f4:8c:71:be:86:e3:45:9d:60:48:28:8e:51:ac:a5:12:a3:70:
         70:b6:ff:6d:09:c1:74:63:37:fb:01:63:41:01:b5:c8:d1:5f:
         ba:c9:f8:75:96:3e:23:85:a2:a3:1d:d2:37:67:81:67:32:be:
         61:56:b9:42:2f:68:f3:df:4b:55:b7:95:5d:f3:bf:f8:6a:07:
         f2:98:35:31:38:5c:9e:31:f5:19:67:c7:bc:f2:3c:e5:76:28:
         38:6b:9b:f6:9e:c9:cc:68:0a:ce:c5:4e:74:e6:f1:4a:ff:2b:
         6e:ba:8b:79:12:fe:75:24:5d:99:70:23:1e:40:1d:df:20:e7:
         de:a6:8c:de:ae:c9:cd:2c:70:ed:48:28:09:e9:d2:87:b2:03:
         17:4e:04:0e:4c:55:54:03:e8:cf:2a:c1:6f:2b:8a:dd:e9:a5:
         42:79:09:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:33 2025 by rpki-client