Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/geNIePlrOZeqePTH-2le8NvG02A.mft
File:                     geNIePlrOZeqePTH-2le8NvG02A.mft (raw, json)
Hash identifier:          NGMVkw8wwHNQ4lj7hm6U/W6b0310lE1RaJO12VzBhSE=
Subject key identifier:   05:40:1C:E6:C3:99:55:46:33:88:D1:EA:4D:0F:DF:DA:73:5D:00:BC
Authority key identifier: 81:E3:48:78:F9:6B:39:97:AA:78:F4:C7:FB:69:5E:F0:DB:C6:D3:60
Certificate issuer:       /CN=81e34878f96b3997aa78f4c7fb695ef0dbc6d360
Certificate serial:       019370EDC4CD80335EDD1D93635B69E12F95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/geNIePlrOZeqePTH-2le8NvG02A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/geNIePlrOZeqePTH-2le8NvG02A.mft
Manifest number:          137F
Signing time:             Thu 28 Nov 2024 04:00:50 +0000
Manifest this update:     Thu 28 Nov 2024 04:00:50 +0000
Manifest next update:     Fri 29 Nov 2024 04:00:50 +0000
Files and hashes:         1: geNIePlrOZeqePTH-2le8NvG02A.crl (hash: TBrBfN9a0g292MlyTK9CFWgN27+L/65rnUmi/hUSd3M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:70:ed:c4:cd:80:33:5e:dd:1d:93:63:5b:69:e1:2f:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81e34878f96b3997aa78f4c7fb695ef0dbc6d360
        Validity
            Not Before: Nov 28 04:00:50 2024 GMT
            Not After : Nov 29 04:00:50 2024 GMT
        Subject: CN=05401ce6c39955463388d1ea4d0fdfda735d00bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:41:99:70:be:02:56:e2:8d:45:b3:ee:76:0f:
                    47:43:73:fb:51:43:82:ed:37:59:a0:93:90:c1:fa:
                    6e:c9:8e:c5:a7:28:8c:16:23:9c:fe:8d:e5:98:fd:
                    7a:14:d7:aa:72:47:09:c0:f8:c8:59:29:97:06:3e:
                    79:05:cd:90:a2:00:a0:19:b4:9c:4e:8e:7e:07:15:
                    8d:68:66:9a:0f:5a:e5:59:ce:66:3f:f0:aa:9c:10:
                    ad:6c:c1:bb:20:93:9f:33:6b:d3:24:39:f7:cd:f3:
                    91:8d:08:75:56:19:4e:76:11:b0:35:a2:cf:8a:d8:
                    1b:a2:36:ef:05:ee:d8:43:2e:36:27:af:7f:0a:1e:
                    8a:e6:de:4c:74:f1:71:78:46:fb:25:33:e9:a8:bb:
                    65:7c:00:db:5d:03:b8:e5:e2:d7:38:80:16:45:e4:
                    c8:4b:fb:8a:bb:a0:f7:e2:0f:8f:92:94:59:44:a7:
                    dd:d7:d3:3e:d6:6b:31:68:18:e2:c1:39:af:f5:3f:
                    b4:f6:d2:1b:e6:a1:32:14:44:58:8f:e0:13:ac:6f:
                    42:44:b7:f2:43:1f:fe:fc:c0:be:bc:ae:e5:b2:0c:
                    1d:6e:3f:d4:f9:79:fe:ca:4a:39:53:e6:68:8e:c7:
                    7c:5e:c2:e2:03:ff:25:17:52:aa:8e:0a:7c:54:88:
                    a2:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:40:1C:E6:C3:99:55:46:33:88:D1:EA:4D:0F:DF:DA:73:5D:00:BC
            X509v3 Authority Key Identifier:
                keyid:81:E3:48:78:F9:6B:39:97:AA:78:F4:C7:FB:69:5E:F0:DB:C6:D3:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geNIePlrOZeqePTH-2le8NvG02A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/geNIePlrOZeqePTH-2le8NvG02A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/bebc33-e901-4559-bdd0-b53204d93c33/1/geNIePlrOZeqePTH-2le8NvG02A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:a2:c8:55:47:ef:43:5b:d5:63:2a:79:7f:cb:b1:5f:2a:64:
         0d:63:a7:73:ee:dc:e0:fe:57:79:c4:04:82:92:43:7b:bf:4a:
         43:b0:0f:70:03:ba:92:c3:4e:3e:06:6f:1d:f1:74:dd:b4:68:
         0e:b6:9b:b0:ed:14:b4:42:78:4f:6e:b5:12:53:09:c4:1e:15:
         9f:da:ee:a7:fe:70:85:6b:02:53:1a:ae:14:09:ce:73:c9:1e:
         3a:c7:9f:7e:3c:a4:d2:41:b3:c4:e0:d3:07:ab:f7:60:d8:58:
         2d:ec:c8:b2:fa:55:77:47:bc:ba:5a:15:73:7a:b1:88:0c:6b:
         19:38:45:d9:c2:3e:80:1e:b6:b5:2a:48:fc:8f:29:3d:74:71:
         41:2e:d7:b8:5c:28:b1:f3:a2:5f:bb:73:ee:28:f5:1d:c6:44:
         a7:17:f6:4b:9b:65:e0:88:a6:d8:bb:c6:69:56:47:38:e3:ef:
         df:4f:b4:b8:4f:38:1a:ea:db:fe:d9:bc:c7:1f:26:cb:86:4b:
         9c:bf:ef:2d:3d:bd:48:4c:05:65:1e:97:34:5f:72:72:e0:66:
         fb:48:fc:71:dd:69:9f:46:93:00:0c:66:cb:cc:b6:39:9b:9d:
         13:11:9c:52:73:d0:fc:75:9a:88:a7:55:d4:71:5b:fa:de:a0:
         34:88:53:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:00:30 2025 by rpki-client