Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
File:                     Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft (raw, json)
Hash identifier:          UHcR25NJqjxAPtbiZQWY8Poruu9KoUnxlJ7xXjwFIHA=
Subject key identifier:   A4:E1:9A:B6:4F:A4:CD:5E:13:1C:F2:0A:E6:9F:39:58:EF:A7:54:E5
Authority key identifier: 37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8
Certificate issuer:       /CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
Certificate serial:       0194BD17B9E492BDDD99E23A71DD5BF8E2ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft
Manifest number:          05F9
Signing time:             Fri 31 Jan 2025 16:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:36 +0000
Files and hashes:         1: Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl (hash: uDz1NzSLz//EHyHS6aFqoQEctxkUGEehfR8x3yFX9dU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:b9:e4:92:bd:dd:99:e2:3a:71:dd:5b:f8:e2:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37285ae22d71ef24478f0caec0f29c7dd914c3c8
        Validity
            Not Before: Jan 31 16:00:36 2025 GMT
            Not After : Feb  1 16:00:36 2025 GMT
        Subject: CN=a4e19ab64fa4cd5e131cf20ae69f3958efa754e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2b:5c:2c:2f:e7:62:a6:2b:d5:dd:d2:27:5e:
                    bf:2d:51:39:b1:18:05:2e:69:78:eb:a0:2f:cf:9c:
                    77:33:3e:2b:c1:db:01:f3:b6:ec:94:83:5e:fe:83:
                    dd:a3:d6:36:73:52:e2:e1:ab:ad:49:42:91:14:55:
                    02:d0:07:45:41:39:a4:d3:57:e2:e8:dc:32:c3:53:
                    47:2f:e9:a7:cb:6e:c7:8f:26:d5:f3:9d:b1:d9:92:
                    e5:41:42:54:5f:c2:5f:81:8d:1f:08:98:c7:b3:ce:
                    af:7c:1c:58:b8:80:7f:c4:25:19:2f:44:2b:67:4f:
                    2e:7b:ab:8a:4d:d7:b4:83:30:34:f1:40:23:de:31:
                    13:a4:20:b3:fd:d8:32:9e:bd:21:16:00:a5:a1:64:
                    9a:8c:b8:d2:f5:6d:16:b7:e5:bd:fa:32:76:bf:2b:
                    2b:84:9f:35:80:d1:48:79:8f:eb:11:9d:a5:cd:5e:
                    b9:d5:6d:48:d4:49:a5:ed:a6:b5:51:11:12:15:8f:
                    e6:62:65:4d:d3:c7:77:e5:a2:67:0f:14:75:e7:74:
                    b0:aa:a7:9a:6a:bd:b6:93:77:e5:65:0f:00:2a:0e:
                    34:a0:db:1d:af:12:ba:e4:13:65:3e:50:07:76:93:
                    b8:b0:b2:38:ca:a3:bc:77:8b:59:1e:a8:66:f6:5c:
                    78:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:E1:9A:B6:4F:A4:CD:5E:13:1C:F2:0A:E6:9F:39:58:EF:A7:54:E5
            X509v3 Authority Key Identifier:
                keyid:37:28:5A:E2:2D:71:EF:24:47:8F:0C:AE:C0:F2:9C:7D:D9:14:C3:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nyha4i1x7yRHjwyuwPKcfdkUw8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/16429c-9334-4705-8821-3f2eb56b2bd3/1/Nyha4i1x7yRHjwyuwPKcfdkUw8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:fa:3c:98:07:8e:29:c8:a5:51:b0:11:b4:39:19:79:4a:81:
         c0:af:f5:5d:de:ad:43:51:5c:d7:2f:07:b0:b8:2a:3c:e0:28:
         9b:0e:1f:f3:d7:12:70:8c:01:65:42:75:6f:4f:01:c1:e1:09:
         d3:a7:07:e9:24:cb:47:48:ec:4f:8c:d5:ee:d0:f0:a4:14:e8:
         e3:0f:8c:5a:07:ae:8e:56:06:bf:82:30:b3:54:05:73:91:6b:
         4b:df:a1:cc:35:7f:d7:55:de:40:26:40:62:62:df:9b:c5:51:
         e1:f4:23:25:f3:de:a4:92:b5:54:98:1e:b0:a7:cb:a2:8a:2f:
         2b:47:e6:49:72:66:d7:97:ee:c5:db:63:af:cd:76:fe:41:b0:
         ee:88:5f:12:d3:fc:27:bb:0c:62:09:83:b9:f6:2c:f8:ab:36:
         86:f9:48:30:96:6a:37:0a:61:0d:00:fd:d2:35:10:39:85:6c:
         f1:34:08:43:0a:d1:83:9f:48:d3:a8:1d:03:7b:78:cc:e3:d5:
         6d:db:6a:65:e2:33:46:b3:44:9d:b1:b3:f3:ef:ee:51:fc:1f:
         84:8a:32:7a:84:f8:c2:f0:9f:04:0a:4d:09:86:ef:d1:71:26:
         4b:fd:f9:e3:5f:61:ca:45:b5:4b:e3:6e:30:a4:c1:6c:34:d9:
         11:0f:39:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:14 2025 by rpki-client