Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
File:                     nMHPS2otJ73LJqeD6Ddu5uspX9g.mft (raw, json)
Hash identifier:          +E32PytCKqeZ5jTEu2UC2S7o0BWl9B6ZVYiQxHbyqqI=
Subject key identifier:   A1:7A:B7:05:C3:BD:97:30:5D:8A:12:1A:65:57:17:9D:04:EF:D2:B5
Authority key identifier: 9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8
Certificate issuer:       /CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
Certificate serial:       0194BBCE9F8ECFB72412DB6D4556DB397D03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft
Manifest number:          0A53
Signing time:             Fri 31 Jan 2025 10:01:08 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:08 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:08 +0000
Files and hashes:         1: nMHPS2otJ73LJqeD6Ddu5uspX9g.crl (hash: lAXBBp6m+CyFHEWskuqDyQmb9NFqJVG9OTGHF+hERwI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:9f:8e:cf:b7:24:12:db:6d:45:56:db:39:7d:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc1cf4b6a2d27bdcb26a783e8376ee6eb295fd8
        Validity
            Not Before: Jan 31 10:01:08 2025 GMT
            Not After : Feb  1 10:01:08 2025 GMT
        Subject: CN=a17ab705c3bd97305d8a121a6557179d04efd2b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b8:86:1c:15:18:00:f9:ea:eb:21:29:4c:5c:
                    02:3a:37:4f:e0:6b:81:7c:a4:27:4b:16:3c:e0:cd:
                    8b:07:ee:0f:c8:a1:9e:8b:d2:f6:40:85:76:2a:d9:
                    2e:79:3e:02:b4:57:53:9d:a8:07:9f:47:23:b7:c1:
                    5c:b6:d5:01:b2:2e:78:89:87:67:9a:53:58:1a:69:
                    d0:c7:3e:41:ad:c3:db:e0:fc:ac:cb:26:25:60:5a:
                    0a:59:03:03:14:c0:d4:ec:b1:10:63:0e:42:4d:be:
                    cb:7f:e7:3a:ea:f0:03:65:c7:21:60:4d:4c:5b:2e:
                    bd:38:66:63:b4:6c:5b:b8:28:81:0f:94:88:4f:ab:
                    87:35:40:63:73:38:18:3b:ed:62:1d:cd:cf:7b:4b:
                    e1:49:a9:26:c1:c4:4a:b6:1d:0e:2e:2a:c5:a2:3a:
                    13:00:df:9c:75:a6:30:f2:e3:2d:1e:92:ca:a2:6a:
                    d0:9e:27:bd:8f:22:1d:7b:dd:6c:9b:65:2e:90:70:
                    ea:fc:0e:4b:7f:e6:00:63:82:d3:8c:e7:f3:6a:d7:
                    45:9a:d0:38:ff:8c:54:31:22:ea:32:5c:91:92:aa:
                    1f:14:cb:1f:72:62:44:95:cc:c6:a0:08:6d:7a:e9:
                    a0:ba:67:d1:a4:b9:49:7d:46:76:8f:7e:14:2e:86:
                    63:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:7A:B7:05:C3:BD:97:30:5D:8A:12:1A:65:57:17:9D:04:EF:D2:B5
            X509v3 Authority Key Identifier:
                keyid:9C:C1:CF:4B:6A:2D:27:BD:CB:26:A7:83:E8:37:6E:E6:EB:29:5F:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMHPS2otJ73LJqeD6Ddu5uspX9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/791963-af47-4c4c-88b7-a30e96db49c4/1/nMHPS2otJ73LJqeD6Ddu5uspX9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:59:64:dd:e7:cc:33:d8:36:7d:47:94:2a:54:a6:97:31:97:
         7b:8f:39:b3:8e:70:b0:77:39:ec:65:e2:05:8a:4a:2a:e0:e7:
         f8:dc:08:55:fc:f7:a4:3c:04:00:01:8a:cc:2d:de:91:1c:73:
         1c:d5:76:70:4a:fe:f2:a9:d0:a5:7e:a5:1d:68:37:a8:b5:04:
         b8:36:11:2b:e7:01:91:99:33:ef:30:67:4f:25:fd:76:f5:4d:
         51:7b:dd:eb:2b:c2:4d:d7:74:02:bc:5b:e7:ce:28:89:aa:6f:
         0a:c9:70:74:50:49:a7:59:c6:fc:71:16:c5:2c:8b:0c:f4:0b:
         86:1b:8f:14:df:0d:b2:24:59:3b:13:f0:1f:b3:c8:8e:d5:45:
         7e:77:93:11:f4:d4:47:d9:db:d8:ba:12:78:59:c4:da:db:ec:
         29:a0:5c:a2:83:19:72:ae:18:4c:16:ec:42:04:5b:fc:4c:cc:
         c4:46:1d:29:49:62:e1:dc:dd:8e:8a:d0:71:55:e4:65:a4:16:
         51:31:8e:5d:b1:bd:ec:1b:a0:83:09:ab:36:d0:cd:51:cb:13:
         4c:05:13:9c:aa:ae:de:5b:6a:67:ce:6a:ee:be:77:d6:7e:56:
         61:ce:57:00:c9:f1:8c:87:ac:2a:2d:31:cc:67:c3:bb:61:9d:
         c0:b9:98:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:31:32 2025 by rpki-client