Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
File:                     MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft (raw, json)
Hash identifier:          29fBMEubqQFCDwY3RQuEAmdSsjnF4Y31+pm6+xubIgs=
Subject key identifier:   56:0F:ED:1B:C9:72:C0:DE:1C:DD:D9:BA:50:F7:87:A1:93:3D:CE:51
Authority key identifier: 32:E8:8A:8C:3F:2F:24:D6:93:31:6D:1F:21:1E:DE:EB:23:23:42:A6
Certificate issuer:       /CN=32e88a8c3f2f24d693316d1f211edeeb232342a6
Certificate serial:       0194BBCE9D97E8F70E1C59C309B332A0F6E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft
Manifest number:          05BD
Signing time:             Fri 31 Jan 2025 10:01:07 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:07 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:07 +0000
Files and hashes:         1: MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl (hash: E9ER9M0oys7UDBBIpg6qMofc/2vrYlcB6e7DsBqhRic=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:9d:97:e8:f7:0e:1c:59:c3:09:b3:32:a0:f6:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e88a8c3f2f24d693316d1f211edeeb232342a6
        Validity
            Not Before: Jan 31 10:01:07 2025 GMT
            Not After : Feb  1 10:01:07 2025 GMT
        Subject: CN=560fed1bc972c0de1cddd9ba50f787a1933dce51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:6e:49:57:05:e2:81:bc:91:fb:b8:2b:04:56:
                    37:07:bf:13:10:36:7c:bc:cb:d3:10:62:e3:cb:60:
                    bf:17:47:76:4d:d7:c3:3d:e0:15:73:ec:d4:62:4f:
                    a0:18:2f:e3:1a:05:40:06:f4:b5:e8:54:15:c8:26:
                    f5:73:77:bb:ab:97:89:96:0a:5e:ca:a0:0e:82:cc:
                    0b:36:c5:0c:f6:e9:4d:50:56:4b:86:29:90:fb:ae:
                    08:b0:74:d6:f9:0e:d4:41:ec:d0:87:bd:5f:f6:cb:
                    d0:46:f9:8d:dc:92:d3:db:11:e1:ca:be:96:74:44:
                    9a:fb:02:b3:5b:8b:23:18:c8:8d:5a:b0:cc:5a:12:
                    82:57:ca:e8:3c:f0:0d:93:4a:0b:b0:5e:19:31:f9:
                    c6:f7:e0:d9:89:c0:3e:93:dd:11:86:0b:79:f4:0c:
                    b5:8b:79:5f:87:24:85:1c:08:66:58:76:1a:aa:a2:
                    3d:85:5d:9e:7e:de:0e:58:9b:da:eb:2f:5e:f0:f2:
                    82:40:ae:fe:fa:80:7d:bf:ef:01:2b:99:36:a7:b4:
                    e8:f0:30:35:84:56:d5:41:fa:42:47:ab:00:95:61:
                    d3:ec:52:46:36:e2:3e:16:8b:13:23:fd:4d:cf:05:
                    48:8c:09:2c:1d:0b:4a:05:70:43:56:1b:eb:22:e8:
                    b2:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:0F:ED:1B:C9:72:C0:DE:1C:DD:D9:BA:50:F7:87:A1:93:3D:CE:51
            X509v3 Authority Key Identifier:
                keyid:32:E8:8A:8C:3F:2F:24:D6:93:31:6D:1F:21:1E:DE:EB:23:23:42:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuiKjD8vJNaTMW0fIR7e6yMjQqY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/06d3be-025b-4d10-a799-791615873d94/1/MuiKjD8vJNaTMW0fIR7e6yMjQqY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:98:b8:70:33:e0:cf:4d:32:70:90:28:52:85:f7:4f:29:95:
         0d:29:c4:b6:0b:c8:d0:71:45:15:0d:5f:59:eb:05:f6:b4:f7:
         cb:92:f2:b1:ec:6c:e8:99:3e:91:23:4d:6f:21:c2:8d:8f:71:
         55:57:59:a4:23:74:12:8a:46:59:bc:8a:c4:da:56:62:1a:8b:
         d2:5a:50:16:0c:af:46:11:f3:02:a9:12:96:6f:a3:51:7e:de:
         31:06:f0:df:bb:bf:14:02:b0:15:a1:4a:c5:58:74:9b:d2:1e:
         a3:69:ed:82:43:fd:39:1e:8f:d7:21:2c:bd:e2:d6:e5:6b:e8:
         a4:f5:7d:ac:a3:5d:ec:de:81:8b:71:b0:2c:17:61:f1:0e:4a:
         00:1c:f1:3f:8e:88:1d:49:82:99:9f:de:f4:c5:94:c0:a0:a4:
         29:a2:ec:95:29:53:02:e4:fd:68:83:ce:b9:7a:43:a2:74:6c:
         a5:1d:e4:4e:d9:c3:98:ac:0c:9f:dd:99:4d:2c:4a:36:04:53:
         e9:35:e9:fd:c8:c6:07:14:8d:7c:68:0f:cf:9d:d8:23:7a:76:
         02:7d:cb:dc:db:e8:13:40:7e:8d:3b:f7:47:f7:ae:b9:a2:ea:
         fe:40:00:1d:fb:2c:d6:2b:20:af:5a:e7:66:37:62:58:9a:a1:
         4a:0d:47:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:37 2025 by rpki-client