Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
File:                     nvnDHh7MuhkCs_YiWT3pcspxi1w.mft (raw, json)
Hash identifier:          vgBfKYWXT+ZILlzMK28SXdlh4Urm3Y0mM7F9r6xS74M=
Subject key identifier:   79:DF:CF:87:C5:80:4F:6B:B3:31:E9:E0:2B:91:49:D5:58:2B:AB:88
Authority key identifier: 9E:F9:C3:1E:1E:CC:BA:19:02:B3:F6:22:59:3D:E9:72:CA:71:8B:5C
Certificate issuer:       /CN=9ef9c31e1eccba1902b3f622593de972ca718b5c
Certificate serial:       0194BCA9C7D64E8F7CA780734EE2F83409C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft
Manifest number:          0B82
Signing time:             Fri 31 Jan 2025 14:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:30 +0000
Files and hashes:         1: nvnDHh7MuhkCs_YiWT3pcspxi1w.crl (hash: Z9G4yM+sHl3ZsI4k+gFe0RNlz4z+yC6AtRpHmJprpHU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:c7:d6:4e:8f:7c:a7:80:73:4e:e2:f8:34:09:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ef9c31e1eccba1902b3f622593de972ca718b5c
        Validity
            Not Before: Jan 31 14:00:30 2025 GMT
            Not After : Feb  1 14:00:30 2025 GMT
        Subject: CN=79dfcf87c5804f6bb331e9e02b9149d5582bab88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:eb:54:e8:25:31:21:0a:06:cc:ea:79:d6:ad:
                    dd:f2:d6:27:c5:c3:99:ad:b0:c8:bb:aa:26:3b:a3:
                    67:c7:f2:7a:7c:3f:f8:9a:80:fd:af:57:a5:57:2d:
                    c4:f0:4a:d1:53:fd:b9:65:af:d9:53:87:bb:78:8c:
                    7a:3e:6d:d1:19:48:f9:59:4d:cc:0b:cd:ca:93:65:
                    07:ab:91:05:0a:8f:93:b1:30:82:51:1d:b2:77:fd:
                    7e:d8:9c:9a:3a:6c:15:61:3b:ab:b7:18:0c:95:e4:
                    45:fb:fe:66:c3:71:73:ae:04:13:39:11:ae:f3:c9:
                    3b:de:8b:0a:26:33:d8:c3:4a:80:50:b0:8a:c8:4d:
                    cd:98:a8:e2:ea:ad:0f:66:48:83:93:f9:de:ab:cb:
                    40:aa:fd:fe:2c:fb:e8:d8:af:71:00:0e:51:42:27:
                    b7:a5:41:24:d9:fc:2b:65:8e:bf:f7:77:29:69:70:
                    46:3b:5f:b2:f9:ae:e8:d5:5e:e4:e3:fb:1f:d4:ed:
                    49:7b:46:b6:12:10:11:1d:09:cf:ae:43:cc:e5:10:
                    03:b1:a3:fb:30:b1:68:15:7d:bb:57:6b:05:bb:11:
                    08:f3:7e:bf:bd:fd:1c:8f:f9:6b:c6:54:69:9b:59:
                    90:91:f9:3d:b8:04:d5:27:d8:97:0c:6e:66:87:be:
                    e8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:DF:CF:87:C5:80:4F:6B:B3:31:E9:E0:2B:91:49:D5:58:2B:AB:88
            X509v3 Authority Key Identifier:
                keyid:9E:F9:C3:1E:1E:CC:BA:19:02:B3:F6:22:59:3D:E9:72:CA:71:8B:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nvnDHh7MuhkCs_YiWT3pcspxi1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/2fa7b8-a484-47df-b1c2-972c0fae67b8/1/nvnDHh7MuhkCs_YiWT3pcspxi1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:ef:b1:7c:f2:89:cf:55:ae:71:ba:0b:a5:c9:18:67:67:6e:
         08:de:f1:9d:5e:1b:46:41:ce:da:1d:4e:61:57:0a:68:4b:49:
         19:10:f7:32:61:44:63:bf:c0:24:20:6d:ce:59:66:7d:47:17:
         8a:b5:fb:44:22:55:f3:07:29:fa:13:b2:44:1f:e5:ca:a1:19:
         6f:3d:c5:92:ca:da:9c:7c:db:11:e9:1e:e0:95:7c:d9:92:f2:
         dc:a2:54:ee:4e:dc:7b:69:ff:20:eb:c0:e2:59:9e:4a:98:0b:
         bc:e9:5a:df:6a:27:fc:3a:93:95:e7:4e:ed:65:b2:e8:d0:5c:
         94:d5:73:b9:7e:02:67:15:bf:74:04:7f:f0:90:c2:39:b2:bf:
         99:57:d5:90:b0:76:be:58:ed:2d:1a:a1:b7:f6:61:6f:0e:61:
         85:73:f2:90:6f:97:fa:8e:3a:12:77:d8:93:01:85:5b:fc:d5:
         bf:e3:d7:60:b2:c2:26:a8:ff:b6:aa:b6:a2:6e:6d:d6:2e:df:
         95:ac:89:4e:1e:49:18:99:92:de:28:f8:41:4d:a0:5a:06:15:
         c5:0f:3e:b4:f6:6f:03:64:44:d2:18:50:b4:70:ce:6d:2f:40:
         76:8d:74:12:23:b6:00:bd:81:bb:dd:24:34:49:da:c5:8a:c7:
         64:95:7d:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qcfWTo98p4BzTuL4NAnBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllZjljMzFlMWVjY2JhMTkwMmIzZjYyMjU5M2RlOTcyY2E3
MThiNWMwHhcNMjUwMTMxMTQwMDMwWhcNMjUwMjAxMTQwMDMwWjAzMTEwLwYDVQQD
Eyg3OWRmY2Y4N2M1ODA0ZjZiYjMzMWU5ZTAyYjkxNDlkNTU4MmJhYjg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjetU6CUxIQoGzOp51q3d8tYnxcOZ
rbDIu6omO6Nnx/J6fD/4moD9r1elVy3E8ErRU/25Za/ZU4e7eIx6Pm3RGUj5WU3M
C83Kk2UHq5EFCo+TsTCCUR2yd/1+2JyaOmwVYTurtxgMleRF+/5mw3FzrgQTORGu
88k73osKJjPYw0qAULCKyE3NmKji6q0PZkiDk/neq8tAqv3+LPvo2K9xAA5RQie3
pUEk2fwrZY6/93cpaXBGO1+y+a7o1V7k4/sf1O1Je0a2EhARHQnPrkPM5RADsaP7
MLFoFX27V2sFuxEI836/vf0cj/lrxlRpm1mQkfk9uATVJ9iXDG5mh77oCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnfz4fFgE9rszHp4CuRSdVYK6uIMB8GA1UdIwQY
MBaAFJ75wx4ezLoZArP2Ilk96XLKcYtcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnZuREhoN011aGtDc19ZaVdUM3Bjc3B4aTF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi8yZmE3YjgtYTQ4NC00N2RmLWIxYzIt
OTcyYzBmYWU2N2I4LzEvbnZuREhoN011aGtDc19ZaVdUM3Bjc3B4aTF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi8yZmE3YjgtYTQ4NC00N2RmLWIxYzItOTcyYzBmYWU2N2I4
LzEvbnZuREhoN011aGtDc19ZaVdUM3Bjc3B4aTF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM++xfPKJ
z1WucboLpckYZ2duCN7xnV4bRkHO2h1OYVcKaEtJGRD3MmFEY7/AJCBtzllmfUcX
irX7RCJV8wcp+hOyRB/lyqEZbz3FksranHzbEeke4JV82ZLy3KJU7k7ce2n/IOvA
4lmeSpgLvOla32on/DqTledO7WWy6NBclNVzuX4CZxW/dAR/8JDCObK/mVfVkLB2
vljtLRqht/Zhbw5hhXPykG+X+o46EnfYkwGFW/zVv+PXYLLCJqj/tqq2om5t1i7f
layJTh5JGJmS3ij4QU2gWgYVxQ8+tPZvA2RE0hhQtHDObS9Ado10EiO2AL2Bu90k
NEnaxYrHZJV9KA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:37 2025 by rpki-client