Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
File:                     Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft (raw, json)
Hash identifier:          uwpvMTysHl9o0uN61jOH40KPmzDaJAtcBNDSrJWkwqo=
Subject key identifier:   07:05:E8:61:8C:4C:91:91:56:6D:76:4C:B7:B7:7E:3A:D1:0C:48:82
Authority key identifier: 36:FD:F6:8C:EC:A3:76:9E:91:B0:E7:64:8D:1F:95:58:ED:4C:7C:29
Certificate issuer:       /CN=36fdf68ceca3769e91b0e7648d1f9558ed4c7c29
Certificate serial:       0194BBCE8450213A1C16772C07FABCF3ED73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft
Manifest number:          0ABD
Signing time:             Fri 31 Jan 2025 10:01:01 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:01 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:01 +0000
Files and hashes:         1: Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl (hash: JTNGyQEWuDc++EbT3LsHIs6l5EXxJOguZqHeH31abjI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:84:50:21:3a:1c:16:77:2c:07:fa:bc:f3:ed:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36fdf68ceca3769e91b0e7648d1f9558ed4c7c29
        Validity
            Not Before: Jan 31 10:01:01 2025 GMT
            Not After : Feb  1 10:01:01 2025 GMT
        Subject: CN=0705e8618c4c9191566d764cb7b77e3ad10c4882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8b:73:29:64:95:91:be:66:dd:9d:92:1d:ca:
                    e4:9d:cf:11:60:3f:37:2a:d8:10:63:5f:c6:00:72:
                    b8:53:2a:0b:85:7c:c2:69:ea:62:77:8b:3d:82:d8:
                    32:c8:b0:e8:96:2a:3f:26:26:2d:03:9d:56:77:ac:
                    dc:3a:17:90:86:df:5a:ed:fa:75:cf:bc:ea:58:05:
                    d6:e7:b6:6f:4e:b5:34:1f:8f:ea:5f:86:7e:86:f6:
                    5a:f3:f5:4a:b9:ae:2c:d7:f8:2d:e1:9c:8f:a8:cd:
                    93:f0:8c:f1:af:2a:1e:4d:f4:13:20:45:2a:77:44:
                    9b:6e:ed:dc:99:ce:7e:75:17:3e:e7:4c:fd:f0:5a:
                    d9:67:59:a4:96:a5:5d:1a:91:31:7b:72:7f:a3:ea:
                    4f:f7:90:73:45:bf:65:24:c5:d4:46:19:55:6a:e6:
                    df:65:b0:7e:42:a5:cf:40:e9:06:89:ec:ff:94:c7:
                    98:a2:c4:26:7e:e8:a6:07:4b:d9:1a:aa:1d:75:4d:
                    a5:08:7d:73:49:75:92:ce:11:10:53:4e:1e:7a:3b:
                    0b:e5:d9:4f:80:bc:a1:6c:a0:6d:47:a4:e2:e5:ca:
                    7a:36:f7:03:37:7f:79:90:b8:3d:48:fe:59:4c:6a:
                    e3:7c:b1:f9:23:8e:c0:0c:09:29:22:d8:cd:0b:04:
                    dc:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:05:E8:61:8C:4C:91:91:56:6D:76:4C:B7:B7:7E:3A:D1:0C:48:82
            X509v3 Authority Key Identifier:
                keyid:36:FD:F6:8C:EC:A3:76:9E:91:B0:E7:64:8D:1F:95:58:ED:4C:7C:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv32jOyjdp6RsOdkjR-VWO1MfCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/0109db-0333-498a-b6b6-35238040e8f9/1/Nv32jOyjdp6RsOdkjR-VWO1MfCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:fe:62:1c:f0:97:81:f7:dd:f7:d4:c6:d6:8c:2a:b5:65:42:
         f9:9a:49:fd:06:41:07:86:b8:2d:95:24:89:a5:07:f7:a8:cd:
         3a:39:06:58:f6:f6:94:eb:83:fe:bd:45:1f:6c:e7:dd:fd:8f:
         f5:0a:02:f4:a8:12:4e:f5:64:5d:1f:62:d3:bc:1e:11:3f:e4:
         dc:d3:d1:3c:27:f6:04:6e:5e:20:de:c6:49:1c:44:fc:78:e2:
         d9:69:12:74:0a:c2:17:18:6c:f6:16:20:94:86:30:c1:6e:ef:
         ad:bc:d5:14:99:1b:f9:ef:8d:a2:76:a7:fe:65:b1:7e:ec:d5:
         d0:3d:3f:df:01:6c:ba:2f:0c:97:fe:22:65:ce:f3:96:c7:99:
         47:ed:fb:d8:31:7c:df:b4:56:af:40:c9:c5:3c:20:1d:a8:14:
         72:ec:44:38:4d:66:f7:e4:45:05:66:70:28:b9:e1:f4:87:73:
         46:bd:90:1f:06:bf:93:e6:66:b5:03:48:48:8e:4f:9d:6a:84:
         c6:ad:9e:62:53:f7:e6:11:32:16:b3:57:9c:0f:75:9a:db:82:
         f1:44:8c:1a:0f:22:b5:79:c5:69:28:d0:e6:cf:bd:8d:42:e0:
         ef:1f:04:a9:6a:17:df:0b:7e:64:46:f7:f4:68:a1:c5:68:7d:
         98:89:af:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:27:16 2025 by rpki-client