Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
File:                     MuFdOEw49IcrD_k1L_GcTW37ZMY.mft (raw, json)
Hash identifier:          yJ9PqLEgQyoYUSYMoN93YzUeIOLhy1Spu/xyvWZmYV0=
Subject key identifier:   26:8B:60:6E:93:9A:C0:AD:21:97:A0:D1:45:C9:54:A0:0D:80:51:95
Authority key identifier: 32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6
Certificate issuer:       /CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
Certificate serial:       0194BCA9F6FC14E3DD9051B9C9CF27CD8CCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft
Manifest number:          0B3C
Signing time:             Fri 31 Jan 2025 14:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:42 +0000
Files and hashes:         1: MuFdOEw49IcrD_k1L_GcTW37ZMY.crl (hash: ijd7SKPHqYqvzVVBQIzY0aXNKW+1ilAhLbS5F+ty+QQ=)
                          2: nLlnLzhBW0q3Q45Kky0hHNKYV40.roa (hash: RNNKG+Zuzj9PpdwsoSPFqXxYXZoCjXiQJtMmCaWRm20=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:f6:fc:14:e3:dd:90:51:b9:c9:cf:27:cd:8c:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32e15d384c38f4872b0ff9352ff19c4d6dfb64c6
        Validity
            Not Before: Jan 31 14:00:42 2025 GMT
            Not After : Feb  1 14:00:42 2025 GMT
        Subject: CN=268b606e939ac0ad2197a0d145c954a00d805195
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:86:59:41:cf:34:c1:b4:27:b4:20:6c:e8:d7:
                    11:ec:c9:a0:a3:3e:4b:a4:d0:e2:21:ae:3d:e1:7b:
                    d6:12:a0:42:88:21:2e:45:1c:48:ed:34:3f:32:7d:
                    05:94:cf:12:15:09:2a:17:ba:88:aa:a8:0b:99:c4:
                    e5:7d:9d:39:bf:1b:76:de:ff:05:9a:80:9c:d0:6c:
                    74:26:46:69:a9:cd:59:61:72:2e:66:e1:33:3c:ed:
                    64:8d:bb:12:56:9b:e5:5d:7d:bf:62:95:71:d8:f6:
                    9e:1f:d8:e3:a9:24:c3:30:08:ee:f8:ba:9e:a0:66:
                    09:fd:94:2a:72:0d:17:8c:de:13:88:2e:09:8f:b5:
                    52:2f:c1:80:a6:53:e2:bd:c5:e6:36:e1:e4:92:d7:
                    bb:55:23:24:56:43:75:25:f4:c4:a8:06:aa:ba:b0:
                    44:31:f8:de:ac:96:2f:26:2b:00:ea:9d:c6:9b:b0:
                    ea:63:f9:2c:52:5e:f6:1b:1e:ed:a4:23:25:b1:27:
                    84:ee:e9:f8:c0:15:ac:ca:8b:cc:35:c5:28:4b:f0:
                    c1:ee:7e:9d:07:38:02:62:05:3f:db:85:be:75:bc:
                    4d:13:00:5d:14:20:dd:8d:15:2f:7c:f3:5a:f0:40:
                    a0:5b:c8:6c:e3:ce:7e:fb:8b:6d:a7:4a:e6:40:b9:
                    55:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8B:60:6E:93:9A:C0:AD:21:97:A0:D1:45:C9:54:A0:0D:80:51:95
            X509v3 Authority Key Identifier:
                keyid:32:E1:5D:38:4C:38:F4:87:2B:0F:F9:35:2F:F1:9C:4D:6D:FB:64:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MuFdOEw49IcrD_k1L_GcTW37ZMY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/55d3cc-bcf0-425e-983d-4f3c46f17737/1/MuFdOEw49IcrD_k1L_GcTW37ZMY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:fb:57:94:8d:f0:b8:98:25:a2:3d:80:2e:b2:46:01:2e:b5:
         7b:59:80:73:dd:ae:33:ad:ae:47:34:89:c3:41:9a:eb:48:ec:
         1d:0b:eb:9c:4c:95:16:7b:22:f9:5e:e0:20:60:f3:d7:50:30:
         11:60:d3:dc:d2:b7:a7:13:aa:df:b5:52:71:43:ac:ab:45:74:
         d8:84:0e:e7:4b:b2:2f:1c:62:c7:db:0d:de:37:6a:a0:43:c9:
         80:3c:1f:7a:09:c1:e6:fb:cd:e8:f4:cb:25:b0:15:4b:43:10:
         35:5d:91:f4:d8:7f:97:98:4d:a9:0c:c7:e5:54:6c:ee:33:fe:
         16:c0:b3:28:56:fc:fd:11:c8:64:75:8c:a1:99:57:a3:96:7e:
         1e:cc:0b:e9:9f:0e:32:cd:40:81:a5:04:b0:ea:36:12:3d:be:
         6f:e3:90:8b:54:26:8e:a2:a2:a9:3f:77:ca:fa:02:bd:91:fd:
         96:40:81:08:87:fc:eb:59:c8:31:1d:05:98:c1:b9:73:ee:f2:
         db:72:f6:1e:f0:b0:60:2d:f2:59:69:13:b3:68:f7:35:47:fc:
         e4:90:34:62:b2:af:6b:a4:3d:15:d3:ed:65:fe:69:fa:5f:87:
         f7:bb:73:7b:50:5d:c7:5c:17:03:f9:28:3c:f4:05:a6:92:4f:
         37:2f:a1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:30:11 2025 by rpki-client