Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
File:                     5D7dxEvG9TRFds9ZrwATXGtiwB0.mft (raw, json)
Hash identifier:          WgLMzUAU/Vtx/AqPX6NVoUzOFcm4dfjsjzmhsHJzGbw=
Subject key identifier:   A0:63:04:96:13:65:D3:70:C8:B7:62:96:C7:28:29:75:ED:61:D1:C5
Authority key identifier: E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D
Certificate issuer:       /CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
Certificate serial:       0194BC3BFFF704F24A29B4571975B52DD646
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft
Manifest number:          0A91
Signing time:             Fri 31 Jan 2025 12:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:36 +0000
Files and hashes:         1: 5D7dxEvG9TRFds9ZrwATXGtiwB0.crl (hash: 59XZENjmCS4BEvU5wxlfub/KaHQ/n4gd9/t4k3vOd2A=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:ff:f7:04:f2:4a:29:b4:57:19:75:b5:2d:d6:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e43eddc44bc6f5344576cf59af00135c6b62c01d
        Validity
            Not Before: Jan 31 12:00:36 2025 GMT
            Not After : Feb  1 12:00:36 2025 GMT
        Subject: CN=a06304961365d370c8b76296c7282975ed61d1c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:80:85:34:35:57:95:91:73:29:9f:98:f6:f0:
                    21:49:28:da:c9:ef:8a:fb:80:e4:4d:98:87:84:4f:
                    d2:71:e7:68:b2:5e:94:d1:5e:ec:1c:fa:41:58:09:
                    0e:50:4b:47:ae:8d:32:4b:a4:e5:ab:47:cb:0a:94:
                    f9:c4:75:b0:17:e8:f1:d9:3d:b3:89:90:46:00:5b:
                    72:16:89:44:68:f4:89:8a:38:21:31:d6:0d:6d:ed:
                    92:80:d9:af:51:c9:61:e2:87:97:57:58:21:e0:1f:
                    c2:32:ef:0e:85:02:88:29:0c:2a:5a:eb:22:94:b8:
                    55:ff:6e:97:c3:0d:98:29:33:07:85:8d:92:f1:72:
                    b6:40:73:e9:a3:63:cf:81:af:78:aa:04:1f:68:2e:
                    09:07:68:1f:e9:25:12:a5:0f:87:ee:c6:ad:6a:a8:
                    7e:1c:97:28:26:dd:66:02:d3:7a:16:3b:9b:9c:73:
                    ec:6a:2b:23:b8:27:e2:f1:bc:e7:fe:2d:42:b7:9c:
                    f0:00:46:72:d3:f5:80:cd:86:d5:5b:da:71:18:bf:
                    e3:d1:5f:59:b2:95:3e:43:d6:4e:7d:02:f5:97:d0:
                    99:d7:99:e9:4e:47:e5:85:93:77:02:f7:e7:e3:64:
                    76:e7:39:bd:36:d6:47:81:95:72:81:8f:56:5d:c5:
                    10:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:63:04:96:13:65:D3:70:C8:B7:62:96:C7:28:29:75:ED:61:D1:C5
            X509v3 Authority Key Identifier:
                keyid:E4:3E:DD:C4:4B:C6:F5:34:45:76:CF:59:AF:00:13:5C:6B:62:C0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5D7dxEvG9TRFds9ZrwATXGtiwB0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2daa72-0314-46c5-be5b-9a69304258a0/1/5D7dxEvG9TRFds9ZrwATXGtiwB0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:49:13:92:c7:84:0b:ab:44:13:70:41:d4:09:83:5c:a5:c9:
         8c:e9:d0:1b:2b:85:07:ed:ba:62:76:5c:ac:44:e3:37:0e:f6:
         7f:a2:c2:3e:7f:5c:e4:be:cc:45:66:21:5a:49:20:0b:73:52:
         bf:cf:a9:7c:1b:85:d8:b7:df:04:59:9a:08:f0:a4:da:3d:25:
         97:28:ba:4f:50:ec:88:ff:b1:05:a1:27:36:3d:b3:7d:c4:b7:
         88:28:47:48:d2:ee:04:c9:47:1b:de:79:12:75:56:49:a7:07:
         85:69:b3:ff:57:f9:4b:20:83:af:01:27:b2:94:c5:dc:09:2d:
         8d:1c:fd:02:d7:03:d3:06:9a:27:83:7c:49:85:6c:7f:60:82:
         23:9c:32:b8:55:5e:e8:3d:33:61:0b:af:84:2b:d1:0d:33:dc:
         67:76:da:d9:0e:4f:b9:7d:34:69:d9:d2:47:11:9d:29:bf:eb:
         79:31:38:f4:49:bd:b5:e3:60:0c:ac:aa:39:f0:1f:70:b4:50:
         f4:4a:32:fd:fc:20:19:db:ba:8d:37:a9:2b:1f:b8:58:b2:2f:
         26:42:a8:f5:bc:38:0f:b8:91:7d:61:98:e6:d6:a3:64:5e:6f:
         52:73:ad:08:58:d3:a8:b0:d5:31:46:66:3b:dc:fd:99:1f:b3:
         f5:3b:9b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:12 2025 by rpki-client