Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f197e5-10af-4ace-9dc6-73bc0df8277a/1/5AjjbPF3Xcx2nrgS1ox3zm20kyM.mft
File:                     5AjjbPF3Xcx2nrgS1ox3zm20kyM.mft (raw, json)
Hash identifier:          RvYeDkSql2TDhsispcDNjDzQT6/I5sq959SE2oJhcDE=
Subject key identifier:   8B:E6:B7:B8:FF:FB:3D:67:B0:9B:74:0A:6E:14:27:8A:9E:F7:5A:2B
Authority key identifier: E4:08:E3:6C:F1:77:5D:CC:76:9E:B8:12:D6:8C:77:CE:6D:B4:93:23
Certificate issuer:       /CN=e408e36cf1775dcc769eb812d68c77ce6db49323
Certificate serial:       0194BBCEE253994354455B57244253C8C171
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5AjjbPF3Xcx2nrgS1ox3zm20kyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/f197e5-10af-4ace-9dc6-73bc0df8277a/1/5AjjbPF3Xcx2nrgS1ox3zm20kyM.mft
Manifest number:          03FB
Signing time:             Fri 31 Jan 2025 10:01:25 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:25 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:25 +0000
Files and hashes:         1: 5AjjbPF3Xcx2nrgS1ox3zm20kyM.crl (hash: DWyeeXVZzMCXyOLNXg5W07NONrTgCu5b1CKvUn0WjzI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:e2:53:99:43:54:45:5b:57:24:42:53:c8:c1:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e408e36cf1775dcc769eb812d68c77ce6db49323
        Validity
            Not Before: Jan 31 10:01:25 2025 GMT
            Not After : Feb  1 10:01:25 2025 GMT
        Subject: CN=8be6b7b8fffb3d67b09b740a6e14278a9ef75a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:be:fd:e2:02:cb:2e:d2:5c:c5:f5:0c:71:d1:
                    2f:83:78:be:0d:d5:d7:2d:03:0b:92:c6:8b:3e:2b:
                    57:8c:f1:3d:cb:73:42:d0:95:54:6f:97:68:89:dc:
                    63:2b:09:9a:d6:8e:65:26:4a:68:34:b0:bd:11:51:
                    f9:b4:7e:68:aa:43:f6:d9:02:65:63:21:db:9c:26:
                    8c:d2:dc:4a:ef:8c:75:8c:18:f6:20:c2:09:55:30:
                    5e:0a:83:32:d8:e2:48:71:7b:18:28:b7:54:f8:cb:
                    0a:cc:c8:08:db:02:0a:61:0b:4d:91:0b:d2:81:0c:
                    d0:59:42:23:12:4f:e2:b4:fa:7b:59:bb:c3:87:14:
                    fc:b0:5a:21:f9:6e:36:79:a6:b5:01:5e:d3:98:49:
                    de:97:4d:b7:02:28:79:8b:9b:67:b9:23:bd:4d:ed:
                    64:0c:3b:27:cf:a7:65:e9:30:3b:a6:fb:53:7b:0f:
                    5d:6a:cd:39:77:b6:c9:2b:74:b7:8e:dd:8e:05:66:
                    09:f6:dc:c2:08:ad:bc:d0:c9:0b:5a:dd:f8:e4:d6:
                    f5:a0:44:85:8a:1b:36:3e:94:1c:92:00:74:72:4f:
                    8c:a3:e1:63:61:fd:60:85:cb:25:28:7f:26:a0:f8:
                    e1:1f:dd:33:fb:ab:5b:22:fa:78:21:cf:f2:09:f5:
                    10:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E6:B7:B8:FF:FB:3D:67:B0:9B:74:0A:6E:14:27:8A:9E:F7:5A:2B
            X509v3 Authority Key Identifier:
                keyid:E4:08:E3:6C:F1:77:5D:CC:76:9E:B8:12:D6:8C:77:CE:6D:B4:93:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AjjbPF3Xcx2nrgS1ox3zm20kyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f197e5-10af-4ace-9dc6-73bc0df8277a/1/5AjjbPF3Xcx2nrgS1ox3zm20kyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f197e5-10af-4ace-9dc6-73bc0df8277a/1/5AjjbPF3Xcx2nrgS1ox3zm20kyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:e3:f0:7c:90:09:69:11:cd:d1:61:5f:80:c6:70:86:7e:4c:
         c9:e8:ab:47:be:40:37:ac:74:0c:f7:d8:a2:16:07:e7:2d:15:
         93:cf:1b:64:90:08:a4:54:5b:ed:0c:18:cf:46:68:c4:6d:5c:
         31:89:82:18:14:6d:06:20:36:9e:a2:93:7d:ad:62:e6:7b:a4:
         cb:4b:4d:0c:e7:39:01:0c:7e:71:03:ee:c7:ca:75:aa:24:f5:
         e4:2d:0e:17:d8:7b:bc:66:2d:3d:c6:ef:e5:99:2a:5f:9c:1d:
         b8:25:23:bd:d1:a2:55:1b:d7:72:03:bf:c1:e0:54:c4:3b:cf:
         67:c8:04:99:0f:21:cf:29:25:b8:d3:bf:6b:ad:e0:cc:37:d7:
         74:6c:45:3b:05:a9:fa:16:c2:d3:b3:fc:4e:0a:c0:e0:b4:c4:
         40:bf:dc:72:4d:1c:c3:22:ea:16:28:a9:51:4c:67:53:1a:80:
         f1:37:cf:c9:d5:7a:db:86:5b:06:3f:62:d2:e3:28:25:a2:f9:
         30:e8:62:0f:e9:ee:60:9c:c6:b5:2d:5e:9e:8c:58:a3:1b:08:
         21:8d:37:83:7e:9d:2a:ec:31:dd:a6:d6:1f:a6:1f:e3:11:f6:
         27:60:56:bc:ec:28:ab:8b:78:1d:0f:dd:10:7f:09:fb:a5:7b:
         bf:5f:81:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:13:00 2025 by rpki-client