Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
File:                     50ul5zTP81BoFBYlRVZuMxxyS8A.mft (raw, json)
Hash identifier:          wSh1ZUU8z22jPOGbAfEq+mQoJMuFq5Ns75UnfIczohU=
Subject key identifier:   05:E2:EB:9F:10:B1:00:EE:71:05:60:7F:B1:24:19:47:C9:0F:A0:A4
Authority key identifier: E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0
Certificate issuer:       /CN=e74ba5e734cff3506814162545566e331c724bc0
Certificate serial:       0194BBCE9E7B92360F02B781059F924523B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft
Manifest number:          0CD7
Signing time:             Fri 31 Jan 2025 10:01:07 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:07 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:07 +0000
Files and hashes:         1: 50ul5zTP81BoFBYlRVZuMxxyS8A.crl (hash: h3Nb5qgTYWAzV3UTXv7lTN7dSnVw8GyIS8cT1r7ifG0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:9e:7b:92:36:0f:02:b7:81:05:9f:92:45:23:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e74ba5e734cff3506814162545566e331c724bc0
        Validity
            Not Before: Jan 31 10:01:07 2025 GMT
            Not After : Feb  1 10:01:07 2025 GMT
        Subject: CN=05e2eb9f10b100ee7105607fb1241947c90fa0a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7b:1f:5c:1c:d1:54:33:c1:e7:0e:08:84:5a:
                    eb:15:fb:50:2c:26:40:18:5f:f7:32:77:e2:79:82:
                    4b:66:11:7e:56:8d:60:6b:91:88:1a:bf:85:50:dd:
                    a7:fb:08:15:16:51:38:26:af:ca:9f:a5:77:58:dd:
                    4e:01:61:8a:e4:d8:13:33:b2:6b:d9:92:cb:f2:ed:
                    e3:3f:e5:18:22:ea:3f:de:65:91:09:eb:47:67:75:
                    bc:c5:d1:34:78:85:99:db:10:51:6f:34:44:67:53:
                    d8:b1:b3:f8:29:85:7d:d1:0d:aa:2c:ec:d2:c2:eb:
                    05:70:75:ac:ab:39:87:5e:48:02:0f:19:f9:43:1a:
                    75:aa:34:71:dc:dc:72:bd:6f:93:dc:ff:e9:82:ff:
                    bf:9e:70:57:9e:22:60:60:5a:28:9c:c2:c7:1e:a4:
                    66:8f:a0:cd:b7:d2:47:7e:05:b2:88:5e:76:2e:5d:
                    f1:95:c9:cb:d8:ac:5c:5c:fb:c2:d1:ce:29:01:22:
                    33:5d:e3:08:ae:9f:22:93:66:8d:f8:79:93:1f:6a:
                    82:34:9e:c3:2e:5f:70:ab:48:95:43:dc:3c:6d:05:
                    09:fc:dd:b5:5c:2c:42:c0:9c:19:3d:a4:d9:d4:f6:
                    7c:b5:fa:a5:51:1e:76:a5:fe:2f:f2:99:65:3c:76:
                    16:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E2:EB:9F:10:B1:00:EE:71:05:60:7F:B1:24:19:47:C9:0F:A0:A4
            X509v3 Authority Key Identifier:
                keyid:E7:4B:A5:E7:34:CF:F3:50:68:14:16:25:45:56:6E:33:1C:72:4B:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/50ul5zTP81BoFBYlRVZuMxxyS8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/114d42-ecbe-4796-8b3d-ae5c272d4541/1/50ul5zTP81BoFBYlRVZuMxxyS8A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:13:9d:2b:09:79:9a:ab:ee:46:c5:4c:43:50:9a:6e:3f:40:
         6b:68:e5:33:ae:96:0c:e7:37:32:d2:55:ac:14:25:96:f2:af:
         ba:5a:d2:15:fc:e9:3b:f4:c3:48:57:6a:82:52:1e:ee:d5:ab:
         d5:e5:aa:69:8d:13:23:8b:47:05:64:84:97:07:3e:8d:ef:ea:
         ae:55:c8:de:2a:0f:54:cf:e1:f5:34:e6:f3:ea:fa:e1:86:fb:
         a8:41:14:a3:83:1d:37:0d:af:f9:9d:84:d0:a0:6a:59:78:72:
         03:ab:c5:43:bb:7d:ff:11:47:16:93:0a:6f:d2:67:c5:40:73:
         cf:23:60:4d:a6:48:ad:8a:0a:4f:b4:b6:59:2a:14:00:41:23:
         16:6e:48:83:26:d1:31:22:b8:dd:00:39:ab:ec:f5:b7:b2:79:
         99:cb:4e:d8:e0:51:0d:39:50:ae:54:19:47:ac:65:78:f9:42:
         87:67:76:02:fd:7b:d5:14:6f:60:4f:72:01:94:01:e6:6f:e9:
         e2:24:19:54:b4:9f:18:de:b5:0a:f7:e4:ec:a3:6c:b1:be:88:
         07:14:fb:29:11:63:ec:aa:7d:f3:c2:0a:b2:6c:66:82:ad:51:
         b8:8c:93:09:17:bc:0a:14:2d:a4:56:ce:64:b5:d4:be:03:15:
         75:a5:1c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:26 2025 by rpki-client