Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
File:                     5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft (raw, json)
Hash identifier:          DVWGKFsnPBKY6uAUNwXKTdaLB1Ix9Vy64r9qk5B6x1w=
Subject key identifier:   66:F8:9D:FE:68:B4:ED:03:51:A2:8B:0D:55:B4:A7:F2:AC:BD:EE:90
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Certificate issuer:       /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial:       0194BD178A0BDDE44A0EF47237365E1962A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
Manifest number:          07DA
Signing time:             Fri 31 Jan 2025 16:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:23 +0000
Files and hashes:         1: 5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl (hash: KXYQq379zAjUUcHRbioI8UgYYkA9SGrQYbnztYPiC9o=)
                          2: m4ZSJvHCvVAdAoCa8Dy3Jfpj2Po.roa (hash: aprBkCfkVmxisnK2NR7zrUxKt0p0KhHf/uKOAfeW9gI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:8a:0b:dd:e4:4a:0e:f4:72:37:36:5e:19:62:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
        Validity
            Not Before: Jan 31 16:00:23 2025 GMT
            Not After : Feb  1 16:00:23 2025 GMT
        Subject: CN=66f89dfe68b4ed0351a28b0d55b4a7f2acbdee90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:94:78:49:fd:6d:09:ee:63:a7:71:0f:23:7a:
                    20:57:9d:26:67:a0:5a:7e:7c:f0:8e:fd:65:60:25:
                    95:9d:d3:1d:dd:34:ec:85:5f:61:29:64:4e:30:0b:
                    dd:04:cc:83:77:c8:44:6f:f7:cb:e6:b6:df:ce:ef:
                    e4:e3:2c:33:ee:fd:b8:a0:a1:40:f0:8c:a3:27:c8:
                    75:4d:32:1c:f7:f9:43:ed:a8:58:d8:e5:3e:bf:54:
                    fc:6b:d4:3f:c0:2a:ec:93:2f:d0:33:48:84:11:d5:
                    71:84:cf:98:24:b9:b6:05:dc:f2:07:40:37:78:cc:
                    9c:a1:34:a8:a8:32:ab:68:60:19:7a:4d:f4:e0:0f:
                    d5:8c:2c:b4:92:46:10:49:91:76:83:b7:bb:50:ff:
                    ba:5c:a7:ff:03:3b:63:dd:c2:f6:7f:90:b8:1d:28:
                    b5:a5:6f:81:56:65:70:79:ed:2b:8e:4b:44:cf:0e:
                    a9:12:a9:09:d9:a4:f6:98:78:af:d7:a7:a8:19:71:
                    ca:7b:9f:39:ab:0c:70:3c:30:19:fe:b8:c7:c1:7b:
                    18:60:78:5d:cc:b3:ca:cb:f7:e7:bc:c1:d3:f4:45:
                    4f:3d:7d:1c:58:c6:a2:02:e1:e7:84:41:70:f2:5c:
                    e1:35:0f:7e:b2:e9:86:88:03:2a:37:a1:1f:2f:06:
                    45:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F8:9D:FE:68:B4:ED:03:51:A2:8B:0D:55:B4:A7:F2:AC:BD:EE:90
            X509v3 Authority Key Identifier:
                keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:84:d9:6c:ee:fd:0d:df:3a:c8:a3:f1:d8:88:55:f5:f4:68:
         d0:8d:8b:68:70:04:8d:ff:6b:e5:63:92:19:a3:32:6c:d2:3e:
         cd:a5:a1:23:39:38:75:4e:51:09:1c:34:56:f3:32:8c:c6:6c:
         bf:94:63:6f:21:45:26:95:8a:10:a9:32:8d:f9:9a:85:a7:a1:
         43:d1:72:b8:a2:be:bc:b7:0a:35:93:8d:a0:8f:1e:e8:ab:ea:
         eb:10:46:74:c9:a8:16:fe:43:cb:95:97:ee:a5:9e:39:93:26:
         08:6c:da:55:86:a5:5c:f8:be:64:16:b8:b4:db:b3:e4:dc:3f:
         fa:56:91:e1:2b:6e:a7:d8:72:34:f8:a9:ad:1d:8b:04:7e:cc:
         c9:d9:01:1e:9c:76:e0:d1:f5:24:dc:bc:ea:29:5b:99:e1:fd:
         95:06:c6:e0:d9:2f:6d:69:3a:b3:bb:ec:ef:64:be:18:ee:77:
         aa:43:03:de:0a:61:3f:5c:dc:ad:23:5b:0a:de:34:90:d8:4e:
         36:2d:7e:75:e8:a0:2d:1c:db:8e:c3:63:1e:61:23:72:be:15:
         fb:be:73:00:dc:2b:3c:cc:d1:fc:f7:57:c8:8f:f0:d8:35:c7:
         02:e8:9f:36:a8:04:5b:e7:d1:64:a2:91:c0:c6:bc:9f:63:e7:
         1d:bb:22:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:36 2025 by rpki-client