Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
File:                     Da7a5Z2cmvUe9UivsMlkOM73IRw.mft (raw, json)
Hash identifier:          8MDFp0YUnkTs/JuKetVRLDyElOgMt+iAKeWmv1rVM/A=
Subject key identifier:   E0:02:74:60:A2:C6:2E:D9:D1:84:53:39:73:C9:E0:07:CE:4B:6A:34
Authority key identifier: 0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C
Certificate issuer:       /CN=0daedae59d9c9af51ef548afb0c96438cef7211c
Certificate serial:       0194BC729D85BBDD413D3170893FB068562B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft
Manifest number:          1427
Signing time:             Fri 31 Jan 2025 13:00:15 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:15 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:15 +0000
Files and hashes:         1: Da7a5Z2cmvUe9UivsMlkOM73IRw.crl (hash: WPd2ke65EcgAWRIa16SOHBm2C3p6ByegzrzhO8Gdm7Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:9d:85:bb:dd:41:3d:31:70:89:3f:b0:68:56:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0daedae59d9c9af51ef548afb0c96438cef7211c
        Validity
            Not Before: Jan 31 13:00:15 2025 GMT
            Not After : Feb  1 13:00:15 2025 GMT
        Subject: CN=e0027460a2c62ed9d184533973c9e007ce4b6a34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a8:ab:cb:17:e0:de:62:5c:7c:4d:f4:5c:0a:
                    1a:af:69:99:99:40:e3:2f:eb:89:86:13:fc:87:cf:
                    ec:cc:8c:61:8b:0f:90:df:8b:88:fe:4a:36:1b:03:
                    0a:e9:a3:a1:cd:53:11:b2:1e:b5:33:fb:d8:9a:e9:
                    25:82:5f:1e:5f:d8:8a:6c:5a:57:38:ac:7c:0d:9b:
                    27:ed:34:a9:47:23:b2:7d:36:b7:f0:6c:91:fe:b9:
                    98:1e:3c:de:45:7c:4e:67:85:8b:1c:a1:09:a0:ea:
                    a9:16:70:38:a7:72:31:49:00:8b:e1:d1:f6:5d:fc:
                    4e:78:8f:75:59:9a:ab:c8:2c:85:6d:49:c9:a5:e4:
                    21:56:98:3b:f2:f9:7f:a6:8c:e1:0d:df:2a:5d:3f:
                    88:9e:f9:f4:9b:09:75:5d:d8:10:33:f9:3c:b1:08:
                    3a:45:03:0a:05:1f:bc:4a:b8:b6:e8:5f:7b:b9:c2:
                    79:1e:18:c2:a4:c4:cf:72:ae:ab:ce:67:3f:48:ff:
                    f3:10:49:2c:da:11:b9:6f:e2:54:59:25:19:d2:3e:
                    02:93:48:14:89:4f:32:91:f4:79:bc:64:23:84:99:
                    18:0d:43:a6:79:f4:03:41:3a:0c:ef:7a:0b:6d:49:
                    88:49:1f:12:76:0b:12:bf:0d:9f:24:04:18:75:d5:
                    39:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:02:74:60:A2:C6:2E:D9:D1:84:53:39:73:C9:E0:07:CE:4B:6A:34
            X509v3 Authority Key Identifier:
                keyid:0D:AE:DA:E5:9D:9C:9A:F5:1E:F5:48:AF:B0:C9:64:38:CE:F7:21:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Da7a5Z2cmvUe9UivsMlkOM73IRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/d29d3f-1696-4ed4-96d2-e7eb817ede30/1/Da7a5Z2cmvUe9UivsMlkOM73IRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:6d:53:26:c4:23:f0:9b:ed:79:7e:f0:cd:32:0d:ca:51:6f:
         53:40:0b:7a:f9:a7:7c:b8:bd:a8:84:3c:15:20:bc:41:61:bf:
         71:c7:0f:ae:78:c5:14:0d:d4:65:30:d8:45:c3:f8:63:13:00:
         a5:23:53:25:02:e7:e5:6c:d5:57:04:fd:d4:0c:37:0b:ab:52:
         5f:69:1f:2a:fa:f0:ea:85:b0:db:f8:85:ad:6b:37:8c:a7:04:
         51:cf:bd:4d:d0:6f:11:e9:45:30:e2:f9:39:ef:bc:42:39:1c:
         e8:e4:18:35:47:cb:de:6a:94:da:2c:fa:67:02:f5:13:5c:b7:
         dc:30:47:17:a6:a4:ac:0f:48:31:ea:14:74:9f:a7:f5:ef:56:
         39:78:04:81:19:84:66:53:49:7c:6f:75:6b:28:92:52:48:3a:
         0c:0f:b5:4d:89:1f:18:50:9e:3d:9a:50:30:3b:a0:05:b2:12:
         84:59:5a:0e:04:75:cf:c8:af:e4:14:c8:02:d2:63:94:2a:c9:
         3a:fd:66:cc:38:62:95:5c:ed:09:72:6a:43:4c:e8:74:73:97:
         57:ce:da:a9:9f:d5:26:4a:77:7d:10:04:f6:7f:b6:9d:1d:5f:
         36:9f:03:b7:36:6c:6c:d6:60:33:b4:bd:81:d9:1f:70:31:30:
         50:b4:5f:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8cp2Fu91BPTFwiT+waFYrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkYWVkYWU1OWQ5YzlhZjUxZWY1NDhhZmIwYzk2NDM4Y2Vm
NzIxMWMwHhcNMjUwMTMxMTMwMDE1WhcNMjUwMjAxMTMwMDE1WjAzMTEwLwYDVQQD
EyhlMDAyNzQ2MGEyYzYyZWQ5ZDE4NDUzMzk3M2M5ZTAwN2NlNGI2YTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqiryxfg3mJcfE30XAoar2mZmUDj
L+uJhhP8h8/szIxhiw+Q34uI/ko2GwMK6aOhzVMRsh61M/vYmuklgl8eX9iKbFpX
OKx8DZsn7TSpRyOyfTa38GyR/rmYHjzeRXxOZ4WLHKEJoOqpFnA4p3IxSQCL4dH2
XfxOeI91WZqryCyFbUnJpeQhVpg78vl/pozhDd8qXT+Invn0mwl1XdgQM/k8sQg6
RQMKBR+8Sri26F97ucJ5HhjCpMTPcq6rzmc/SP/zEEks2hG5b+JUWSUZ0j4Ck0gU
iU8ykfR5vGQjhJkYDUOmefQDQToM73oLbUmISR8SdgsSvw2fJAQYddU5bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOACdGCixi7Z0YRTOXPJ4AfOS2o0MB8GA1UdIwQY
MBaAFA2u2uWdnJr1HvVIr7DJZDjO9yEcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGE3YTVaMmNtdlVlOVVpdnNNbGtPTTczSVJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9kMjlkM2YtMTY5Ni00ZWQ0LTk2ZDIt
ZTdlYjgxN2VkZTMwLzEvRGE3YTVaMmNtdlVlOVVpdnNNbGtPTTczSVJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS9kMjlkM2YtMTY5Ni00ZWQ0LTk2ZDItZTdlYjgxN2VkZTMw
LzEvRGE3YTVaMmNtdlVlOVVpdnNNbGtPTTczSVJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeW1TJsQj
8JvteX7wzTINylFvU0ALevmnfLi9qIQ8FSC8QWG/cccPrnjFFA3UZTDYRcP4YxMA
pSNTJQLn5WzVVwT91Aw3C6tSX2kfKvrw6oWw2/iFrWs3jKcEUc+9TdBvEelFMOL5
Oe+8Qjkc6OQYNUfL3mqU2iz6ZwL1E1y33DBHF6akrA9IMeoUdJ+n9e9WOXgEgRmE
ZlNJfG91ayiSUkg6DA+1TYkfGFCePZpQMDugBbIShFlaDgR1z8iv5BTIAtJjlCrJ
Ov1mzDhilVztCXJqQ0zodHOXV87aqZ/VJkp3fRAE9n+2nR1fNp8DtzZsbNZgM7S9
gdkfcDEwULRfPw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:31 2025 by rpki-client