Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
File:                     7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft (raw, json)
Hash identifier:          pd4vBXlD/NlR0DU1b+O3rCp7QPyE85bhuG8uAWSgmKE=
Subject key identifier:   61:F8:E2:58:95:0A:AE:96:84:F0:68:C3:01:F5:BC:3A:43:C4:6F:D4
Authority key identifier: ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11
Certificate issuer:       /CN=ed89298644ed486ded509d946a6d6d839589ce11
Certificate serial:       0195E07D1A378203E818053B76682EC8F81E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft
Manifest number:          0445
Signing time:             Sat 29 Mar 2025 06:00:49 +0000
Manifest this update:     Sat 29 Mar 2025 06:00:49 +0000
Manifest next update:     Sun 30 Mar 2025 06:00:49 +0000
Files and hashes:         1: 7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl (hash: eDfgkTI1v7/bwM8dO+3GIaez/U9E0rNII+fmLQQFwUs=)
                          2: t01s41tuzCg0n-ebuqBLNh-kZ8U.roa (hash: gu7VW+b5U5NLSfKbHP6Ioqtp4/dVeiqqPEeW+qWaaC0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:1a:37:82:03:e8:18:05:3b:76:68:2e:c8:f8:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed89298644ed486ded509d946a6d6d839589ce11
        Validity
            Not Before: Mar 29 06:00:49 2025 GMT
            Not After : Mar 30 06:00:49 2025 GMT
        Subject: CN=61f8e258950aae9684f068c301f5bc3a43c46fd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ca:f8:bc:ac:27:7a:b8:ce:e8:11:cf:de:2d:
                    0c:1f:9d:e6:19:4f:fc:83:76:3d:72:5e:e1:a2:0c:
                    49:84:53:9b:d1:b6:07:be:92:12:5c:d2:23:e0:44:
                    c8:7e:c6:4e:3e:f9:58:43:ae:cd:31:a3:11:54:fe:
                    94:8f:22:00:9c:74:84:58:ad:51:56:e2:9b:3c:9e:
                    72:64:da:ba:94:f1:17:dd:43:78:c3:ed:d4:88:1c:
                    01:1f:7e:0a:b3:e9:f3:1f:29:6a:8e:ef:13:86:50:
                    ae:7b:83:94:bd:1b:83:62:bc:25:d1:99:f1:c5:e6:
                    57:8f:82:12:c3:60:d1:d5:32:8b:66:f7:cf:41:10:
                    5a:69:4c:93:38:e1:11:ed:55:77:e6:32:17:6f:bb:
                    00:50:02:82:a9:1b:73:17:25:8b:7c:ad:97:98:23:
                    fa:7e:70:37:e9:97:af:f7:89:46:89:ce:42:91:a5:
                    f5:bd:75:a0:43:54:0e:23:e9:3c:ac:70:9a:84:b9:
                    4e:6f:f9:47:bc:79:a1:23:ab:46:3b:7e:1f:6e:d6:
                    fb:32:b8:bc:70:01:7f:87:11:47:1d:2d:96:c3:1e:
                    2c:d5:fa:a5:8e:1f:43:2d:6b:12:3f:33:d9:34:82:
                    b4:02:af:71:20:04:9f:fe:9f:18:df:b8:80:91:8b:
                    48:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:F8:E2:58:95:0A:AE:96:84:F0:68:C3:01:F5:BC:3A:43:C4:6F:D4
            X509v3 Authority Key Identifier:
                keyid:ED:89:29:86:44:ED:48:6D:ED:50:9D:94:6A:6D:6D:83:95:89:CE:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7YkphkTtSG3tUJ2Uam1tg5WJzhE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/141887-5507-45a5-8b0a-57a1f0b32f01/1/7YkphkTtSG3tUJ2Uam1tg5WJzhE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:e0:2f:a7:12:55:4d:cd:a4:25:10:b9:94:d9:9d:38:f8:6a:
         7a:b7:1e:25:62:4b:48:f0:b7:ee:cf:2a:c2:5f:47:7d:e8:f9:
         ad:c7:40:81:5d:4b:73:b6:69:67:24:6c:d0:e2:51:73:b1:9e:
         c8:c1:5c:46:93:c4:8f:09:73:54:a6:33:11:4b:d4:da:04:7f:
         77:d9:e1:c1:2f:73:d0:07:c1:35:97:d3:4b:3e:41:e5:49:09:
         f5:f1:8d:9a:46:cc:a7:6c:3f:9f:d0:2d:7b:c9:43:2e:b1:83:
         19:c6:df:db:9e:50:9e:9d:1c:db:0c:84:2b:17:bd:b5:e8:25:
         56:62:1c:66:58:58:d8:16:d7:7d:9c:27:c0:81:e6:93:fb:94:
         ce:c6:97:57:2d:91:f9:1b:da:64:20:2a:4c:dd:13:07:5b:25:
         94:69:7c:50:89:8e:89:b1:e1:01:a6:c8:0b:2c:cf:44:51:ba:
         b6:72:f9:2e:57:b6:76:d6:be:70:f5:8c:96:4e:e3:9f:a1:62:
         96:13:26:83:e9:d8:77:15:5a:d4:84:95:22:ac:41:37:35:6b:
         a4:83:60:33:b9:13:18:31:d2:96:69:7f:d3:5c:5b:68:88:fb:
         66:57:21:20:d7:e9:88:64:97:8b:3a:73:e0:92:81:a0:9e:cb:
         bb:fc:23:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXgfRo3ggPoGAU7dmguyPgeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkODkyOTg2NDRlZDQ4NmRlZDUwOWQ5NDZhNmQ2ZDgzOTU4
OWNlMTEwHhcNMjUwMzI5MDYwMDQ5WhcNMjUwMzMwMDYwMDQ5WjAzMTEwLwYDVQQD
Eyg2MWY4ZTI1ODk1MGFhZTk2ODRmMDY4YzMwMWY1YmMzYTQzYzQ2ZmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6sr4vKwnerjO6BHP3i0MH53mGU/8
g3Y9cl7hogxJhFOb0bYHvpISXNIj4ETIfsZOPvlYQ67NMaMRVP6UjyIAnHSEWK1R
VuKbPJ5yZNq6lPEX3UN4w+3UiBwBH34Ks+nzHylqju8ThlCue4OUvRuDYrwl0Znx
xeZXj4ISw2DR1TKLZvfPQRBaaUyTOOER7VV35jIXb7sAUAKCqRtzFyWLfK2XmCP6
fnA36Zev94lGic5CkaX1vXWgQ1QOI+k8rHCahLlOb/lHvHmhI6tGO34fbtb7Mri8
cAF/hxFHHS2Wwx4s1fqljh9DLWsSPzPZNIK0Aq9xIASf/p8Y37iAkYtIpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGH44liVCq6WhPBowwH1vDpDxG/UMB8GA1UdIwQY
MBaAFO2JKYZE7Uht7VCdlGptbYOVic4RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8xNDE4ODctNTUwNy00NWE1LThiMGEt
NTdhMWYwYjMyZjAxLzEvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8xNDE4ODctNTUwNy00NWE1LThiMGEtNTdhMWYwYjMyZjAx
LzEvN1lrcGhrVHRTRzN0VUoyVWFtMXRnNVdKemhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFeAvpxJV
Tc2kJRC5lNmdOPhqerceJWJLSPC37s8qwl9Hfej5rcdAgV1Lc7ZpZyRs0OJRc7Ge
yMFcRpPEjwlzVKYzEUvU2gR/d9nhwS9z0AfBNZfTSz5B5UkJ9fGNmkbMp2w/n9At
e8lDLrGDGcbf255Qnp0c2wyEKxe9teglVmIcZlhY2BbXfZwnwIHmk/uUzsaXVy2R
+RvaZCAqTN0TB1sllGl8UImOibHhAabICyzPRFG6tnL5Lle2dta+cPWMlk7jn6Fi
lhMmg+nYdxVa1ISVIqxBNzVrpINgM7kTGDHSlml/01xbaIj7ZlchINfpiGSXizpz
4JKBoJ7Lu/wj0Q==
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:25:09 2025 by rpki-client