Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/f197e5-10af-4ace-9dc6-73bc0df8277a/1/5AjjbPF3Xcx2nrgS1ox3zm20kyM.mft
File:                     5AjjbPF3Xcx2nrgS1ox3zm20kyM.mft (raw, json)
Hash identifier:          cYPld4RkvwiTwsIB9vrb16ULhuf/TY7cvYFJtlwLCOg=
Subject key identifier:   86:6C:9B:2A:EA:D5:4F:67:D9:F0:BB:06:C1:27:9F:72:D0:7E:B5:21
Authority key identifier: E4:08:E3:6C:F1:77:5D:CC:76:9E:B8:12:D6:8C:77:CE:6D:B4:93:23
Certificate issuer:       /CN=e408e36cf1775dcc769eb812d68c77ce6db49323
Certificate serial:       019563D24FB3584215F4E67B652EB30F2466
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5AjjbPF3Xcx2nrgS1ox3zm20kyM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/f197e5-10af-4ace-9dc6-73bc0df8277a/1/5AjjbPF3Xcx2nrgS1ox3zm20kyM.mft
Manifest number:          0452
Signing time:             Wed 05 Mar 2025 01:01:21 +0000
Manifest this update:     Wed 05 Mar 2025 01:01:21 +0000
Manifest next update:     Thu 06 Mar 2025 01:01:21 +0000
Files and hashes:         1: 5AjjbPF3Xcx2nrgS1ox3zm20kyM.crl (hash: Dz2JUBIECZFZ8Wy4T5xcW8i7AVR6KT055p8mmwjCl4I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:63:d2:4f:b3:58:42:15:f4:e6:7b:65:2e:b3:0f:24:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e408e36cf1775dcc769eb812d68c77ce6db49323
        Validity
            Not Before: Mar  5 01:01:21 2025 GMT
            Not After : Mar  6 01:01:21 2025 GMT
        Subject: CN=866c9b2aead54f67d9f0bb06c1279f72d07eb521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:ca:4c:3e:71:38:ba:d9:2e:dc:e4:11:3c:44:
                    70:78:4d:f5:24:25:23:55:32:af:f1:4c:52:75:26:
                    de:15:54:79:30:c0:1a:4c:d7:f3:a2:f3:22:2e:46:
                    98:d5:d6:24:b2:3b:c6:5f:56:0c:ba:9f:37:1d:cd:
                    ed:d9:15:b5:9a:4e:6e:8d:3f:9d:29:9d:72:d7:05:
                    5d:f8:0c:d4:77:b8:9f:d1:b2:37:4c:a0:e4:96:2a:
                    e4:28:d1:70:d7:e1:c6:3e:59:be:0d:84:84:60:5c:
                    14:69:d4:6d:8c:ca:90:10:58:41:01:24:8d:71:0e:
                    a8:2f:da:78:49:07:43:e2:d6:6a:1e:38:47:52:d4:
                    a4:9c:b0:61:0b:a8:f8:85:3a:ed:b1:e4:c3:b7:52:
                    39:5c:81:c2:c4:46:b8:22:66:3f:31:cd:fc:b5:3e:
                    0c:9a:85:2b:7a:55:2a:52:1c:fb:f3:c3:28:09:c3:
                    98:8f:58:07:e2:7e:0b:4e:53:c6:fa:3c:be:6a:ed:
                    df:e3:72:1e:99:27:52:08:16:08:3a:35:c7:a0:ca:
                    a6:4c:3b:0d:b1:79:bd:c5:c0:d0:55:26:b3:b3:47:
                    5f:8a:0b:f5:6c:61:95:86:dc:9d:f9:32:da:dd:55:
                    df:c9:ce:4f:f8:07:27:75:1f:9b:85:4e:a8:77:f8:
                    a2:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:6C:9B:2A:EA:D5:4F:67:D9:F0:BB:06:C1:27:9F:72:D0:7E:B5:21
            X509v3 Authority Key Identifier:
                keyid:E4:08:E3:6C:F1:77:5D:CC:76:9E:B8:12:D6:8C:77:CE:6D:B4:93:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5AjjbPF3Xcx2nrgS1ox3zm20kyM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f197e5-10af-4ace-9dc6-73bc0df8277a/1/5AjjbPF3Xcx2nrgS1ox3zm20kyM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/f197e5-10af-4ace-9dc6-73bc0df8277a/1/5AjjbPF3Xcx2nrgS1ox3zm20kyM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:e3:85:2f:fd:91:3a:2f:17:93:2a:05:54:48:8f:8c:47:8f:
         da:f3:9e:79:6a:bc:40:2e:2f:62:8d:0d:5e:23:11:c9:8b:e5:
         f6:2e:9e:e4:1a:8c:f0:bf:dc:1e:b7:45:74:16:42:be:8e:af:
         c7:3f:fa:ea:73:2c:78:bd:b6:48:d9:12:a4:09:13:b1:ca:bf:
         2e:d7:64:7b:87:8d:49:57:92:53:61:d9:ac:ec:06:f9:c7:bc:
         c7:4e:54:e7:56:1b:8e:49:ba:27:7b:88:a0:8e:05:e1:dd:73:
         50:54:89:83:34:dc:1a:c9:ed:ff:c7:af:6e:a2:7f:09:0b:53:
         15:11:14:3f:89:c5:db:73:82:ee:64:ea:ee:c7:74:4b:e8:37:
         2c:23:59:75:66:3c:68:bf:fd:3a:22:91:b6:50:85:94:43:97:
         c5:34:ec:86:ad:e1:d8:a2:3d:5e:47:17:17:36:4d:eb:a6:24:
         21:8e:6f:76:c0:13:2b:d4:e0:b5:4c:3e:04:cd:e3:1a:e8:a8:
         2b:52:11:2f:a9:93:aa:3d:3c:21:a5:15:02:53:a0:b2:3a:dc:
         44:56:0f:4c:4c:88:21:85:6b:9c:4a:ca:81:0d:af:08:4b:74:
         9b:62:67:e5:72:c7:d8:84:5a:67:b2:d2:0f:93:6c:ed:93:30:
         10:12:9c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 10:46:46 2025 by rpki-client