Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.mft
File:                     h64K8oLdTpvBuCGUrtOxlpPYcpg.mft (raw, json)
Hash identifier:          rv720WpQwFv+gvVieLwWVu9RKCHmJ0YMovLUQehIGBE=
Subject key identifier:   DE:B5:A3:6D:75:07:A3:74:E4:6A:7F:30:33:50:34:81:D7:3E:3B:6D
Authority key identifier: 87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98
Certificate issuer:       /CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
Certificate serial:       01979C721D3AB9943F4981B4BFD96782BA30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.mft
Manifest number:          153F
Signing time:             Mon 23 Jun 2025 11:00:13 +0000
Manifest this update:     Mon 23 Jun 2025 11:00:13 +0000
Manifest next update:     Tue 24 Jun 2025 11:00:13 +0000
Files and hashes:         1: h64K8oLdTpvBuCGUrtOxlpPYcpg.crl (hash: mU9rLo350WxwdRizq8DuGEvrCVMdYPYVOwhtcf/9CIg=)
                          2: lCgmr_XGKmVFxjrMNQZfz_gK7D4.roa (hash: mLbnmSbQ6vGnKj69SLVqu+Yh8gagKvZ4GHe9rwR2Lj0=)
                          3: lbtG49eN0a1POYPwkNLEN0HddFE.roa (hash: KWEYHURJFnJiN3hEz4GFQQGAyl2j2r/yzzHo/uu7its=)
                          4: mmjcJ5mRHHvtoWGmfCfndX-I0nE.roa (hash: XJ8W6auBJZmG59tDkBVeAttPeBBOTBWVE2NfyT5YHGc=)
                          5: wjT5KqK2qsN2ZpBkVaeAc7uLZdI.roa (hash: Fan3WbewEC2StpbKQkBe0buOZw2QS1aWcf4mNkJr634=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:9c:72:1d:3a:b9:94:3f:49:81:b4:bf:d9:67:82:ba:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87ae0af282dd4e9bc1b82194aed3b19693d87298
        Validity
            Not Before: Jun 23 11:00:13 2025 GMT
            Not After : Jun 24 11:00:13 2025 GMT
        Subject: CN=deb5a36d7507a374e46a7f3033503481d73e3b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:b1:a6:3d:7b:94:53:1c:a4:a2:aa:3b:76:0e:
                    8f:38:29:8c:9e:8b:43:d6:a9:51:7a:57:60:d6:82:
                    96:32:4e:5e:09:f3:52:f0:4f:e7:85:c9:bf:ea:c3:
                    c4:6d:c3:d6:6b:30:5b:8e:8b:41:86:b0:04:d3:e5:
                    6d:d5:01:81:70:aa:db:b1:0a:ae:68:6e:74:ba:38:
                    b0:32:72:f4:00:4a:c7:27:db:32:9d:e9:70:f1:c1:
                    26:ae:c6:af:07:7b:a8:fb:8b:c8:95:c9:3b:22:8a:
                    c0:82:70:19:52:57:65:bf:02:a2:4a:3f:6a:46:d1:
                    56:0a:34:c0:b7:f9:bd:ee:f5:8e:b9:b7:42:d9:29:
                    1e:81:d7:a8:aa:ae:af:14:af:2b:4d:b2:e5:a7:e5:
                    76:4c:00:90:eb:5a:85:3c:0a:82:d8:91:e2:1d:56:
                    c2:1c:5c:8a:07:77:41:b5:ac:4d:42:b2:54:c2:ee:
                    3e:f5:cc:4c:62:db:1c:9a:8d:ca:9f:d4:2e:ea:2c:
                    40:41:9c:4b:42:e5:67:fa:b8:22:77:ff:3a:9b:da:
                    bb:a6:da:51:41:58:61:5f:74:ed:ba:89:f4:74:5d:
                    3d:0e:c4:e9:d7:c0:dc:2f:8b:cf:8e:34:63:d4:2a:
                    c0:52:7d:5a:e8:09:7a:f2:34:71:fc:3d:a6:2e:63:
                    06:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B5:A3:6D:75:07:A3:74:E4:6A:7F:30:33:50:34:81:D7:3E:3B:6D
            X509v3 Authority Key Identifier:
                keyid:87:AE:0A:F2:82:DD:4E:9B:C1:B8:21:94:AE:D3:B1:96:93:D8:72:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h64K8oLdTpvBuCGUrtOxlpPYcpg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/5cfc47-2210-4739-a964-cef01362c4a8/1/h64K8oLdTpvBuCGUrtOxlpPYcpg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:94:48:e8:10:38:59:3c:26:15:4e:61:cf:69:f5:e8:11:bb:
         4d:74:5c:ea:8d:57:d5:a7:86:3a:25:88:a1:e7:e5:e1:04:fa:
         ea:4e:13:47:22:72:02:c5:03:bc:cb:d9:a6:b4:6e:14:96:f3:
         39:e6:a8:b6:cc:24:17:56:61:e4:49:fb:d0:55:d4:89:41:ca:
         a0:c9:b6:59:d9:a7:32:3c:50:ce:ad:47:c3:41:d7:12:3b:3e:
         7e:aa:cb:0e:0f:c2:fe:89:ad:5a:d6:4b:b0:4c:25:47:bb:ad:
         34:78:e3:2f:d1:56:1c:a0:c7:4b:f5:b8:9e:f8:ca:44:be:6f:
         af:cc:c3:3d:d2:01:57:12:e2:95:78:d8:9c:52:8b:9b:c1:22:
         1e:8c:be:b4:87:83:67:00:11:65:07:a2:b3:ba:0d:ae:f5:b8:
         b7:c9:d4:5b:2d:2d:d2:37:93:e5:8b:04:cb:d9:6f:44:55:f1:
         0c:00:d0:c7:a5:43:f3:4b:7f:57:d7:2f:51:6c:39:be:46:f0:
         22:93:b4:08:07:54:b4:f4:23:af:86:be:1a:0d:94:ac:51:59:
         64:08:71:70:41:bb:7c:fd:02:4b:35:7b:bc:fd:b8:83:34:35:
         03:95:a0:6e:7b:07:4e:65:7a:31:7d:2a:81:09:05:bc:4c:c0:
         bc:21:ee:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----