Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
File:                     J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft (raw, json)
Hash identifier:          CIJCSKveocCv5X3lI0tVLk8c/c+jbjzQQYe05QvDyhw=
Subject key identifier:   37:2F:0F:89:8A:27:60:0E:95:8C:38:6E:31:C0:BD:97:47:AE:71:83
Authority key identifier: 27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F
Certificate issuer:       /CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
Certificate serial:       0195E159D5DF7C044B73AA5245DFE2E582C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft
Manifest number:          14C4
Signing time:             Sat 29 Mar 2025 10:01:55 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:55 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:55 +0000
Files and hashes:         1: 4FXB0W838e2KDL7-L_x6UPsRNAQ.roa (hash: LK8SbOkeipWhuTJTuor/1UupMV/BQue0Yrv+JoGi1Bc=)
                          2: J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl (hash: uhrv5oQiBIUDOhCVG4pWjbYnYb4PAWF/9PMDpG3kx2s=)
                          3: VWEs-xVV5ND0GJkPhbytzQmCX2s.roa (hash: Lvidk3VL8SGZhZHfYCyzYvXPKQ2gZ6B2D2mdtv2GK9E=)
                          4: l5YxBP66J268QPpOfOKh6pf_dA0.roa (hash: VfFGld2mgne36x9HBpf5GPD2Bw0k6fbkaTy5yNO7fDc=)
                          5: vTTN7Jd0zPqa91uLSy540B9C-ks.roa (hash: OZfHJYsEdowOMA253v79GTAv8RCtV3bvgVGY0+xVsr8=)
                          6: z6ZchbUwtdpz1UJIozdf3Vyzbas.roa (hash: 9jBz1RUdaL6PLVqIdtXh6rvEfUHptMVuoQ/ptnKIDQU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:d5:df:7c:04:4b:73:aa:52:45:df:e2:e5:82:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=279669579b3ce61ee8ee7d6af7e314b0f726361f
        Validity
            Not Before: Mar 29 10:01:55 2025 GMT
            Not After : Mar 30 10:01:55 2025 GMT
        Subject: CN=372f0f898a27600e958c386e31c0bd9747ae7183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:45:6d:64:0e:77:4c:e3:35:67:cd:24:a1:d8:
                    0e:c9:32:ad:58:11:14:c3:5d:12:56:a9:68:bc:2f:
                    ee:78:cc:dd:74:cb:8e:f6:82:07:a9:c8:83:39:54:
                    32:7a:45:44:d6:57:fa:8f:e2:c0:3c:1a:65:8a:1c:
                    1e:46:cb:b1:7e:2d:b7:7f:43:9a:5f:44:fc:c0:78:
                    a7:dd:5a:ed:2c:16:62:be:0d:5a:4e:f5:c6:ba:94:
                    4d:c7:c6:4b:fe:a2:91:34:13:a6:7a:6d:d8:9e:18:
                    09:19:03:ff:ca:ff:35:ce:40:8a:95:19:30:b2:ad:
                    2e:19:ac:da:35:6f:c7:02:32:94:2f:13:4f:b9:b4:
                    e6:4c:21:cc:18:ed:ed:dd:9d:d7:e9:82:ea:6c:b2:
                    bd:ff:b2:29:9f:40:c4:fe:91:e9:3b:02:90:03:61:
                    31:4a:55:11:cf:35:1c:97:77:be:d2:6a:d2:58:88:
                    51:30:86:d0:cf:a6:96:69:63:be:c6:5a:b4:1d:23:
                    dc:c3:43:ab:ff:c0:dd:72:8e:89:39:c1:08:3b:cf:
                    a7:32:d9:25:ab:9d:10:f7:b7:19:25:a7:c2:63:da:
                    0f:30:05:95:3c:f4:a2:43:68:34:66:84:8e:57:5f:
                    58:67:c6:1f:2a:0d:61:1e:84:41:ce:af:61:a3:c4:
                    c0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2F:0F:89:8A:27:60:0E:95:8C:38:6E:31:C0:BD:97:47:AE:71:83
            X509v3 Authority Key Identifier:
                keyid:27:96:69:57:9B:3C:E6:1E:E8:EE:7D:6A:F7:E3:14:B0:F7:26:36:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5ZpV5s85h7o7n1q9-MUsPcmNh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/118413-b7aa-459c-99fa-4de1b520a594/1/J5ZpV5s85h7o7n1q9-MUsPcmNh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:26:d0:ea:1b:42:da:4b:96:0f:7e:69:bd:18:7a:01:4b:14:
         ef:f9:c5:8d:4c:b4:d7:3a:f6:78:3d:36:3c:51:cc:d5:8a:7f:
         bb:c1:23:87:1c:41:26:1a:33:36:f4:a4:f0:4a:93:cc:42:67:
         a7:64:b4:02:24:77:fb:76:40:d0:57:82:26:fc:35:07:d9:9a:
         0b:38:4d:27:0d:a9:2c:9f:ac:8f:7d:f2:d2:af:b2:da:0b:ef:
         db:8d:f4:36:0c:60:5e:00:50:66:53:ae:32:12:6f:c3:bd:93:
         a6:b3:50:2a:ec:4a:84:dd:48:82:36:a6:03:e0:a8:b9:1e:ab:
         02:9c:f7:5d:4a:81:19:d0:d6:12:27:62:fe:a2:cf:ab:ad:12:
         11:6b:6a:1b:65:93:6c:a2:f5:a8:79:3e:81:6b:de:5e:65:8c:
         51:7c:e7:ff:b4:e0:4f:73:42:69:77:77:7e:c4:80:6b:d4:c4:
         ae:88:26:a1:38:34:02:5e:09:87:08:b3:2a:d5:44:8e:73:aa:
         df:bf:e0:08:19:cb:5d:d3:43:88:be:c8:50:da:fd:ee:da:7d:
         a2:a5:cd:47:10:5a:08:4b:ba:44:0e:81:6b:52:bf:a5:2f:47:
         4a:96:3b:c9:b0:9b:bb:39:b8:19:f6:b3:08:c0:ba:bf:3a:3d:
         45:b3:67:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----