Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
File:                     b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft (raw, json)
Hash identifier:          SxRJwpccKUsL6C9wwIg+MfO8+srM6ND1UAf9iYXlvZk=
Subject key identifier:   17:FA:A3:B8:7D:F7:DA:99:D3:34:0B:C4:BB:35:FC:34:B3:08:FD:0D
Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
Certificate issuer:       /CN=6ff362c0765afb7b9804b6d819470007b01f262e
Certificate serial:       0195E046889A9764F4E99826B2818D6BCE67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
Manifest number:          1172
Signing time:             Sat 29 Mar 2025 05:01:13 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:13 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:13 +0000
Files and hashes:         1: 12DD2aCYvziGW8lVsGZ2vKiLBC0.roa (hash: Ii7ExRVqK7pcmlW/+KlDzAXDHNkTNKGqWd+7FkH2wWQ=)
                          2: 5XQDvCRFfpki5_C8-OeBVN6v1H0.roa (hash: /w9tePTXy2w2SJ2JE0x7aepajV3WQjBYCJm0qDkriys=)
                          3: R5LZb08eVQsHsmzHTriBHpv71oI.roa (hash: CJ5tPNTENlP5nBlcTG8fD7T+unBLCwcZowVguYwf6HQ=)
                          4: UtyjBV0EsNwGMX6YP0NptzzeFf4.roa (hash: dA0RBDw7aGVYNwlm/IJ4BCmDJNOn72e0aCAEZ6RnVIc=)
                          5: b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl (hash: rnD0zSpg458VOhVt46rXrE7bt8i6dqZEVUj6k8qOGmI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:88:9a:97:64:f4:e9:98:26:b2:81:8d:6b:ce:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e
        Validity
            Not Before: Mar 29 05:01:13 2025 GMT
            Not After : Mar 30 05:01:13 2025 GMT
        Subject: CN=17faa3b87df7da99d3340bc4bb35fc34b308fd0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:71:1f:8d:7d:4d:f2:3c:3a:b0:e4:74:a0:9b:
                    58:4a:b6:be:52:de:51:b5:7c:cb:64:f1:9f:06:68:
                    6c:f6:94:e6:93:ea:84:6e:a0:72:42:d0:de:26:ff:
                    79:0c:5c:f6:db:ae:37:7e:ea:d7:1a:dd:4e:d2:11:
                    6e:40:5f:0c:b3:b9:98:f8:ca:97:0d:b2:86:ae:19:
                    38:74:42:df:2f:e3:7c:54:b9:68:50:36:32:38:15:
                    cc:6d:a4:4b:4a:d9:92:3e:73:90:fa:ea:87:de:18:
                    47:10:91:f3:1e:ca:20:a0:62:9c:9e:d3:25:ea:cf:
                    dc:33:9c:6e:66:a1:14:ec:e5:70:27:1f:97:45:f5:
                    b4:3d:91:99:88:cd:35:12:89:92:b6:43:5e:00:ac:
                    a4:05:b8:24:08:3d:4b:1d:37:f8:9a:32:41:57:05:
                    60:3d:dd:5b:16:b7:d6:fd:de:80:5b:6b:e9:97:7e:
                    8e:2f:5d:3a:b8:5a:65:8c:c9:76:6b:93:f7:c3:b6:
                    4b:b3:ad:05:e7:95:de:97:64:5b:a3:11:b5:12:a0:
                    33:dd:e6:68:a7:1c:02:8d:05:25:1d:3f:cd:33:1a:
                    f4:86:2d:07:b6:a7:96:b3:81:34:c1:d7:80:de:22:
                    42:6e:72:d3:d7:74:5f:21:0c:fe:3f:a1:70:5a:5d:
                    4f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:FA:A3:B8:7D:F7:DA:99:D3:34:0B:C4:BB:35:FC:34:B3:08:FD:0D
            X509v3 Authority Key Identifier:
                keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:27:bd:28:e0:0e:8b:6a:49:d2:e6:9f:0a:d1:59:f8:cf:b1:
         cc:6f:ba:54:90:da:a3:3c:ec:2e:09:15:cb:f9:a1:f4:77:42:
         a7:57:13:ae:9f:2b:8a:2b:24:fb:7d:d3:cc:3b:8a:35:ea:17:
         d5:fb:09:b5:9e:f4:de:e9:36:c7:69:55:f7:df:10:f3:bb:dd:
         05:f9:d8:86:30:db:ce:47:08:5b:1c:ba:08:66:2e:c1:38:4b:
         53:01:25:d4:d9:1f:24:e4:f8:f8:d6:1e:ee:4b:4b:cd:f4:de:
         23:1a:13:ed:2a:b3:79:d3:b9:d5:b3:8c:af:6c:da:b6:dc:f9:
         71:7a:93:45:96:a3:b5:1c:02:70:b0:e5:18:9e:93:ad:cf:a4:
         80:4c:f6:40:42:50:15:93:73:2b:72:d7:a4:6b:d0:b3:83:a6:
         f3:99:f7:a3:f0:73:c5:d9:1f:5d:20:05:47:8d:09:22:08:60:
         a7:02:4a:b6:a1:be:e6:18:a5:2d:86:6e:b3:5b:87:6e:57:b9:
         6c:71:c0:b5:27:bd:1a:9d:0d:d0:3a:ab:d2:d7:6b:58:69:63:
         dd:24:47:1e:5a:0b:ee:4e:3d:9a:a2:b5:16:03:39:8c:28:dc:
         28:7f:8c:b1:53:e0:17:f1:52:be:75:4f:2b:6d:c9:35:4e:6d:
         ca:21:f3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----