Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
File:                     D-v7_W-TfFrjnj446KuDhBB0IaY.mft (raw, json)
Hash identifier:          pzAi19tw7/VRHpFccC2LfymJH6Ubb/tybTgHnaWgAhg=
Subject key identifier:   AD:0C:09:EB:E4:FB:A9:A0:57:CA:79:94:BB:5C:4E:EC:79:1D:FC:1C
Authority key identifier: 0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6
Certificate issuer:       /CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
Certificate serial:       0195E1220B259600BBC924568CB1480A13B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft
Manifest number:          0BE5
Signing time:             Sat 29 Mar 2025 09:00:59 +0000
Manifest this update:     Sat 29 Mar 2025 09:00:59 +0000
Manifest next update:     Sun 30 Mar 2025 09:00:59 +0000
Files and hashes:         1: AIvDmhuj2ZpytkvOeVyoUY_STpw.roa (hash: 3QHwujw/c7ulg8cAPCbEFjBitp9OHT3bIbRqwJYJDPk=)
                          2: BOD3dcxTc2yY6D5t1Z9HjEwK_rU.roa (hash: GaifOabvqdT7+yzCu9A/2BB5BkajLIn0jWyTPBEgmVc=)
                          3: D-v7_W-TfFrjnj446KuDhBB0IaY.crl (hash: EQbymrqHpDkUA8Gh6a5pcfdgI9sOKHAJdVfDteD8r4Y=)
                          4: VJDhHlJdPvak4BafWvKSjqu0x5Y.roa (hash: nlNMfRoUX8wlINCzPXW0U0t4hUPC9fTC82MR6ooVarI=)
                          5: jVxRo4KWMWUiJQcMYf96wc6tqFU.roa (hash: H7oIYyV397w75YgpPFdKofIpFAAGxKtA3oDU6iqDlKE=)
                          6: ruCkdhz5ECjyyt8p008Qxrl9GyM.roa (hash: m+aEkhnT25QMYrGEMw/FR2nS1uG1JjoxB5Mr9hwWO8s=)
                          7: xzhHaw1u4vyWJOy8wzv_GA0Hy8w.roa (hash: CWKK/bGUgV9l6R4l2jDK6+bx3tv6jjiAzLSyy1GKphs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:0b:25:96:00:bb:c9:24:56:8c:b1:48:0a:13:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0febfbfd6f937c5ae39e3e38e8ab8384107421a6
        Validity
            Not Before: Mar 29 09:00:59 2025 GMT
            Not After : Mar 30 09:00:59 2025 GMT
        Subject: CN=ad0c09ebe4fba9a057ca7994bb5c4eec791dfc1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:63:1f:3a:fe:e0:a0:0f:90:da:65:37:55:73:
                    a5:04:39:ef:e2:12:95:e6:fa:3d:04:48:4c:f0:9b:
                    bd:7d:b5:6f:91:95:0d:af:16:b1:5d:ab:cc:34:fc:
                    49:e3:82:0e:ca:a7:e3:61:77:4c:56:70:24:8e:00:
                    89:4f:62:39:f8:3c:cb:ee:ce:1a:6b:7a:d9:85:4f:
                    10:bb:0c:1d:b4:55:69:ff:68:6d:96:76:e6:3e:33:
                    ae:3c:5e:f4:60:c8:47:3c:aa:c9:ba:17:15:0e:19:
                    80:d9:24:eb:82:20:1e:60:6a:04:61:97:c9:a6:48:
                    8e:ea:3a:7b:c4:97:58:69:75:3f:6f:cb:c0:9a:21:
                    90:05:b9:9b:7d:d2:38:2b:60:f4:2c:de:14:d0:7a:
                    66:92:42:18:aa:dd:c0:6e:fa:f3:20:04:22:8c:61:
                    67:c9:5f:7a:4d:2a:49:78:c9:4d:d8:88:4d:35:f8:
                    af:ef:fe:3c:23:92:fe:94:29:66:26:ba:46:aa:5d:
                    9a:2b:1f:f2:f5:fe:d0:b8:63:15:03:1a:08:78:fa:
                    27:82:1b:aa:73:fd:9c:4f:e4:93:a7:06:ff:40:41:
                    a2:02:51:da:3e:1e:22:65:5f:9c:44:ba:f0:b3:11:
                    da:87:f7:f5:a4:39:51:dc:c2:95:16:27:bc:6c:b1:
                    72:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0C:09:EB:E4:FB:A9:A0:57:CA:79:94:BB:5C:4E:EC:79:1D:FC:1C
            X509v3 Authority Key Identifier:
                keyid:0F:EB:FB:FD:6F:93:7C:5A:E3:9E:3E:38:E8:AB:83:84:10:74:21:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D-v7_W-TfFrjnj446KuDhBB0IaY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67d834-2612-4739-9f4b-7d70374d76d2/1/D-v7_W-TfFrjnj446KuDhBB0IaY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:51:ce:e1:cb:f7:4c:18:d0:1b:fb:e3:96:9c:c7:df:83:65:
         4c:78:22:6c:da:cd:87:75:71:99:2b:c1:1a:69:65:02:b5:48:
         5b:38:00:f9:63:c9:35:57:6b:b3:3b:10:8b:26:8a:59:99:ae:
         21:ce:f7:eb:22:ce:df:35:2c:d1:1b:53:92:52:47:24:11:46:
         5c:7e:f8:66:f2:be:52:0a:5e:3b:c6:8b:59:74:05:eb:98:60:
         e3:41:bc:56:24:4e:aa:f3:92:9a:f4:2d:85:5a:4c:f0:57:93:
         e1:c1:a8:5f:b6:0e:11:3a:47:1b:74:cd:36:05:66:44:41:1c:
         af:67:68:fa:af:73:3c:14:27:60:d4:c9:21:ee:41:96:12:18:
         c5:04:3f:a8:e5:cb:49:99:f2:ed:9d:a7:e4:d8:ca:56:95:46:
         13:87:5a:32:bc:57:98:38:8e:d5:97:e5:e5:40:35:ab:b2:d7:
         eb:56:bd:a0:93:e4:fd:e1:4f:a5:32:6e:12:01:0e:fa:88:fe:
         8c:21:da:f8:40:0d:75:84:a3:38:a9:6e:79:e7:eb:b6:78:13:
         5b:36:2d:bf:44:45:48:f6:e3:87:2f:7e:77:e2:c3:49:bb:8f:
         8b:38:a7:f5:1f:85:48:2f:82:ce:67:d0:4c:57:1d:c2:6b:cd:
         62:f0:51:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:32:39 2025 by rpki-client