Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
File:                     dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft (raw, json)
Hash identifier:          DNk4kkd8z1w1F00u1B52qYLB9I/aYkgxVFCOXiwf2jA=
Subject key identifier:   FD:98:1F:FB:C9:85:DD:E0:33:68:B5:11:34:EC:B5:E6:0C:A0:E0:CB
Authority key identifier: 74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9
Certificate issuer:       /CN=74d7da63929999603395877448ce50ac6e0213a9
Certificate serial:       0195E159ED77E519888223D3F91FC1C6D8EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft
Manifest number:          0D29
Signing time:             Sat 29 Mar 2025 10:02:01 +0000
Manifest this update:     Sat 29 Mar 2025 10:02:01 +0000
Manifest next update:     Sun 30 Mar 2025 10:02:01 +0000
Files and hashes:         1: dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl (hash: MYf35vcP3eBwWnlWEkAaldRke24ZyJezKxDAlBVhIbI=)
                          2: fU3MlRUECyf8Mob8gpdjGa0WFt0.roa (hash: 1bRjiSyIpRcT6gpZZI2DT+oOrLLRlf7RVwqkDF08rbw=)
                          3: fzU99qCGkV_CIT5aPe-FRXxnYbQ.roa (hash: vzw9SWyMsFCc6IE8QjYq1it7590sCq4Ux6IdTNIF19M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:ed:77:e5:19:88:82:23:d3:f9:1f:c1:c6:d8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74d7da63929999603395877448ce50ac6e0213a9
        Validity
            Not Before: Mar 29 10:02:01 2025 GMT
            Not After : Mar 30 10:02:01 2025 GMT
        Subject: CN=fd981ffbc985dde03368b51134ecb5e60ca0e0cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:02:b8:55:a0:bb:be:0b:32:00:34:40:d9:f9:
                    24:74:d8:d3:51:9a:75:74:57:5c:e9:57:68:97:5d:
                    5a:3e:c4:8b:b1:6c:0d:34:cd:3f:03:c1:3c:78:08:
                    97:5a:98:ef:ee:88:b3:fd:d0:e1:1d:cd:5f:71:fc:
                    4f:bc:47:3c:38:24:13:37:7f:d8:e2:a8:d4:84:f8:
                    a0:29:ba:c3:45:ec:1c:cc:fb:d7:ed:24:7b:81:a5:
                    52:79:4b:79:24:a2:fa:4a:65:d5:93:e3:89:c0:d1:
                    b9:75:bb:f9:ab:0f:80:1b:8f:43:02:84:b2:d6:c9:
                    c4:56:69:d7:fd:96:9b:d6:9c:d6:80:6e:30:e2:24:
                    12:43:38:8c:cf:e6:5f:f2:43:4f:ab:9f:06:aa:c3:
                    d2:0a:34:48:42:c3:3d:5c:c5:19:71:f9:d0:30:60:
                    03:44:ea:14:ac:51:01:5d:a6:cf:55:25:ea:0e:45:
                    bd:7f:7a:29:c0:17:74:91:f7:b6:c4:02:05:f7:0b:
                    23:4c:8a:0b:c8:a2:4c:d1:29:23:8e:55:a1:ee:de:
                    b0:d3:c5:d6:b1:4d:64:ef:9f:a7:31:d4:c7:b4:4a:
                    ce:e9:36:21:75:c7:12:15:55:80:d4:f0:1a:ce:5a:
                    4d:92:2c:22:d8:2c:bb:b5:2e:ca:97:1a:78:49:c7:
                    47:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:98:1F:FB:C9:85:DD:E0:33:68:B5:11:34:EC:B5:E6:0C:A0:E0:CB
            X509v3 Authority Key Identifier:
                keyid:74:D7:DA:63:92:99:99:60:33:95:87:74:48:CE:50:AC:6E:02:13:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dNfaY5KZmWAzlYd0SM5QrG4CE6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/0eb852-af34-4cb9-872e-4b5d5d5f8699/1/dNfaY5KZmWAzlYd0SM5QrG4CE6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:ed:fd:36:0c:97:97:77:b7:be:c9:9a:6c:81:95:f1:66:eb:
         82:dd:5b:0e:0b:13:e2:a5:dd:0e:4a:6c:52:51:45:74:3e:22:
         72:bd:f2:fe:9b:2f:54:ba:c3:0d:28:90:45:d8:2c:60:02:4d:
         1e:08:da:6d:85:a4:ff:5c:6b:ab:93:f6:c9:12:01:ef:e1:cc:
         d7:f0:36:34:7f:a5:11:1a:37:50:47:25:8c:e7:9b:3a:32:27:
         93:6b:c6:b3:e4:2c:15:18:81:f6:52:b9:c4:a9:68:a1:2f:49:
         1d:ee:5b:e5:2d:15:73:53:62:76:72:a5:0a:8c:5d:e0:26:94:
         a9:e2:b4:7a:4d:2c:b2:27:83:5b:f8:03:a4:77:dc:be:bd:d7:
         90:5d:ee:fe:56:77:bc:85:e1:7b:09:f3:fc:e9:07:87:c6:e8:
         65:1c:40:8d:5b:d1:a9:5e:81:4f:34:b5:c4:cd:52:1a:d2:df:
         29:77:1f:6a:2f:e5:43:98:35:90:b4:3e:cc:f1:d0:7d:6f:16:
         71:04:94:c0:f9:c3:98:53:63:83:07:e9:a5:61:ff:6c:b4:2a:
         3f:73:53:da:35:85:76:2c:3c:d5:e9:aa:55:64:5c:4c:10:2c:
         b3:1d:f0:11:63:ed:52:fe:79:ab:31:10:91:69:84:0d:77:02:
         07:69:b3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----