Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
File:                     59nPsHjtpYFvyAnpjCXLcZY-dbc.mft (raw, json)
Hash identifier:          ISJZBrGCFhcYUL4tGe9r3cIJYxRg9iznZa4/4QrOCKg=
Subject key identifier:   6C:61:6F:8D:74:1A:51:8D:DB:85:A7:6D:54:46:AA:9F:7F:B6:17:0A
Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
Certificate issuer:       /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Certificate serial:       0195DFD97A5BBE23B067DD73555C12234713
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft
Manifest number:          0FDF
Signing time:             Sat 29 Mar 2025 03:02:06 +0000
Manifest this update:     Sat 29 Mar 2025 03:02:06 +0000
Manifest next update:     Sun 30 Mar 2025 03:02:06 +0000
Files and hashes:         1: 59nPsHjtpYFvyAnpjCXLcZY-dbc.crl (hash: pPtmF2jIMeLN6dIzcYfEoHoc9SoD6ypg8Rsv5Qe4UT8=)
                          2: doaBFCoAi9PMEGjDVkL2tXpIeqk.roa (hash: Z98ogMYuCRCB/EUQ20sK/eyL2P/vgOy7W+oSu1U5VEE=)
                          3: uRo2bMOeIiH8StyfjDXOPHZmCRc.roa (hash: /c4Qcmm44bZ40YwEJJpcK2loOF7YWT9F41wjJC1v0Vc=)
                          4: xOWUW0bOewUorU3PuzR6cnv41Ec.roa (hash: z/ye3u1sqtlYcBf/GAFPNRmAn23AockZVnADhLIPFmU=)
                          5: ygDMNPZB6ioJh9v1SV5ZJ0aINDg.roa (hash: 0bPn18ewCwFlle0D4D1zaFp/YvFhdd8pfg8oWQqwtM4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d9:7a:5b:be:23:b0:67:dd:73:55:5c:12:23:47:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
        Validity
            Not Before: Mar 29 03:02:06 2025 GMT
            Not After : Mar 30 03:02:06 2025 GMT
        Subject: CN=6c616f8d741a518ddb85a76d5446aa9f7fb6170a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e8:e0:5b:e7:2b:25:a7:58:f3:d8:3b:c0:d8:
                    d1:bb:4a:96:8c:82:4d:c0:f0:d2:6f:a1:5b:29:dd:
                    cf:23:51:ce:a7:6e:e9:7e:63:33:4c:a2:c5:c3:54:
                    76:57:76:b6:a5:7a:56:54:aa:71:62:9d:00:d7:31:
                    11:a6:48:be:90:0f:55:8a:ac:1d:dd:8c:e1:b1:af:
                    09:03:4b:ae:94:bf:b2:a1:1c:28:9d:21:16:d4:e3:
                    9c:d7:dd:57:e3:4c:f9:b6:9f:82:c9:67:f8:e7:7b:
                    c3:90:65:77:05:99:99:96:d1:9b:e4:b8:77:bb:42:
                    db:ee:9b:b9:e3:e3:4a:ea:75:2b:0e:2b:d3:f4:4d:
                    9b:4b:72:15:6d:24:72:be:1e:f3:29:69:1c:5f:0a:
                    b1:58:24:cf:c3:54:54:d8:51:2b:86:b3:8f:f6:bf:
                    b5:5b:09:18:e7:81:1e:b9:13:b0:17:9d:2b:3b:eb:
                    88:8e:6c:bd:0a:fd:80:72:3a:9b:76:f3:a5:e1:d5:
                    77:3a:f2:ce:96:6b:d8:eb:a0:e9:56:ac:cb:a6:ac:
                    76:48:61:e7:28:1d:f3:4a:53:69:6f:b7:ae:4e:d4:
                    94:02:91:c6:57:59:9f:f3:69:9c:d0:2a:0e:f4:74:
                    b3:47:37:62:08:7b:ff:43:58:60:7d:f5:33:c6:cd:
                    a8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:61:6F:8D:74:1A:51:8D:DB:85:A7:6D:54:46:AA:9F:7F:B6:17:0A
            X509v3 Authority Key Identifier:
                keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:d2:21:a6:ad:4a:78:cb:3b:58:14:17:f4:45:f7:08:09:87:
         ed:db:f5:61:91:61:dd:57:cf:c1:2a:4a:57:92:f8:71:e7:57:
         fb:2d:b4:fa:bf:a6:40:ce:d8:05:16:05:05:ce:fb:4d:97:bc:
         1d:6a:0d:33:b4:36:9d:22:fa:ce:7d:64:71:47:d5:e9:c5:ee:
         a3:37:78:f4:02:b9:f8:89:b6:8e:a4:8e:82:1d:76:de:a7:d0:
         8f:45:d0:f6:ea:d8:78:38:0b:f1:9c:3a:0f:91:42:0a:51:83:
         d1:f5:4d:61:39:54:00:82:ba:49:94:45:36:ec:df:29:9f:b8:
         95:50:85:ea:bd:77:9f:a9:38:36:a4:6b:79:55:40:74:96:37:
         34:69:c5:0a:19:6d:74:85:80:ab:54:73:60:d1:db:05:d2:12:
         63:d4:c4:d3:5c:60:f4:96:fd:32:10:6a:e9:2b:e9:60:c3:a7:
         d3:25:25:58:bf:b7:7a:bb:91:ba:7c:5b:dd:eb:aa:6b:ca:09:
         2f:dc:d3:7a:52:8b:33:52:87:ff:3c:50:49:0b:d9:e7:ce:9b:
         e8:bd:5e:3d:9e:01:9d:07:e4:32:aa:9f:c6:b1:96:36:ae:7c:
         11:2b:f8:a5:0d:26:43:f3:71:90:54:87:23:35:32:f3:24:a3:
         8a:95:cc:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----