Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
File:                     V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft (raw, json)
Hash identifier:          2oENSBOWOBQHt39BXus+BgEl3d6B+iCtZRvyUoU6Xh8=
Subject key identifier:   DD:07:CB:50:BC:7D:E3:2E:2C:17:C4:F1:0A:37:64:36:93:2C:A5:DB
Authority key identifier: 57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34
Certificate issuer:       /CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
Certificate serial:       0195E0EB737FD6423B7274E2C267B036AAA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft
Manifest number:          14C3
Signing time:             Sat 29 Mar 2025 08:01:21 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:21 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:21 +0000
Files and hashes:         1: Mdhc0HErAhKi4LnGQpbnvACoaqA.roa (hash: +lWO/9SWCJf5PkUWv0wqllxzcN5TlPPfmkgBPh2/u3g=)
                          2: V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl (hash: wPz+a/ybQ/hyVgtA/uoQzeKWtidivMerNOv9ghULzzk=)
                          3: VUyZ_zKhYSMF7CpPOWFsSapK1tk.roa (hash: fLzRsJYT3JBvdVXuFhvXEM3hZiRHVYIv+xDZIaxAjAU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:73:7f:d6:42:3b:72:74:e2:c2:67:b0:36:aa:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577c0cd5a4cfd83d491d627d8b0fccb670e81534
        Validity
            Not Before: Mar 29 08:01:21 2025 GMT
            Not After : Mar 30 08:01:21 2025 GMT
        Subject: CN=dd07cb50bc7de32e2c17c4f10a376436932ca5db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:30:b8:03:da:a6:64:0b:a7:88:ee:f5:16:79:
                    93:6e:bc:98:64:78:13:06:c8:8e:be:28:29:df:f0:
                    03:af:36:26:5d:30:48:be:c2:20:7f:8e:f4:34:81:
                    6d:fd:ce:aa:36:57:42:1b:b6:d5:0f:72:7f:31:69:
                    b1:4c:ce:4b:60:cf:77:ff:fe:9a:9e:4e:e4:d2:e1:
                    ef:ae:fc:9d:3a:55:ec:10:68:7e:14:34:de:ab:11:
                    f4:4b:03:66:0f:76:10:65:ca:ad:ab:b5:f2:e1:43:
                    4c:97:84:b0:43:f7:ba:74:76:47:c6:a8:f3:62:02:
                    a7:83:b0:8d:91:6e:f2:bf:28:d5:2e:cc:89:91:69:
                    45:22:c5:ef:20:24:6d:3e:10:78:1c:d8:22:26:1c:
                    a3:16:08:fd:d8:74:09:a2:3b:17:b8:01:a3:2f:09:
                    e4:2e:02:8f:93:7c:21:4f:78:39:9d:9e:b3:a2:8b:
                    7c:fb:47:79:2c:92:70:f6:97:25:74:06:b7:43:ef:
                    d9:2f:1c:87:dd:08:74:3f:e9:20:e2:a0:a7:fe:06:
                    c4:4b:44:1a:7a:1b:a4:d9:97:7b:2a:a9:51:20:85:
                    56:62:f0:cf:e4:a5:85:1a:62:80:68:e7:c7:47:c0:
                    f4:0d:87:77:c9:02:8c:4a:c0:b0:08:ee:74:48:df:
                    94:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:07:CB:50:BC:7D:E3:2E:2C:17:C4:F1:0A:37:64:36:93:2C:A5:DB
            X509v3 Authority Key Identifier:
                keyid:57:7C:0C:D5:A4:CF:D8:3D:49:1D:62:7D:8B:0F:CC:B6:70:E8:15:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/011b5d-652e-452a-96c9-d8ec2cbcad26/1/V3wM1aTP2D1JHWJ9iw_MtnDoFTQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f0:3d:2b:07:93:89:a0:4c:24:af:1b:90:49:a9:52:cd:f7:
         e3:ab:56:8f:3a:c4:f2:e5:19:67:b2:33:dd:69:54:3d:f1:4a:
         c8:ed:74:0e:2c:9c:7c:07:7d:95:d6:dc:55:1e:e4:94:72:73:
         d9:e5:ab:2e:97:2c:4c:d8:3a:b2:8c:af:be:a0:33:dd:0a:dc:
         b1:c4:06:bb:2d:f3:d0:49:90:d4:b0:38:c1:26:3f:ad:52:96:
         67:84:de:4e:ae:f0:35:f4:47:e5:28:7a:62:d8:80:ff:bd:82:
         20:84:32:e1:7e:a9:da:5d:4d:dc:d2:b3:11:1c:7e:65:2b:7a:
         35:be:c8:6c:74:8c:e7:6b:73:1e:df:bd:93:da:ca:2f:36:75:
         76:7e:c2:bf:f3:56:19:d6:72:8c:79:eb:bc:a2:98:01:ae:da:
         ee:5c:34:76:57:ac:5f:77:e8:8c:0d:87:87:5c:00:3e:88:1e:
         8f:e6:cf:46:29:f3:bb:a4:77:77:c7:c8:d9:a6:d3:d7:9c:ba:
         86:74:51:a5:f8:be:e7:cc:6f:08:04:24:2f:1a:66:b1:0d:94:
         56:30:30:fe:89:89:95:65:f5:3a:a4:4c:9d:35:81:da:31:bc:
         f3:5b:8b:1c:be:8d:93:b4:dc:b9:da:03:76:a0:c5:5c:44:1d:
         e7:49:62:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----