Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
File:                     HSzcucdvXgzgw4XX4O8VVy0VpUw.mft (raw, json)
Hash identifier:          oyhQ80nexc1PdpPzUiCyjy+FcLLFk6UemTjC6vFUD74=
Subject key identifier:   F8:E8:BD:C1:A3:B7:3D:46:D0:EB:45:B3:22:25:BB:80:FF:04:BF:69
Authority key identifier: 1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C
Certificate issuer:       /CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
Certificate serial:       0195E12267B72F2AD24EE672B6B201255A51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft
Manifest number:          1456
Signing time:             Sat 29 Mar 2025 09:01:23 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:23 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:23 +0000
Files and hashes:         1: 3E7aBqsHg6THlsFLCGCu1ykhumg.roa (hash: vdRC30YdnIGNPLtMGa2MkjovoqgS/LCgWDKRJk5Yhko=)
                          2: HSzcucdvXgzgw4XX4O8VVy0VpUw.crl (hash: ngcIpexsbIGFLAl3IZy77+2RMWjG7eXlU0W4nHxTPok=)
                          3: _gYUlUCfN6l5n67P7rXluh_fPlA.roa (hash: U4UZUMI/kaS2KD/9/bzXxhkFvL6NwSNWIwZGPCQg08o=)
                          4: drOxTuSdQFczpcVwXyFaIyEbsdY.roa (hash: flldTjSWU2bObz1CZncUhXjWnhrg2F/Btx8as3R6O7E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:67:b7:2f:2a:d2:4e:e6:72:b6:b2:01:25:5a:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2cdcb9c76f5e0ce0c385d7e0ef15572d15a54c
        Validity
            Not Before: Mar 29 09:01:23 2025 GMT
            Not After : Mar 30 09:01:23 2025 GMT
        Subject: CN=f8e8bdc1a3b73d46d0eb45b32225bb80ff04bf69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:39:31:28:f2:14:2c:7f:bd:5e:90:35:52:af:
                    6c:b4:2f:4f:22:ff:1a:0a:e0:7c:a4:93:34:7d:fc:
                    5d:0a:b4:c6:29:de:ff:27:38:bf:b2:90:01:0b:49:
                    6c:8d:f6:e0:20:df:9c:7b:d9:0e:1a:f6:55:ce:ae:
                    d9:6c:b6:06:7b:9e:f9:65:2d:b4:13:d6:8d:11:2d:
                    38:25:29:6b:c4:89:d6:f8:f6:42:80:f9:b3:d4:e5:
                    19:58:59:14:e9:7f:f3:ab:11:f6:16:b0:80:16:f3:
                    41:f2:ab:b1:dd:cd:f8:16:ed:7e:96:5c:77:5c:8f:
                    4b:fd:2c:cc:f9:cc:32:4c:55:43:62:35:34:d4:ff:
                    e3:bc:ec:c6:f4:a3:13:af:c8:c1:fe:e1:18:6b:d2:
                    a3:67:33:2f:6e:08:7a:17:0a:1e:91:01:37:eb:21:
                    70:22:21:41:67:7a:ce:28:04:46:67:04:dc:e5:00:
                    fe:45:28:0b:e0:a8:51:95:1f:75:8a:27:5a:b3:0b:
                    dd:42:f4:11:5e:ba:fc:da:5d:f7:60:6d:33:07:63:
                    89:92:fa:e6:07:45:8f:d6:d0:99:f4:aa:cc:bb:1a:
                    fc:d6:0c:a0:16:3a:5f:6f:0f:d4:a3:6c:77:5d:07:
                    38:d9:f2:43:4f:af:6f:89:3e:3b:42:37:54:7e:b3:
                    d0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E8:BD:C1:A3:B7:3D:46:D0:EB:45:B3:22:25:BB:80:FF:04:BF:69
            X509v3 Authority Key Identifier:
                keyid:1D:2C:DC:B9:C7:6F:5E:0C:E0:C3:85:D7:E0:EF:15:57:2D:15:A5:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HSzcucdvXgzgw4XX4O8VVy0VpUw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b66666-b3b7-4248-ae65-760e4ee4c6b2/1/HSzcucdvXgzgw4XX4O8VVy0VpUw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:7b:05:93:79:0b:a9:a7:1c:9e:c4:6c:af:33:44:26:84:9d:
         40:de:d1:2e:ce:6e:79:6d:10:c9:22:3a:cc:e5:a8:b1:7b:68:
         55:dc:4c:fc:32:72:21:94:c0:2a:23:e9:16:a5:aa:69:bb:cd:
         85:5d:c0:b6:62:d4:50:ab:27:9a:f5:52:c5:32:f3:f1:07:30:
         dc:64:64:4c:38:fd:97:fb:0b:2d:a2:b6:19:1f:c2:56:d4:44:
         6d:b8:c7:f9:84:3e:d9:f0:70:cd:25:f1:81:cd:5a:8a:b4:ca:
         8c:2b:34:12:db:e9:0c:87:6e:65:11:4b:1f:c4:4d:28:ef:35:
         e6:dd:60:89:31:ed:09:18:6a:fe:41:29:90:dd:ce:9d:b8:12:
         3b:e7:c8:eb:7c:da:3c:ec:5e:62:e4:12:43:3d:e6:e2:58:74:
         15:f0:cc:f2:8a:39:b2:73:c9:c8:1a:48:46:bd:a3:80:4b:28:
         72:f3:a7:12:12:41:5a:69:8f:9e:7b:f6:67:f5:52:8e:2d:d9:
         d7:5f:61:15:0f:2b:49:b0:11:3b:67:6b:c0:8b:46:11:a8:01:
         c9:94:23:d3:a4:58:ea:18:da:21:c6:4b:fa:e5:cc:09:b9:a2:
         95:88:19:a8:e6:93:d8:bd:16:c9:8e:c7:a7:a7:f7:d6:9c:33:
         4c:f8:40:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----