Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
File:                     7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json)
Hash identifier:          0NTGI9RoR1WgSfksbDr/mmvbXa4tFmki9NBnztZaYcI=
Subject key identifier:   EB:2C:A9:DD:30:E5:A2:C5:D4:74:CC:A0:EA:25:35:4A:27:10:66:D5
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Certificate issuer:       /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial:       0195E15A2AC85A3D83F3F7AE965B729600B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
Manifest number:          0B19
Signing time:             Sat 29 Mar 2025 10:02:17 +0000
Manifest this update:     Sat 29 Mar 2025 10:02:17 +0000
Manifest next update:     Sun 30 Mar 2025 10:02:17 +0000
Files and hashes:         1: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: Zj60ff6PRnLz2Y4gm6c5Oje9vfycGWE3IHYv5VvN2Kw=)
                          2: CMrHF8H9YG0k4ImZKJ0Wv5prbiU.roa (hash: 7mi0g+KT3QF83gURKdhKKpg94gTD0horBgadWGVDb8E=)
                          3: FfSeCwPXspTGNJXs1YFUWRkPWd8.roa (hash: 2wkLeptVYT3svowWE9iGU2ivjkcGP5lQfdyzSutjYiw=)
                          4: McQBWIkKTuiBTTZqAfwfimGiJv8.roa (hash: kezXGJ7slA/edYCjH/7MkGlnqiO9ieoRDACp9a7xuJg=)
                          5: PsSNrF4GYSF0wH771eRpN_af86E.roa (hash: 9DKoGdEkKbdB2FEIrzJZnlfynd23Qv+qRMTZsGGY64U=)
                          6: Sf-fnn87zqI6IDyZOCzOmqlh3ZM.roa (hash: ys8hXeVOTWclda1oWzQD6jxmP+pwlIxNYEQ2N3HNoIA=)
                          7: _Ehrq3F22eZQSCUZ41NXs1Mis4w.roa (hash: culdYqYdPXx/iLIUaW8VpKJoZ1AwgkT3iD+KMiCIgQM=)
                          8: buI3YKDrfWPqXXHZRlTS3-bj0cs.roa (hash: UTI3BZiE8tVZY3qvGvbwT+0MAq76+0w1dzLWYm9V4G0=)
                          9: lJu4vvomNeL77Z8YpH2r84A1bZM.roa (hash: mTkLp4XIHK60hTMHWyRMAysJ6XfiJSK2I0bd+JC5zqI=)
                          10: qi0InhuXBU-ET3BQIygAjHDv7R4.roa (hash: EwPEIgFR9Y7apfRR0iJdm8aoI2On5DfKKekezl88mDo=)
                          11: qu7kmExCuDOLhLu5jIOipsHVZUU.roa (hash: mpb42buPTORd/2C44Vbt1Yru22KauX6K16YgcD4OCHs=)
                          12: uw16RrYC31ae26o-GMI2QavuMU0.roa (hash: 8/SaDVncSWNGOp0BT1E2Z6/gbpYML5fhwg/+UmSEX/w=)
                          13: v3Y2kQBxLTzeaG8d43skpwQULcs.roa (hash: B7Egk3MrSfO4fxdlQbPhy1Krh5zi1OM2O8JrAFo0eOM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:5a:2a:c8:5a:3d:83:f3:f7:ae:96:5b:72:96:00:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
        Validity
            Not Before: Mar 29 10:02:17 2025 GMT
            Not After : Mar 30 10:02:17 2025 GMT
        Subject: CN=eb2ca9dd30e5a2c5d474cca0ea25354a271066d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f9:c7:a4:7a:1e:65:7f:d3:19:ad:87:fa:12:
                    89:05:fe:b0:bc:a1:e6:53:29:ad:87:7e:13:e4:a1:
                    64:b4:5c:19:26:b4:8d:d2:bb:e1:7a:56:b9:76:da:
                    e9:cd:ed:34:13:32:33:bd:13:22:7c:18:78:6e:c5:
                    24:33:60:fe:7a:37:19:ee:ce:53:9a:fa:88:dd:c9:
                    72:62:c2:b1:6d:2f:fe:d1:08:54:8a:bb:b3:b0:ed:
                    00:07:bb:35:cc:d2:1d:2d:2b:9f:24:0d:a7:8f:59:
                    9f:1e:56:e2:1a:c1:00:d6:ac:f3:50:3d:a5:6e:94:
                    4f:e1:3f:9e:1c:3c:14:ed:b0:be:81:f1:7e:1b:8d:
                    52:f2:2e:e0:ac:bd:47:7e:a2:e7:f5:dc:28:84:a1:
                    28:6f:a2:7a:5e:8a:97:af:e3:0d:a3:69:db:2c:d8:
                    f0:01:55:3f:a5:03:dd:87:b4:66:41:89:b1:95:42:
                    fb:8f:00:6a:0e:1b:b0:99:4b:d6:ae:9c:df:cf:46:
                    37:3b:0c:50:3f:28:9b:1a:8e:40:06:40:36:8a:02:
                    f3:eb:f8:ab:5f:0b:4f:ad:36:15:be:80:38:9a:30:
                    90:c7:43:61:ee:5f:31:d6:61:0f:2f:b4:45:72:94:
                    7d:72:76:92:bd:67:a5:76:c5:e4:0e:7e:94:a6:0f:
                    e6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:2C:A9:DD:30:E5:A2:C5:D4:74:CC:A0:EA:25:35:4A:27:10:66:D5
            X509v3 Authority Key Identifier:
                keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:dd:18:95:9b:18:ad:11:43:8a:d8:be:17:09:59:1d:62:15:
         4f:49:9a:37:53:88:d0:d4:90:0c:00:36:2f:bd:3b:db:d3:9a:
         39:ff:79:a8:8e:a5:16:b3:bd:04:75:ab:78:78:6a:fb:96:4d:
         0f:3c:17:1c:f4:07:7b:8b:3c:6b:47:01:87:51:06:d8:8d:81:
         1c:1e:d0:1b:4e:74:2e:84:24:6d:33:c5:4d:61:c4:b8:74:e3:
         47:f3:1f:11:fa:4f:98:e2:0b:5d:03:b6:81:93:54:9f:99:17:
         ae:44:01:c8:05:2f:0c:d0:2b:97:b9:70:40:e7:90:b3:c1:a0:
         8b:fd:2c:0b:20:f0:72:9c:64:8a:b0:80:01:44:63:1a:eb:4b:
         bf:1c:97:f9:a5:64:b3:3d:62:e2:11:c4:1e:87:1d:54:51:a7:
         9e:5f:60:82:1b:ee:90:38:00:06:7a:c8:a8:c4:76:51:09:0b:
         2f:25:5f:55:e7:42:52:5d:2e:8d:1e:fc:ac:ab:5a:89:76:8b:
         01:dd:4f:cb:aa:59:58:70:04:2e:50:30:66:0d:59:d9:32:ce:
         50:8f:7f:a2:b6:78:32:bb:f7:b6:aa:c9:33:08:50:d2:d9:98:
         91:7d:0a:2a:72:c5:80:cb:20:ce:c4:0c:f4:35:31:ee:e0:be:
         3b:5e:3d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----