Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
File:                     RbvSGTZCUwoBf08cvlYuIXCz370.mft (raw, json)
Hash identifier:          CzKHAVW/D3naTkevAl76Q75ELwS1y4cdZCCK3UlW/Yk=
Subject key identifier:   16:37:7E:86:B6:CF:91:A6:88:C5:69:71:70:67:D2:D4:E7:6E:2D:6B
Authority key identifier: 45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD
Certificate issuer:       /CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
Certificate serial:       0195E0B4110A02C390AD634A78A2B2FB0AC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft
Manifest number:          0CBB
Signing time:             Sat 29 Mar 2025 07:00:51 +0000
Manifest this update:     Sat 29 Mar 2025 07:00:51 +0000
Manifest next update:     Sun 30 Mar 2025 07:00:51 +0000
Files and hashes:         1: 6ZnfS565qYdUchLZCkFU7aS7slQ.roa (hash: 4t6UU9aRgFRSLJBVwUMaRIV03s5+6yeuigVjxM6Ktp4=)
                          2: 84g9kcbpLMOYWyAe0WNiCfk8rQ0.roa (hash: Op4AJknS0Y4sLCSDEIKA+ch9xkPiEHCr8XwgBypEB5o=)
                          3: RbvSGTZCUwoBf08cvlYuIXCz370.crl (hash: VZjErpygN6mCT+s4oz0Ye+AHNVWnThpNpm/GD3p3FUU=)
                          4: TApodEY8028DyJXWycbZvpKO2JY.roa (hash: U9oKSIIosuWZsZ0CYqCvqcMf8wzWuI0iOJauh9nwcac=)
                          5: U99JCnG6IDDb3fPb5RJU5lmsye0.roa (hash: X/Q6Sj4Oee6V3+wleBrfWWmYoSOrW6XOkN6eZj48NGo=)
                          6: UHhBspaFN4Wz4SsUMP7fb9tfT4w.roa (hash: 50TOVRcOrToHPoin6f4jkSxKeLPlDyklnbx1BFOMka4=)
                          7: _VXztWjIE0ZPwEUQdhYZ-DOYwQo.roa (hash: 185UhIin1qWAIQbRLAq/SfnBaaaHig76ZL9WselXS2I=)
                          8: bVG91rh6vJ7orCrWLltzoEytWu0.roa (hash: 6UY0Ua8DXjS9JwbhBNdYqbLcTNFaiJVgT0ORPNoYM64=)
                          9: d4dd63YvMop2w-g3LON2FgQkXGs.roa (hash: wFE27Pfyu6wjdlPpwECWgbJf/SI7T3ch1qMqz+WQODE=)
                          10: r5ZgGaHKIkFsDW5OTwwhK4tgAsQ.roa (hash: jLmSUGri8N356kUEE/tygoNrVgGIX4EqiZgEZdk/J6k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:11:0a:02:c3:90:ad:63:4a:78:a2:b2:fb:0a:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45bbd2193642530a017f4f1cbe562e2170b3dfbd
        Validity
            Not Before: Mar 29 07:00:51 2025 GMT
            Not After : Mar 30 07:00:51 2025 GMT
        Subject: CN=16377e86b6cf91a688c569717067d2d4e76e2d6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:be:96:7a:44:eb:95:23:2a:61:f2:e9:12:30:
                    4d:25:f9:7c:5b:bb:ae:65:c0:0d:7b:be:9a:05:ff:
                    37:30:36:57:b5:da:ca:fa:4a:a1:95:5b:b4:de:82:
                    a3:28:14:9f:ef:06:7d:e7:57:97:29:b7:6d:cb:2d:
                    51:29:1b:91:22:9a:26:be:be:85:22:a7:95:7f:bb:
                    51:35:db:f0:93:fc:ac:bc:03:e1:36:44:9a:35:2b:
                    36:2d:14:67:03:29:f9:e3:a4:23:b6:fd:81:a3:23:
                    3f:04:54:c5:58:a3:2f:1b:85:fe:d7:32:e9:e0:01:
                    ed:55:20:2a:ae:5c:65:64:ec:82:c1:33:b5:33:ef:
                    36:fa:82:da:be:b4:68:d4:19:ae:04:10:d2:21:9d:
                    cd:68:ed:a6:ac:7f:c2:ab:eb:03:9d:cf:a7:20:f6:
                    c9:28:d2:09:49:ae:80:71:47:0c:00:1f:c2:a4:7d:
                    dc:4b:81:58:47:a2:81:e7:a0:3e:19:08:86:63:2f:
                    b5:20:df:18:c2:a5:9b:dd:f4:de:ee:bc:e7:13:83:
                    cf:cf:a3:b8:7d:e0:b3:b2:70:e0:f6:ac:49:76:33:
                    81:25:68:71:c5:2e:75:8b:32:d2:a8:fc:fb:18:5e:
                    3a:90:73:7d:54:df:b8:66:65:96:78:c2:86:7e:10:
                    27:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:37:7E:86:B6:CF:91:A6:88:C5:69:71:70:67:D2:D4:E7:6E:2D:6B
            X509v3 Authority Key Identifier:
                keyid:45:BB:D2:19:36:42:53:0A:01:7F:4F:1C:BE:56:2E:21:70:B3:DF:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RbvSGTZCUwoBf08cvlYuIXCz370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cffff8-3530-4e5b-a5e2-c77905fbba7b/1/RbvSGTZCUwoBf08cvlYuIXCz370.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:a7:97:1d:52:d7:30:91:3d:04:65:49:b9:d4:7a:fb:9f:35:
         00:a3:03:4f:d0:5c:0f:3a:39:aa:c6:77:a2:a4:b5:10:64:bc:
         33:48:21:bf:1e:7b:ec:6e:37:4c:98:fd:c0:23:87:b3:7b:a1:
         67:19:6e:13:4b:36:bc:2f:1c:35:b6:d4:c4:7b:80:20:c5:cd:
         f2:6f:ef:69:c5:c1:83:ad:ca:c6:14:a0:98:2d:1e:50:33:87:
         03:b6:b0:72:8c:0b:67:08:81:a8:54:c2:0d:e4:27:fc:0c:72:
         a5:ce:b2:38:0b:a7:ce:bc:e8:ae:32:61:ae:30:5c:78:a6:39:
         a6:0a:b9:0c:47:88:80:d6:88:a8:34:a9:a3:21:a0:d0:ed:46:
         c1:52:f6:88:14:f2:56:47:2f:3e:4f:e9:4f:30:d1:ea:d0:a8:
         6b:07:a3:03:d6:3e:a1:93:f5:b7:51:d6:50:fb:43:0f:1f:71:
         b2:42:03:3a:4a:e1:ad:18:b9:f3:fb:4c:db:2e:39:1f:9b:4b:
         9d:8e:89:23:f4:bc:3f:63:78:f5:40:22:60:69:29:d0:44:39:
         27:27:8f:11:0d:c7:ee:d2:51:7e:96:04:2b:77:1c:0e:c2:ee:
         99:80:a9:d5:6f:e6:04:b9:35:5e:04:f4:4b:dd:39:e9:57:a0:
         99:19:c5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----