Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
File:                     _E0Gl4lpqL2rbWNZBi13geA0Sco.mft (raw, json)
Hash identifier:          jomFbffrhimiX1hvStfJ6FeiT6r9y66o+sCzrZyCBGA=
Subject key identifier:   19:30:59:7D:F4:39:4F:1E:58:62:9B:6E:6C:D5:07:A9:EB:EE:B4:33
Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA
Certificate issuer:       /CN=fc4d06978969a8bdab6d6359062d7781e03449ca
Certificate serial:       0195E1222DEA513CFB3306D0058F31E921E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft
Manifest number:          14CF
Signing time:             Sat 29 Mar 2025 09:01:08 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:08 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:08 +0000
Files and hashes:         1: 02eA2zVN2NGAdF-P2LMeAYVbZ8E.roa (hash: 1lC1lblUpRwTVQ+Ge49BDR+GJQFgOVsafNXG64hb/XY=)
                          2: Fh-g3ybxuQPMBjAboSgyWK2vAoc.roa (hash: 2MxUFjGmuDKUG21lzv5veXhyhTQId3UhJyQ5SEul+IE=)
                          3: RqVcFJZ-UOtFVhYTc8Tvk-2MyWc.roa (hash: EkympbPJChDE++MdHcZn5otezDPhnhwM5HrzDsbo97E=)
                          4: UGBZOZSWywjphqY06-K_M1ZGoT0.roa (hash: RJB+IF1dz0DTQaSONy8F1A13L8REX4DXW9Kvah614y8=)
                          5: _E0Gl4lpqL2rbWNZBi13geA0Sco.crl (hash: PreQt98xjnChyp7Yvu2RL3BHV0zvl3IvZchq41Z5nO8=)
                          6: u_WvPHOyTZv1yIumAHFttyTLPq0.roa (hash: orApbyBIxfQnRa+Eb9kNcqjSQcTLlYJsX3y/E+LLNDM=)
                          7: vdV5qL7SpepCbsvsvfAJBAz8FxI.roa (hash: zM4+IpZ2NSkVy8xnsYcs6SKRJCNxX1j91N1iXdAJ3Zs=)
                          8: zQ_mdrGL7iDEweRkAPL6mvm3aRA.roa (hash: ZLxLzKI7oWxHfaoLaLC/qvHYpwJYh49zyjA/TXCZ5qY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:2d:ea:51:3c:fb:33:06:d0:05:8f:31:e9:21:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca
        Validity
            Not Before: Mar 29 09:01:08 2025 GMT
            Not After : Mar 30 09:01:08 2025 GMT
        Subject: CN=1930597df4394f1e58629b6e6cd507a9ebeeb433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:97:fe:3b:2a:c0:a0:26:ba:77:5c:9d:20:34:
                    89:b5:1a:bd:d5:7d:36:9d:3d:8e:5c:d6:c0:66:9b:
                    31:b0:b1:8a:db:35:66:b8:c9:aa:7e:66:a2:09:bb:
                    fc:ba:aa:24:b8:57:e8:67:de:a0:98:0b:cc:48:a2:
                    7c:6e:c4:f4:cc:a7:a1:d6:4a:d2:ba:32:c4:76:45:
                    c0:a3:50:4a:77:a8:9e:7f:cb:e8:9c:bb:c6:9f:5a:
                    1f:5c:0f:fc:3c:46:4f:d1:d5:a5:60:be:c1:df:fb:
                    4b:8c:e2:05:85:dd:ef:52:d3:99:24:dc:36:4e:80:
                    60:b1:c0:70:3e:16:02:ed:62:0c:b2:92:9b:82:3d:
                    a7:7b:bc:76:9b:94:bc:d8:19:24:be:b7:12:2e:11:
                    ed:34:93:94:39:f4:ed:40:29:76:da:4d:12:df:9e:
                    3e:7c:a8:71:2f:00:82:be:f0:b7:47:1c:f9:95:d7:
                    a1:8e:68:fa:61:0d:76:bb:61:84:f7:f3:c0:2d:9d:
                    7f:4f:74:ad:ce:70:8b:0d:be:d7:81:54:56:e4:ad:
                    50:a2:90:38:c5:4b:de:c4:6c:49:ad:c8:26:ab:ae:
                    4f:c8:36:84:a2:95:96:88:c8:a0:de:10:42:17:9a:
                    9a:19:8f:60:ea:04:7b:3e:ed:92:8e:68:92:d7:a7:
                    98:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:30:59:7D:F4:39:4F:1E:58:62:9B:6E:6C:D5:07:A9:EB:EE:B4:33
            X509v3 Authority Key Identifier:
                keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:d2:ec:0c:6c:07:88:4d:5e:15:bb:21:f1:9d:d6:c9:1c:36:
         ab:78:fb:2a:ef:16:bc:15:4c:23:e8:44:91:f1:f2:11:64:79:
         59:6c:0f:d9:d9:1f:9c:d8:8d:3e:74:86:c9:b0:bf:8d:a6:88:
         bd:73:9a:f7:35:2c:9c:59:98:12:28:38:fa:8e:b7:bc:0f:c1:
         8d:b3:80:4c:57:4f:66:98:87:11:7e:ed:30:43:f5:7d:72:1c:
         8c:e6:83:0c:c2:e6:a0:79:e9:a0:07:54:02:8a:59:c8:bc:52:
         a9:68:5b:2a:75:af:ab:ea:21:91:2c:08:23:29:34:77:67:92:
         66:76:34:30:c4:23:a7:19:01:a3:89:70:02:ce:e7:20:17:0f:
         50:9f:4a:26:0a:f4:b0:3f:9f:2c:6a:d3:e7:2b:99:50:a1:db:
         b5:7d:70:be:b0:ad:26:77:98:da:c2:97:d1:80:a5:96:f6:3d:
         4c:e5:56:79:d9:38:54:ec:35:18:87:79:2e:54:e3:ef:fd:34:
         84:2a:14:0d:0f:47:2b:5b:1f:75:3a:6a:d1:3b:e9:75:53:56:
         f0:42:6c:4b:02:dd:8f:c1:7e:d2:3d:19:c4:b0:0c:82:9b:2e:
         a7:86:dd:85:4c:09:19:d6:bb:6f:95:e2:22:58:85:bd:ca:e6:
         43:2b:14:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----