Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
File:                     qy5bZ_JcvYgspNAj0h75jUg3Nds.mft (raw, json)
Hash identifier:          DtHUvL14jG0AT13EaSPoLx/MkOXrrtY6HZgq7dM84Pw=
Subject key identifier:   B0:18:D4:C2:A1:07:5A:0F:0E:30:0C:F7:0D:6D:F6:31:B4:46:E8:3A
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Certificate issuer:       /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial:       0195E046EC1CB0B6928FD764BB00AC820EF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft
Manifest number:          14C6
Signing time:             Sat 29 Mar 2025 05:01:38 +0000
Manifest this update:     Sat 29 Mar 2025 05:01:38 +0000
Manifest next update:     Sun 30 Mar 2025 05:01:38 +0000
Files and hashes:         1: K7Ga725J3x2RwbbwxIq7lR_PIPs.roa (hash: iDoa32FgeW+pTYDS/vRw8g8vbffEox0Tjj/f0H2pJ4o=)
                          2: USK3DF_MeFiqUsO5eyLbMIpRftM.roa (hash: EfIlwaa4+l/J+6WJ30e/f1BqrVRRkC35cUUZDfKg660=)
                          3: jtaR0UqVsAZLkY0kZNEVD_APhkw.roa (hash: mqg6f6CiSZ5djyLSZlp3pc+4PGWQ8YQjeu4DqnHw2+g=)
                          4: qy5bZ_JcvYgspNAj0h75jUg3Nds.crl (hash: fXyJkx7LPLoWZUT0/zknTZpHTLjwUL9RCyRXKQP9Rc0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:46:ec:1c:b0:b6:92:8f:d7:64:bb:00:ac:82:0e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
        Validity
            Not Before: Mar 29 05:01:38 2025 GMT
            Not After : Mar 30 05:01:38 2025 GMT
        Subject: CN=b018d4c2a1075a0f0e300cf70d6df631b446e83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:63:6e:cb:91:92:39:8b:7f:ac:51:48:5c:80:
                    ba:ac:19:c9:25:ad:e7:ae:49:2b:00:24:48:45:aa:
                    cc:0a:1d:11:ef:41:ff:39:ce:56:34:23:e9:e2:a8:
                    c3:64:6e:7c:14:ae:11:db:38:33:94:da:8c:0d:64:
                    c9:40:97:de:31:d7:2c:3d:5e:65:60:3a:dd:eb:ab:
                    ca:47:37:61:5d:9e:04:92:32:69:b0:49:7c:ca:ef:
                    62:bc:d9:22:cb:23:38:61:dd:24:e9:44:fc:27:c8:
                    a5:1e:71:fb:6b:0a:38:1f:fe:ef:e0:1c:e2:fd:71:
                    e3:0b:14:c1:a7:42:cd:cd:28:47:65:8f:e0:ac:19:
                    78:87:46:ea:6f:bb:1c:74:d0:2b:81:a1:b6:c0:95:
                    d6:9d:a3:3c:9f:e1:1b:b5:99:29:bc:79:cd:96:56:
                    e8:a8:77:d6:6e:59:9e:00:7a:c1:24:3d:68:1e:dd:
                    92:de:72:09:03:69:92:84:ca:07:5f:32:18:6b:a2:
                    24:59:40:8c:75:df:91:00:f6:1e:dc:cf:d3:1b:e8:
                    3d:be:f1:92:53:af:ac:67:69:fb:ff:37:aa:da:e0:
                    38:43:87:3c:b2:6c:bd:dc:91:77:37:7f:c1:a9:0f:
                    73:f7:2f:aa:60:ff:09:ff:62:0d:89:42:43:59:48:
                    ea:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:18:D4:C2:A1:07:5A:0F:0E:30:0C:F7:0D:6D:F6:31:B4:46:E8:3A
            X509v3 Authority Key Identifier:
                keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:74:e0:84:99:0e:7e:7e:ca:b7:fb:b2:d2:5e:00:b7:fb:38:
         84:58:da:b9:a1:b2:7d:ca:58:e2:11:01:43:fa:50:e7:10:c7:
         68:0f:e2:f2:f0:a9:f5:70:8c:fc:99:e6:37:17:48:17:49:97:
         84:45:b4:8e:dc:99:a3:48:b2:99:7d:67:45:04:a0:0d:33:83:
         06:5d:95:05:97:d2:b0:9c:27:31:23:75:fa:54:94:57:31:bf:
         cb:e3:27:08:d0:1c:5c:06:94:7a:86:c0:eb:9b:fe:7f:15:f2:
         c6:29:bc:69:d4:5e:8d:ce:31:d9:05:d8:b3:5a:ec:b8:d8:55:
         20:64:db:90:91:1f:30:a4:e3:25:67:cf:44:76:0b:8c:be:29:
         98:59:36:c8:7a:39:db:f5:91:6a:61:ab:ae:bc:58:4e:bd:0e:
         5f:17:0f:15:16:f2:1d:92:17:26:c2:89:41:e6:e1:8d:0f:01:
         38:3a:ec:a0:c4:c9:4f:e8:a8:5f:53:4c:1d:c2:24:79:f7:df:
         12:03:a9:b3:9e:db:38:14:86:07:02:bf:16:b2:c9:7d:59:94:
         3a:0b:f1:2f:f9:ef:59:6c:22:3e:df:97:c4:aa:3d:96:01:9c:
         18:49:6e:cd:82:39:ca:b4:37:0e:66:5d:db:a5:f6:2b:40:b6:
         28:d2:09:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----