Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
File:                     S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft (raw, json)
Hash identifier:          ADZq3QyGTPVbuleH1DnTnWzBqlN0A1HVdmuvd0lFh28=
Subject key identifier:   57:05:A0:33:4E:0F:EB:59:B5:F7:DD:65:78:B1:92:24:24:B7:F5:1C
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Certificate issuer:       /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial:       0195E1221C883C575FD45B86986E91975307
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft
Manifest number:          14D7
Signing time:             Sat 29 Mar 2025 09:01:03 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:03 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:03 +0000
Files and hashes:         1: 4nd-DP_ymkf3DYArDQC7CtVceEQ.roa (hash: kWIc/fCxnFO7mZl60VV/nQnhRsbj6yvXCXmWGM67c1k=)
                          2: 64p5o-0qnUcfwWS02nv_DkPvL3I.roa (hash: niXYitJiZ8IxUWpDspPEEvq6acqCjMtSycTMiACHf58=)
                          3: BREbZFN6Rhj85h57UryeZAHjLKk.roa (hash: tLB1oKUW+Dho1hfNPpoz6yfVQeh4dvXZuSRcojuXxOA=)
                          4: IX3hpyLIN4WhHMana79sWPUI4X0.roa (hash: rCe6IZNZSjHSC1lZ+kxokCfhrF01W07U8ihTWZLrEJU=)
                          5: IfSKWBwWV6QcVsRSMjJ9wGMbUUk.roa (hash: HjUM6VN/VoF4kqrbPTW3NPTllgIWYUt/BGC2HsAIgNk=)
                          6: JtK5RD-DTIOQNW_JXWGlPrgL9tE.roa (hash: /+XnmRP4/kZj+79ZCDvZV6TsrFKYsjV9u/awORCe7Sg=)
                          7: S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl (hash: NzqigzgEWi3nvWfwNMUjAMjJ8tFj/45dqM3wQVnJAg4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:1c:88:3c:57:5f:d4:5b:86:98:6e:91:97:53:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
        Validity
            Not Before: Mar 29 09:01:03 2025 GMT
            Not After : Mar 30 09:01:03 2025 GMT
        Subject: CN=5705a0334e0feb59b5f7dd6578b1922424b7f51c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d6:8c:5f:39:43:67:87:ab:bf:66:50:a6:65:
                    d8:17:7e:51:af:a5:7d:2e:5d:94:b2:00:76:a2:23:
                    2a:66:ce:d6:80:24:1e:0a:ce:b4:18:45:7b:4c:9a:
                    91:df:3b:b1:fd:5a:92:14:fb:74:fc:e3:1d:69:2b:
                    97:14:35:a9:00:f9:3d:b3:8d:11:92:24:d9:28:1b:
                    da:4e:50:06:e4:df:89:28:b4:a3:5b:21:c4:6f:d1:
                    19:96:43:e9:ef:ae:e6:8e:55:37:b5:db:70:b7:c9:
                    13:c0:a8:2a:d9:d6:41:c8:d0:71:ac:db:7d:c9:2d:
                    48:9a:42:fe:e8:99:38:ae:41:c6:eb:39:02:46:3f:
                    b6:46:50:87:1e:76:cd:20:23:14:be:0b:87:a9:68:
                    5c:4f:d3:3b:93:31:81:8a:12:05:75:2e:b8:13:6c:
                    43:e6:d5:aa:97:6d:3a:6f:1c:d3:4a:e7:04:98:c3:
                    28:61:c5:7a:d7:dd:f8:de:29:6d:37:82:b1:19:2f:
                    fe:ee:33:d8:4d:5d:f2:38:0e:9d:57:3e:d3:50:3b:
                    0c:9d:31:5b:3c:d2:3d:9d:b4:33:8b:71:b7:75:0f:
                    78:9f:19:ef:5b:ac:3c:91:96:f8:38:c8:eb:0c:bd:
                    f6:01:fa:94:d7:a2:42:a3:59:cb:24:fe:c8:91:ad:
                    c5:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:05:A0:33:4E:0F:EB:59:B5:F7:DD:65:78:B1:92:24:24:B7:F5:1C
            X509v3 Authority Key Identifier:
                keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:f9:f3:68:e3:db:e1:64:cf:66:92:b4:b6:51:52:56:df:fd:
         b6:a1:b7:97:c1:4d:41:c7:fe:0e:bd:83:2b:02:06:17:c2:d7:
         8e:95:37:4d:aa:bc:52:f4:45:f6:81:21:89:e7:4f:82:f9:15:
         80:a6:7a:ee:9e:f3:ff:a8:f4:93:f2:cd:f4:9b:e1:c1:83:c0:
         58:c2:e0:29:d2:35:8c:10:1d:c3:ad:d8:14:79:58:5e:3c:39:
         1c:29:85:5f:19:fb:c6:3e:a3:92:a5:ee:87:a1:fb:d4:49:35:
         62:82:c2:dd:d2:7c:43:f0:58:1b:da:f7:3f:cc:3f:11:88:5c:
         76:11:cc:aa:76:4a:0d:b4:68:18:a7:98:a1:df:6b:39:6c:89:
         e6:d1:3a:8f:56:fa:6c:3e:4e:e1:a1:7d:c5:1c:13:6c:fd:06:
         36:a2:fb:d3:58:4f:36:aa:8e:ec:cf:58:fc:e6:7b:09:15:07:
         3d:2d:13:06:43:8f:39:f9:60:a3:3b:cf:cb:9c:be:2f:4f:9b:
         1c:47:42:82:7f:e1:ed:33:22:bf:e1:63:28:69:cc:03:d8:7a:
         81:cf:49:00:86:5d:95:65:f7:77:65:8a:4f:f5:d7:82:99:61:
         b1:5b:5f:15:a4:2a:b9:77:c4:f4:16:8b:fd:5f:fa:ce:3f:00:
         94:af:ad:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----