Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
File:                     fDw50YmeaZv1F3QY7jgUie3_Q4A.mft (raw, json)
Hash identifier:          W8AdU+AtM1SfJCNvt7O0Qme/dGCyLMeoWP3lxYTRRkI=
Subject key identifier:   26:C4:F5:3A:50:BB:1B:10:18:95:35:9B:8D:7B:CB:CB:81:7A:35:7F
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Certificate issuer:       /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial:       0195E00FA41A11B7B7EDE569836C9711BEB5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
Manifest number:          14DF
Signing time:             Sat 29 Mar 2025 04:01:16 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:16 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:16 +0000
Files and hashes:         1: 3UEtPfriipiMbZa6fhwdY3QYuQU.roa (hash: zafMtM+qwE9a62Lg/QOalLMv3c0V/Ie0I/pDVfmKXPw=)
                          2: AUeNVV_SMqPqEs2O5iHSxh3g7yA.roa (hash: vOpHeopsXYOn149WlJN/AUCpTvQWlIuD3VGR6QfDGQc=)
                          3: acwxUWbdpUsqhVn5F3e7J-KWE_s.roa (hash: k6IT6xJnQ84kL4p0G7+fu3bTiBrlku3nIpx+yEYBw0M=)
                          4: fDw50YmeaZv1F3QY7jgUie3_Q4A.crl (hash: R6LyoHkgJuVXhyMJhXUe7tWqSXAWjKdb9g0OascRccI=)
                          5: gz-qnMUscMazyhnaaxMqBrKn5m4.roa (hash: fpQhmRYSa6NMfhZ0IQvQ/7dM75+CyzF1R1dwJsHdzfM=)
                          6: iu7nkMMloLMO4qPNzRbpLkYcyro.roa (hash: 4ANkfNKLh7Z2wCwDamCSoeryHoHgG5FlZVn0i1JfMb0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:a4:1a:11:b7:b7:ed:e5:69:83:6c:97:11:be:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
        Validity
            Not Before: Mar 29 04:01:16 2025 GMT
            Not After : Mar 30 04:01:16 2025 GMT
        Subject: CN=26c4f53a50bb1b101895359b8d7bcbcb817a357f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:82:03:2a:4f:86:55:18:3b:2b:7b:3d:a5:
                    16:07:d2:ca:4f:01:fe:c4:de:1b:04:64:2d:00:41:
                    fb:cd:cb:c1:46:3c:06:59:43:fe:45:72:93:f0:40:
                    73:cd:0e:75:18:77:bd:ce:1b:31:a5:57:6a:dc:ca:
                    bf:3c:be:29:24:77:da:be:41:53:e8:e9:1c:8f:4a:
                    b9:ea:77:7b:ed:38:ae:77:5c:e7:8b:97:2f:a5:92:
                    e1:39:8b:20:34:f4:87:08:92:ff:4b:e4:11:04:19:
                    52:c9:ce:df:1b:f6:33:56:59:85:7a:ab:3e:1d:80:
                    c7:f4:19:c1:6b:8a:55:2f:4e:0e:71:51:03:53:ff:
                    7b:7e:8d:39:7f:63:1f:7a:ce:72:89:40:87:34:09:
                    a6:a1:bb:db:89:26:f9:82:75:ae:6f:64:6f:b4:68:
                    66:d1:f0:79:cf:34:16:2a:41:3f:4a:34:74:40:80:
                    66:72:c0:ee:16:6a:68:e1:7f:88:1d:4f:1c:4b:e2:
                    1d:eb:a9:2a:58:50:fb:48:ee:ae:61:e6:d0:a3:7f:
                    87:e2:03:3d:4c:f8:12:50:06:16:41:32:48:06:ca:
                    cc:e3:f9:36:a2:a2:80:90:04:f9:2c:22:d2:54:07:
                    2d:ef:07:12:f1:31:4f:0f:22:79:04:e5:f5:37:95:
                    4d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C4:F5:3A:50:BB:1B:10:18:95:35:9B:8D:7B:CB:CB:81:7A:35:7F
            X509v3 Authority Key Identifier:
                keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:23:28:c8:2c:f8:48:92:8d:0a:54:58:b0:b2:fe:e1:4e:23:
         e1:92:15:aa:3c:d2:d3:f6:5c:98:6a:4a:cf:82:9d:23:48:89:
         f4:56:a9:af:47:37:6a:11:5f:08:a8:39:7f:df:4f:f8:6c:eb:
         2f:01:76:82:2f:13:f3:aa:58:b6:5f:18:aa:7a:90:84:bd:01:
         20:63:41:e9:65:ed:2f:f6:e1:f2:89:67:51:d4:33:09:a8:aa:
         76:e8:50:a7:4c:35:d7:b8:79:99:2f:66:5e:76:f4:aa:d3:3a:
         99:2b:0c:ba:a8:2f:d3:01:1f:22:6c:b6:40:f8:c6:89:4c:3a:
         84:e9:b0:c4:c8:ba:1c:dd:a8:27:38:aa:00:fc:8c:20:dd:16:
         19:2e:11:cc:f3:42:45:8f:77:bb:47:50:88:60:c6:03:ed:71:
         b6:18:b1:03:23:1a:25:56:9a:3d:c2:2d:8a:5e:94:24:ab:53:
         62:9e:6c:e5:df:2a:64:25:42:54:8d:c5:19:64:da:c9:1a:7c:
         4d:e8:51:c9:b0:b8:32:99:6c:1c:5f:27:c7:11:cd:89:16:fe:
         9d:4e:68:0a:9f:ba:48:af:16:20:20:c6:9a:ba:b8:14:ca:9f:
         08:f0:3b:9d:f6:d6:9a:8f:7e:96:51:a2:9e:6f:fc:03:cd:59:
         ef:d3:df:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----