Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
File:                     O-wSwhEIE08AwDUxB9YMza6--y4.mft (raw, json)
Hash identifier:          XcsaZ+xLRs4kJNpQd9mBTIwG5xT7TpwpzifJ0PYmOVM=
Subject key identifier:   73:72:98:F4:84:50:C5:79:ED:1E:8C:DF:A7:96:06:81:A6:D6:08:64
Authority key identifier: 3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
Certificate issuer:       /CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Certificate serial:       0195E00FB2C6DDF92C97E5A8892F7DEC04D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft
Manifest number:          06D6
Signing time:             Sat 29 Mar 2025 04:01:19 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:19 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:19 +0000
Files and hashes:         1: O-wSwhEIE08AwDUxB9YMza6--y4.crl (hash: 85k2munCHDHteDDYc/N+kmTkSNRd48n4elZuXYGedwk=)
                          2: u2WMlvCqvR8C4fxIzSZBue7OPx8.roa (hash: qmjTqeANx+dQ4nPXTJuIRLRK9MoQ6Usvr9tkzeOywu8=)
                          3: zTvzZc3tlOwLBnnj-NPbv4PhboA.roa (hash: msHMJXILJsy2yJM+hVyJRqp2m3iGv1So8lJvoritOiE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:b2:c6:dd:f9:2c:97:e5:a8:89:2f:7d:ec:04:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bec12c21108134f00c0353107d60ccdaebefb2e
        Validity
            Not Before: Mar 29 04:01:19 2025 GMT
            Not After : Mar 30 04:01:19 2025 GMT
        Subject: CN=737298f48450c579ed1e8cdfa7960681a6d60864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:40:d0:9c:9e:f3:0d:bf:37:28:f3:08:32:89:
                    a4:b8:27:1c:d9:50:3c:b6:b2:71:74:83:8c:dc:91:
                    07:22:41:6c:28:bf:47:b8:53:0d:69:57:e4:79:24:
                    44:58:51:14:28:6f:69:16:f5:98:97:b5:cb:83:28:
                    a4:ec:f7:80:bd:f7:14:45:f3:89:2c:bd:b9:fa:e6:
                    d2:39:ad:dc:83:d3:e5:a3:8f:53:4b:ae:f0:75:ec:
                    f3:d1:f7:4e:e7:3d:3d:03:d0:18:24:9c:85:81:bc:
                    7f:1b:b1:9f:3d:03:e6:64:3f:cb:e9:6b:d8:fa:2a:
                    fa:75:42:d5:57:52:24:06:1a:a5:77:b5:3e:5a:1d:
                    c9:da:2c:b1:2d:57:38:fb:f2:73:b2:19:93:dd:f2:
                    ed:2e:18:de:d8:4d:89:e4:25:ac:aa:a7:a3:a0:0d:
                    d5:54:90:16:a6:1b:42:52:0d:ad:87:f8:22:36:fc:
                    e3:4f:21:5d:45:6c:90:8e:19:f2:37:bc:7c:6d:19:
                    e7:be:bf:35:f0:82:56:15:0b:a4:e9:0f:88:d7:ff:
                    5d:cf:f7:33:7d:cb:1b:cf:1b:b0:1d:fc:dd:74:73:
                    e5:4a:a7:44:ba:ce:12:bf:d5:c8:a2:99:ec:a0:08:
                    a7:52:e2:5a:62:e8:8d:e1:b8:5f:2d:83:eb:0c:57:
                    22:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:72:98:F4:84:50:C5:79:ED:1E:8C:DF:A7:96:06:81:A6:D6:08:64
            X509v3 Authority Key Identifier:
                keyid:3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:7f:c3:74:22:a1:09:de:b3:72:81:d6:2e:e5:6e:d3:72:15:
         86:79:99:66:f9:37:d9:c5:7c:5e:21:06:44:3b:bf:96:fa:9f:
         70:db:35:59:f9:a3:f8:e3:c3:1a:f5:b3:9e:bf:e1:1e:9b:eb:
         a6:5c:48:c0:dc:5b:c4:e9:96:8d:18:33:1e:66:9c:31:d3:4d:
         d4:0b:6b:f8:04:94:3a:97:de:d5:12:b9:de:7c:19:3c:14:35:
         22:56:5d:ee:b5:e0:af:7a:74:a1:34:25:6f:85:43:56:7d:22:
         da:6b:87:48:d2:f0:eb:14:e4:09:11:f5:58:57:f2:db:6b:8f:
         28:f7:e7:0d:56:63:ad:51:ca:da:82:f9:2c:4f:f9:c2:a6:9c:
         38:ed:2a:0c:fa:42:f9:ec:74:04:65:b0:c4:1b:03:fb:eb:cf:
         88:de:ff:67:e0:0c:3f:45:ab:24:80:59:5b:5f:91:77:db:66:
         53:80:6d:b4:28:f8:f0:17:88:99:3c:d1:08:14:df:c9:fd:97:
         88:8d:59:e7:69:ef:14:b6:da:b7:4b:7c:85:42:87:42:a6:4b:
         05:1a:de:90:1d:78:cd:c3:07:c6:5d:c6:41:f8:a2:e9:4f:af:
         a5:b3:7c:36:91:ec:43:6d:68:fe:65:58:3d:b1:95:36:1a:fc:
         08:d1:d5:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----