Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
File:                     um1Gt2v9bUK71XXi8m_OE2ubam0.mft (raw, json)
Hash identifier:          F4g4JMhJDbuQDux9jsPXqm0oiFZJvs8y59zAphWt9+g=
Subject key identifier:   F6:49:C5:F8:19:97:13:15:21:E3:CD:8C:67:64:B2:F0:98:62:96:9B
Authority key identifier: BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D
Certificate issuer:       /CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
Certificate serial:       0195E00FC7B8D7228E8EF8BF67E61A50F3F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft
Manifest number:          14C3
Signing time:             Sat 29 Mar 2025 04:01:25 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:25 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:25 +0000
Files and hashes:         1: EtrP_0kTCR5Y3QaHgesqcI8qZFg.roa (hash: lv6k+R6R1gqgBt1ARniBlQxWo2X/ZK4cvTKtuDAns7o=)
                          2: HJSwnKLNgwsgkTsWAJGJbhRxrYg.roa (hash: k/1eexGDlUI1L69r6EcdCcQNtE5gQOhNhUm2uiosEaU=)
                          3: qY4Pn2rojeUbBpawT6zBM5pztdI.roa (hash: bdIYON38cjUERyQWKrGfXHpQNcizuWiDaFQ+QLNzEDg=)
                          4: uJnVKXAIy60auoGPJwESNrSmHkE.roa (hash: ebmKrJfXBBi07GAqHoc+u6RWZ0ztB7xPcVNK+Z+MDgQ=)
                          5: um1Gt2v9bUK71XXi8m_OE2ubam0.crl (hash: yjkjPihH5nnvZnj6J8Ig9TxvqZzDQrbR6eBQ9/OWEE4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:c7:b8:d7:22:8e:8e:f8:bf:67:e6:1a:50:f3:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba6d46b76bfd6d42bbd575e2f26fce136b9b6a6d
        Validity
            Not Before: Mar 29 04:01:25 2025 GMT
            Not After : Mar 30 04:01:25 2025 GMT
        Subject: CN=f649c5f81997131521e3cd8c6764b2f09862969b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f5:60:46:61:e8:fe:0c:25:66:f5:03:6c:9c:
                    f9:89:9b:0b:b8:05:b6:98:68:1b:69:96:62:00:8c:
                    db:7e:a1:79:01:e1:0e:f4:c0:13:80:7e:ec:85:d1:
                    54:8d:80:b5:f6:0f:da:b3:e9:43:c1:77:14:d3:b9:
                    31:53:37:74:d2:57:48:44:6b:42:73:36:b6:25:82:
                    f9:a2:ff:58:0b:63:90:98:9c:b2:66:f1:c1:66:1d:
                    1a:75:bc:7b:80:97:1c:8e:d8:c6:7a:2b:3e:58:c6:
                    eb:f5:19:20:5d:40:f4:2c:74:8f:31:fc:26:cb:47:
                    ca:19:3f:cc:bc:ba:48:b2:5d:d2:e6:4d:b1:6a:4b:
                    37:f8:df:cb:55:16:83:7d:22:57:49:cc:8e:76:90:
                    a3:e6:52:2c:e0:92:ea:b8:9c:ec:d3:18:cc:28:f8:
                    79:c0:ea:7d:6a:85:82:95:ad:25:9f:d3:c2:44:d8:
                    fb:e6:fd:50:ca:5c:1f:85:f0:b9:9e:9b:b5:9d:bc:
                    e5:c7:38:1b:88:b5:cd:8d:89:45:07:88:43:2c:45:
                    f8:62:3d:00:72:81:75:40:21:48:d0:02:72:81:8f:
                    68:91:87:bc:ab:6e:f3:e0:ac:76:01:00:13:a6:d6:
                    37:08:c2:eb:50:99:ba:67:56:0f:3c:6c:04:1a:37:
                    19:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:49:C5:F8:19:97:13:15:21:E3:CD:8C:67:64:B2:F0:98:62:96:9B
            X509v3 Authority Key Identifier:
                keyid:BA:6D:46:B7:6B:FD:6D:42:BB:D5:75:E2:F2:6F:CE:13:6B:9B:6A:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um1Gt2v9bUK71XXi8m_OE2ubam0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e8be0e-a80d-4a4f-b52f-dff1cffb7b18/1/um1Gt2v9bUK71XXi8m_OE2ubam0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:71:25:32:61:9b:c2:9e:40:c8:ca:3b:6f:a1:bd:79:27:9a:
         f6:f5:7a:b9:0d:e4:35:da:9f:4b:5d:ec:2b:e6:8d:74:7b:0b:
         f8:7b:cd:e9:c4:75:fd:8e:c0:af:98:cb:ee:43:03:75:ed:1d:
         2e:5d:bb:3b:f3:3b:ab:9d:12:62:f5:a2:d1:e8:6a:1e:6d:79:
         9f:e6:fa:7a:76:18:78:44:b5:df:41:63:70:54:92:8b:06:f5:
         28:ea:72:ea:95:c3:fd:63:97:1f:7f:08:33:6c:6a:71:7d:1b:
         85:83:f9:bd:1c:17:d3:0e:70:66:44:fb:cd:68:40:eb:4a:c2:
         9c:92:7c:a4:45:e0:3e:0a:92:01:78:eb:ec:3f:df:26:9d:81:
         bc:55:86:a3:09:a4:8e:43:f1:95:c4:09:17:f1:95:b3:59:95:
         b8:96:84:ea:39:1b:79:aa:66:95:77:99:4a:da:a7:ad:32:17:
         be:70:6f:0b:8e:f7:b7:93:84:a7:66:cc:ff:62:52:54:e3:24:
         35:00:eb:58:0a:4d:6d:c3:89:b7:41:ed:55:77:3c:4c:51:b0:
         f4:a0:97:3a:00:b7:61:1b:92:47:e6:c7:63:e3:f7:2b:b0:93:
         91:bd:ba:d6:dd:e4:e4:51:4b:4f:11:8c:c5:ee:fd:62:38:05:
         4e:8c:9c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----