Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft
File:                     c3PB_1VAPUeSNGST92n40DO-8Cw.mft (raw, json)
Hash identifier:          pP4yL7qRFflf332RYZVhMfAWf+WA3Rwv/O7fe2pa7Gw=
Subject key identifier:   67:41:3F:94:0A:DE:63:FA:49:9A:11:34:86:34:D8:9B:22:DF:20:21
Authority key identifier: 73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
Certificate issuer:       /CN=7373c1ff55403d4792346493f769f8d033bef02c
Certificate serial:       0195E0EB8DB39BA299DB2B706CA31D3AC15D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft
Manifest number:          14C5
Signing time:             Sat 29 Mar 2025 08:01:28 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:28 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:28 +0000
Files and hashes:         1: NGx97u5kA3dUDgSnZsO_ai0a5zE.roa (hash: NM6MYaekH4qBVbHzQFehYG5HnPWSemWzqr91LDcaFoc=)
                          2: _VuqWh_9zLum_t2LzmiL-bKUpwU.roa (hash: fjTMbmjav2QqlRjLRKV5RKbBW9ZGH9k7F0uicD/W2jc=)
                          3: c3PB_1VAPUeSNGST92n40DO-8Cw.crl (hash: N6DbibDj6FXBhBvyzLAwql0ukjBauSQrCcEFWW0DKbM=)
                          4: dPuUFhV8NKMg1Eyzpo3XKKBrSyQ.roa (hash: JZO95le0AT9qZyGk77wE0TYV+xtaUVyy4hxb89m5QEk=)
                          5: vaiZZBMW7gJmX2SSJ_GsXtMQsxA.roa (hash: s+4rmOMySoNQOi+H+sRt31xxTfChmW9KgSsCZve3tZg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:8d:b3:9b:a2:99:db:2b:70:6c:a3:1d:3a:c1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7373c1ff55403d4792346493f769f8d033bef02c
        Validity
            Not Before: Mar 29 08:01:28 2025 GMT
            Not After : Mar 30 08:01:28 2025 GMT
        Subject: CN=67413f940ade63fa499a11348634d89b22df2021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:09:05:20:75:9c:21:a5:f2:b4:95:f9:34:c2:
                    45:d5:6d:50:64:bd:f0:52:20:19:6b:c2:b7:c6:f4:
                    1a:60:de:21:0b:38:f8:f7:dc:63:75:c0:b7:61:5c:
                    dc:71:f8:75:13:72:37:4d:05:b6:7b:b1:aa:1d:a4:
                    eb:99:3a:f3:3d:a5:6b:28:e7:7c:7f:7e:9a:d2:ca:
                    57:da:91:3d:31:c7:10:29:23:73:67:28:da:1f:97:
                    7d:4e:52:a5:04:b3:07:45:88:18:0a:4f:cd:66:ef:
                    d0:26:d8:9f:f2:c7:4d:8c:bc:21:18:0c:72:40:e8:
                    30:21:05:99:3d:c5:e3:0f:87:1a:56:da:e7:6a:9e:
                    d2:fd:d5:30:81:23:ca:13:8b:c9:6f:8d:d3:c2:a9:
                    5c:7f:7a:ca:80:09:7b:5e:b5:fa:fb:42:6e:db:1d:
                    81:7e:9a:47:56:f2:ca:54:eb:c9:e9:a0:b5:11:dd:
                    5e:81:e9:31:87:97:3c:52:4a:a3:6b:8b:20:25:9b:
                    86:11:8a:9a:10:c5:c2:86:5d:62:11:41:77:2b:44:
                    ca:f8:60:22:d0:e5:6b:73:b8:b1:32:dc:80:ac:b3:
                    7e:1d:53:66:c0:86:d2:f6:d4:c8:28:fb:04:cb:98:
                    9b:c4:1d:4e:5a:e8:8f:c3:e8:7b:0d:02:9a:56:dc:
                    46:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:41:3F:94:0A:DE:63:FA:49:9A:11:34:86:34:D8:9B:22:DF:20:21
            X509v3 Authority Key Identifier:
                keyid:73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:26:8c:0e:f7:0f:e3:84:51:79:27:5a:fd:e3:15:05:70:55:
         57:66:5a:d5:51:cf:85:ad:20:bb:0a:3e:79:1b:f0:79:d0:06:
         ad:cd:01:a7:a7:1e:e1:05:45:ce:38:35:d3:da:82:47:5d:1b:
         9a:2e:cf:d5:81:27:be:01:c4:93:72:3e:2c:a2:30:0a:c7:46:
         48:a4:b5:2d:3e:a6:f8:f4:4d:9f:65:67:71:6b:26:11:b4:c2:
         04:59:ef:42:1b:9f:53:1c:09:0d:58:44:6c:82:46:12:be:8b:
         22:2e:ab:a0:61:d0:6c:ab:72:b2:f2:9b:80:e4:8a:f0:69:24:
         0d:ac:ee:29:5f:f6:f1:73:7d:87:7c:6e:e6:f8:54:99:7c:00:
         bb:b3:dc:16:ef:6a:e0:ad:1b:80:c2:5d:b3:fe:ba:32:0c:a8:
         59:ea:c7:fd:e2:b0:01:03:9b:e3:50:48:85:42:06:37:6b:c3:
         cf:58:4e:ef:48:cf:28:a6:d9:a7:16:cb:62:0c:25:f4:4d:2d:
         cf:48:3f:95:84:a9:eb:cb:15:13:17:a0:e7:bf:1e:e8:7e:ef:
         b9:a4:dc:bb:fc:a0:ef:ee:75:42:62:94:f6:32:77:32:84:fd:
         6c:ab:85:bc:e2:f8:48:d6:08:60:f9:9d:ec:9c:f9:71:56:5f:
         3d:ef:e1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:29:15 2025 by rpki-client