Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.mft
File:                     mmwLn7E_QxbtbKP4b_xxhcCds9c.mft (raw, json)
Hash identifier:          bPvIrY5VCyUcDnvl3M9mUd0ARdkhgm8bEdSDR2i0CiM=
Subject key identifier:   AA:E3:65:FF:64:51:F0:D5:FD:22:F1:E0:CC:DA:0E:CA:B5:2B:D1:99
Authority key identifier: 9A:6C:0B:9F:B1:3F:43:16:ED:6C:A3:F8:6F:FC:71:85:C0:9D:B3:D7
Certificate issuer:       /CN=9a6c0b9fb13f4316ed6ca3f86ffc7185c09db3d7
Certificate serial:       0195E1225E772CA1E9ABB649B13F3710D57D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.mft
Manifest number:          0273
Signing time:             Sat 29 Mar 2025 09:01:20 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:20 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:20 +0000
Files and hashes:         1: 1ttBSna0nLfwG1nJtSGf5q_JjKk.roa (hash: m74pjqodozkLHsQi98B9EOi05a8gpyyAWgkyD/Vzf2c=)
                          2: 9nGi0GaQ-mUZLQJZf4HlCcb6wIc.roa (hash: pSH8ptTsxSAlhoS4qLcEBiOaIHL5q7GZu0kDDTwaHJ4=)
                          3: mmwLn7E_QxbtbKP4b_xxhcCds9c.crl (hash: y8hxqohgqbvAuydHPNU30MDIQa2hyA7C9nP+ouFpDtQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:5e:77:2c:a1:e9:ab:b6:49:b1:3f:37:10:d5:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6c0b9fb13f4316ed6ca3f86ffc7185c09db3d7
        Validity
            Not Before: Mar 29 09:01:20 2025 GMT
            Not After : Mar 30 09:01:20 2025 GMT
        Subject: CN=aae365ff6451f0d5fd22f1e0ccda0ecab52bd199
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a9:32:f5:a2:f1:e6:d0:c1:64:33:c9:e7:7a:
                    6f:97:6e:f6:2f:74:4c:28:71:d5:42:2a:93:33:ff:
                    17:4a:84:d6:bc:bf:f5:23:f9:7b:21:69:ce:fd:7b:
                    7f:ab:14:ce:2f:3e:b8:d9:3c:97:a6:ec:ad:1b:b8:
                    7c:d4:0d:2b:8f:44:c3:de:35:56:9b:b4:7a:dd:80:
                    ba:1c:a5:47:51:0e:26:35:54:f0:19:5f:9a:77:d6:
                    ad:31:22:8c:30:bb:65:9d:b8:e3:41:00:23:32:d7:
                    88:b1:51:c0:a3:a4:f1:3c:a0:f6:fb:45:0d:47:25:
                    53:1f:ca:b5:f1:58:0f:f5:92:b0:ab:98:b2:53:39:
                    ae:c0:94:3b:92:e2:f7:04:77:ba:3c:e9:f7:43:5c:
                    8a:46:dc:a1:b7:36:ed:94:5d:6e:62:a8:38:74:06:
                    dd:48:b3:45:df:d9:a3:f9:0d:f1:ba:c9:e3:e5:3a:
                    11:2b:0b:a2:b6:6e:f3:ed:34:30:e8:76:9b:61:fd:
                    57:e0:b0:79:07:92:8a:5a:51:64:79:6e:48:a1:9b:
                    9f:f3:60:bb:96:96:d8:95:a5:59:55:53:5d:c4:5c:
                    dc:c6:1f:57:68:66:c6:a0:4c:63:87:79:fa:fd:bc:
                    30:83:72:44:e5:ec:6e:ac:c5:a7:c5:09:03:be:3d:
                    12:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:E3:65:FF:64:51:F0:D5:FD:22:F1:E0:CC:DA:0E:CA:B5:2B:D1:99
            X509v3 Authority Key Identifier:
                keyid:9A:6C:0B:9F:B1:3F:43:16:ED:6C:A3:F8:6F:FC:71:85:C0:9D:B3:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmwLn7E_QxbtbKP4b_xxhcCds9c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/50a239-d5bc-42fe-95a5-1ac08e8a8cb4/1/mmwLn7E_QxbtbKP4b_xxhcCds9c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:9f:11:06:8e:10:36:77:08:98:70:42:ea:fe:64:06:0f:bc:
         7d:76:84:96:1a:85:fb:a9:44:1c:98:69:e4:68:9b:64:fc:1d:
         3f:f6:60:58:cd:16:42:d9:38:a2:07:00:ee:1b:a5:0b:2d:0d:
         14:54:ed:a0:29:a8:4a:46:5d:98:47:17:91:74:4b:3b:22:38:
         f1:69:03:65:4a:53:40:6d:a2:b3:fa:fc:2e:62:fc:73:28:a0:
         34:3a:95:75:53:8f:18:96:d1:58:b1:d8:74:d5:56:d4:94:a5:
         bd:71:24:91:84:61:aa:27:52:f4:6e:95:b9:50:19:fa:02:7e:
         37:f5:b3:b8:ad:24:02:2f:b9:03:d9:22:10:f3:6a:71:64:3a:
         3d:a9:d9:1e:5f:d4:9f:6f:3a:a2:c8:51:fc:e8:e9:c8:21:6a:
         32:fb:7b:68:74:7b:11:f7:f6:dd:a6:5e:33:5e:e3:de:76:6e:
         cc:c7:ed:c7:fc:73:31:c0:a5:d4:81:32:01:b9:98:84:ef:0d:
         54:2d:44:43:df:62:02:8b:39:9b:bd:3a:89:6d:08:1d:4d:1f:
         ee:73:01:86:27:33:bd:a9:72:31:81:6c:9f:12:89:07:00:af:
         15:84:f1:ff:06:74:cb:eb:16:3a:4c:ac:3a:7a:59:3f:2a:0f:
         31:a6:a2:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----