Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File:                     tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier:          6b8ZZ5/zrdKMiPVauOApyUMfGsAh670VY32+b2m3zR4=
Subject key identifier:   71:B3:40:D3:A0:BE:B5:7E:27:44:5D:C1:CB:A2:49:97:0D:60:47:5B
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer:       /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial:       0195E1901F175526FD11EA3C539CC0A3B9A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number:          14C2
Signing time:             Sat 29 Mar 2025 11:01:13 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:13 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:13 +0000
Files and hashes:         1: YO-tGwbdqI4YYY7I1KqnEaElBoQ.roa (hash: XZFdc4B2lVuIwGuWp8Gzl21H5s/bjgOkXy1zS/FUzmY=)
                          2: r8uOOwHL3Wt4pGrUJebg8yZ8WaY.roa (hash: Eioa5I9ONK/XZQXZG+CzeC8xkMTpLpCoDVH43Ycxzzc=)
                          3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: KhUlSC4i9lyZwm3tB/cnntaGP60gygJY+cnl73xi0Fs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:1f:17:55:26:fd:11:ea:3c:53:9c:c0:a3:b9:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
        Validity
            Not Before: Mar 29 11:01:13 2025 GMT
            Not After : Mar 30 11:01:13 2025 GMT
        Subject: CN=71b340d3a0beb57e27445dc1cba249970d60475b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9b:ea:21:92:c0:bd:84:73:16:21:f5:58:ea:
                    b4:86:f3:29:f1:00:7e:f8:f1:4d:5a:e1:f4:60:af:
                    38:c2:86:aa:89:8d:d6:f3:e5:f2:52:b3:68:9d:31:
                    48:fc:70:94:12:d0:6f:05:cc:a0:08:7a:1e:d8:5c:
                    c8:a1:72:22:8a:9f:3c:f2:88:f6:44:2a:f4:50:58:
                    c0:31:fe:c1:f1:63:76:07:43:43:e8:97:31:29:84:
                    05:14:0b:00:fa:47:e4:b8:ce:fb:6c:05:2e:10:3a:
                    a4:e3:aa:82:8f:97:60:35:23:69:88:87:f8:6d:15:
                    e7:db:fe:00:e7:4e:ce:d9:06:28:87:00:33:ee:62:
                    a6:51:e1:2c:1f:8a:6a:30:25:03:e9:cb:71:3e:d9:
                    5f:a6:01:e0:59:59:ef:29:bf:de:80:ca:fb:b3:1a:
                    67:92:d1:56:3f:d6:f7:3d:04:01:84:ba:a6:95:04:
                    f3:f3:d9:12:2d:ba:e3:8a:d4:a4:01:77:7c:ea:a2:
                    b3:06:ca:13:14:77:c3:ef:50:4f:98:be:a6:d4:89:
                    d2:09:40:2b:0c:b9:40:9e:e8:61:36:bf:89:41:84:
                    87:d9:52:dc:22:f7:1b:a3:32:b8:2f:b5:a5:93:c5:
                    71:09:5c:a6:8e:7a:4a:e2:07:86:e1:44:51:82:c2:
                    6f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B3:40:D3:A0:BE:B5:7E:27:44:5D:C1:CB:A2:49:97:0D:60:47:5B
            X509v3 Authority Key Identifier:
                keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ed:02:da:6a:90:53:a6:76:8b:49:29:99:ae:82:f6:6e:79:
         40:0d:b0:9a:32:bb:93:eb:4b:0c:24:6b:10:73:e5:1b:79:4a:
         fc:2f:b9:58:a3:72:17:8a:e2:6d:2d:a0:86:2d:49:17:52:28:
         db:66:cd:ab:d6:8e:54:71:ec:1d:20:b6:17:01:39:bf:38:7f:
         29:ed:79:9b:25:53:b8:30:0b:1d:29:dd:ed:6c:14:6c:de:93:
         38:f0:06:64:28:71:0c:fb:a3:33:23:51:84:07:81:fd:ec:d5:
         a7:0d:ad:30:ef:69:b9:c7:fc:4a:69:ec:41:a8:d9:31:d4:0d:
         5b:d8:66:fe:46:d9:04:81:7a:49:b0:3f:59:f8:ba:83:0c:f3:
         66:f2:81:2b:4f:c8:95:97:b3:b2:57:29:5e:42:28:03:c6:e6:
         20:71:e0:fd:d2:2f:5f:99:9c:75:24:70:6a:87:47:59:84:d7:
         b4:fe:08:f1:3e:b4:7c:1e:91:a7:56:4e:4f:ce:0c:3e:61:b2:
         18:5a:67:9a:8a:05:d0:1e:99:39:8d:e2:cd:a5:ed:70:3f:9c:
         98:9f:73:d1:74:90:36:56:68:ca:e4:38:e7:29:49:8d:ef:13:
         6e:d6:23:9b:94:0d:47:28:8d:e0:3f:d1:59:d2:be:0b:9b:ce:
         14:5c:bb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----