Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
File:                     T32IU5OzK17uOgv0M44Pqu88dTw.mft (raw, json)
Hash identifier:          ddHerJrz0DzOpQcVn5ZCSSbarCd2dzC/TyLHPeJXESI=
Subject key identifier:   69:1F:5A:A8:24:98:64:33:84:C2:A9:B5:7E:F8:7A:7E:70:01:89:98
Authority key identifier: 4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C
Certificate issuer:       /CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
Certificate serial:       0195E159871A017CEC2119E4D9FE564114C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft
Manifest number:          1290
Signing time:             Sat 29 Mar 2025 10:01:35 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:35 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:35 +0000
Files and hashes:         1: K_MyGvHR4IdSBZBjdPl8MukbNFk.roa (hash: HrMHQD3uVG8sdR811mtsQpZxidNNmctDC5Taskmcc7A=)
                          2: T32IU5OzK17uOgv0M44Pqu88dTw.crl (hash: Up2hAwBHvvK+G/N3hfZFFAEqHWawx8SF8V7KWn9MKr0=)
                          3: qt5f6XAHUjkOK9CEjEv3rd6845Q.roa (hash: JhK1mHuSEOx5aV2MrmFZp4Cs5i5KltcCemHPpXmD5pI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:87:1a:01:7c:ec:21:19:e4:d9:fe:56:41:14:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f7d885393b32b5eee3a0bf4338e0faaef3c753c
        Validity
            Not Before: Mar 29 10:01:35 2025 GMT
            Not After : Mar 30 10:01:35 2025 GMT
        Subject: CN=691f5aa82498643384c2a9b57ef87a7e70018998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7b:37:5d:cc:c7:dc:e7:4d:f9:b7:e0:f2:1b:
                    aa:0d:c8:f7:7c:fe:96:03:0b:5b:1d:90:12:24:f5:
                    f7:01:19:c2:a5:8c:83:75:76:71:59:2e:88:e2:dc:
                    fb:5e:4f:b0:b5:b8:1a:44:1a:62:84:bf:0e:0a:94:
                    7f:6d:de:71:4d:d6:c9:ee:3b:31:2f:5d:4b:1c:7d:
                    4b:69:a5:a0:a6:6d:f7:61:75:e8:3c:f9:8f:53:4a:
                    a3:b1:9c:e3:ac:a3:3d:87:86:dd:bd:e6:cc:26:25:
                    35:1f:d3:c1:d6:c5:95:c1:7b:c7:cd:d5:22:5e:d3:
                    6b:2a:47:e1:2d:cc:1f:2f:6c:f7:e2:ff:68:b8:86:
                    6e:d9:d9:19:e1:d8:d7:5d:9e:a1:55:95:f2:1f:d4:
                    af:29:21:33:aa:f0:40:71:19:48:76:d0:62:c0:91:
                    2a:50:f9:1c:47:66:27:73:29:09:aa:e9:67:e0:f9:
                    01:66:0f:29:e4:18:59:8b:04:59:38:d0:91:53:f2:
                    03:4b:33:f5:41:ba:39:3f:02:fc:7e:67:89:d9:58:
                    78:92:20:3f:a3:56:14:08:dd:b1:8d:cc:ac:ba:6d:
                    cf:4e:f2:2b:2a:2c:14:2c:7b:64:fa:dc:3a:f3:4e:
                    e6:c3:ee:85:3f:04:ad:8b:f8:7a:e8:31:9e:7b:09:
                    88:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:1F:5A:A8:24:98:64:33:84:C2:A9:B5:7E:F8:7A:7E:70:01:89:98
            X509v3 Authority Key Identifier:
                keyid:4F:7D:88:53:93:B3:2B:5E:EE:3A:0B:F4:33:8E:0F:AA:EF:3C:75:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T32IU5OzK17uOgv0M44Pqu88dTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f2a37c-a129-4c0b-9ed1-b18dac2d259b/1/T32IU5OzK17uOgv0M44Pqu88dTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:a2:be:36:44:56:dd:d4:c0:7c:62:b3:d8:fe:4b:86:c8:c4:
         42:05:4a:7e:fb:14:9f:29:23:1e:fa:cb:3d:2d:4e:1e:85:37:
         d9:1c:bf:e9:55:15:1b:82:83:66:b5:d1:ed:b3:8b:0a:65:d2:
         65:1c:81:e6:dc:41:50:44:4d:53:bd:b3:4b:f6:6f:76:63:58:
         90:3b:be:db:1e:76:65:65:c9:51:3a:38:4a:a1:4d:d3:ff:7d:
         e9:d6:32:67:d4:66:c9:1a:de:42:f5:2d:b0:1d:cf:66:3d:e1:
         91:93:40:c6:89:bf:cc:70:62:b6:5b:33:8b:8e:b6:74:a0:4c:
         48:78:f9:78:a7:be:6d:28:8f:fb:4e:73:3c:0c:8b:98:5a:26:
         04:cf:b1:4d:3d:d1:ac:b8:29:2b:20:6d:15:a1:22:62:18:20:
         ae:5c:8d:9f:4d:39:84:b8:b2:43:2c:a3:ed:4c:df:99:36:45:
         0a:33:43:a3:27:e3:af:e9:96:60:f1:41:a6:14:57:ea:65:a1:
         11:1e:d9:98:fd:53:39:e5:07:5b:a1:b6:27:1c:4f:c3:e2:29:
         10:bd:29:f2:44:2a:de:04:26:7b:b1:94:b7:a6:99:18:c8:bb:
         a1:0e:fd:72:70:d6:90:c7:cd:98:3c:7f:bd:e8:77:25:a6:95:
         f5:6f:64:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----