Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
File:                     DU7hk7MBZltW9ngPIl_UTRRAk68.mft (raw, json)
Hash identifier:          2L5BgLEk6gqS+OcfG9ek2M+v3KbgflE4bSGVSABMT1Y=
Subject key identifier:   B8:78:A2:2D:0A:18:C2:1E:46:96:39:F5:6A:59:0D:6C:5D:70:3F:86
Authority key identifier: 0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF
Certificate issuer:       /CN=0d4ee193b301665b56f6780f225fd44d144093af
Certificate serial:       0195E190129480A3F6B1C55C314CD0D8F106
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft
Manifest number:          14C6
Signing time:             Sat 29 Mar 2025 11:01:10 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:10 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:10 +0000
Files and hashes:         1: 1YRiu8peow1lTJm9FFHNR8FDAbc.roa (hash: M9tDjK8KKMnpI4O/RkjitSO923bPcK4J9p0X6jE60uA=)
                          2: 5PEhmSsylF5Cqau7beHA-5hPtJA.roa (hash: qg7bbX5JQ150gt7VxDeJGfpKO/e8RwLdHWGQ9Drrzh4=)
                          3: DU7hk7MBZltW9ngPIl_UTRRAk68.crl (hash: sAPzXzE/vD+9k1Gcf2WvCg7rOtJvVL/OMNQbQj8jSV0=)
                          4: Rywj_aQoQHnt260cmm4BjBhDxUY.roa (hash: YR+g76t/hDT4XdE58vT7jt0pb9k9/4GBzS42rk3Jatg=)
                          5: WrHytc5z_RMrlF1ugU748saPCOY.roa (hash: aZHYeaaNVTa6TtaiWMmR/j6toZEkqeQ4kR1tqb6QqNc=)
                          6: Z0NstpNFGmZvTmitOe-bpzN3pog.roa (hash: vOxHYK5BHjTLsLb9PBk4RNol3oeaceKJ5r4uuQeEoSc=)
                          7: bEQstBMsIq-USPnqf3A5IqnOEVs.roa (hash: dlwl7Y9SvRWuBlEJJDLRBkmdTgGXUzcp/rFQfnHi1fE=)
                          8: m6l4SopMeawwf-xaFHTLkByhnNs.roa (hash: S7Ljuk3eaMITMnrAZF6Kgxf8yU/v0CtwtarS6ZzuIMk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:12:94:80:a3:f6:b1:c5:5c:31:4c:d0:d8:f1:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d4ee193b301665b56f6780f225fd44d144093af
        Validity
            Not Before: Mar 29 11:01:10 2025 GMT
            Not After : Mar 30 11:01:10 2025 GMT
        Subject: CN=b878a22d0a18c21e469639f56a590d6c5d703f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:02:61:6f:93:1a:e7:49:92:7d:54:7a:2b:7b:
                    8d:dc:63:73:d9:98:8e:28:00:48:75:c9:6f:ac:ae:
                    8a:fe:62:8b:78:63:cc:1b:4b:ef:10:bd:7b:64:3c:
                    28:23:43:6d:2a:d3:0e:ef:c9:0a:f5:1a:53:a0:4b:
                    3f:77:95:20:38:95:2f:3d:8f:28:d8:6c:fd:c4:82:
                    e4:03:6f:15:d7:ca:95:0d:fd:3d:09:68:82:23:30:
                    7d:ae:c5:da:d1:a7:50:c8:32:2b:3d:4e:f3:01:ee:
                    c1:f1:b8:c7:b6:ee:3a:5f:e7:08:ca:8a:9e:c3:bc:
                    6f:57:5c:46:65:2a:82:d6:41:b2:6c:38:1e:01:27:
                    55:08:4b:98:83:e9:82:67:b9:e6:6e:2a:36:12:b0:
                    be:8f:20:c1:ca:4b:f8:21:c1:7a:5f:2f:b9:b3:8f:
                    67:89:aa:aa:ba:63:5b:89:0e:13:ac:3d:3d:f8:1a:
                    cf:3a:c4:4f:32:40:7a:b3:4f:67:0b:52:92:ee:ea:
                    4f:f3:ea:70:90:1a:6c:f0:d6:63:47:34:47:82:ae:
                    8c:68:3b:b6:36:b2:22:ca:59:99:a7:e6:6b:39:ae:
                    4e:53:04:4a:b5:1e:e1:8a:a2:06:de:5e:04:5c:86:
                    f2:a9:c3:79:7b:12:2d:44:4f:bc:a7:d6:03:68:b3:
                    a6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:78:A2:2D:0A:18:C2:1E:46:96:39:F5:6A:59:0D:6C:5D:70:3F:86
            X509v3 Authority Key Identifier:
                keyid:0D:4E:E1:93:B3:01:66:5B:56:F6:78:0F:22:5F:D4:4D:14:40:93:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DU7hk7MBZltW9ngPIl_UTRRAk68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/097111-3098-4cf7-ac0f-9f7e0f862f1e/1/DU7hk7MBZltW9ngPIl_UTRRAk68.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:6f:99:ee:b9:df:3e:8e:cb:e1:53:5c:4f:bf:ed:7e:93:1e:
         84:64:18:1a:c2:4b:fc:04:f0:ee:b3:e7:5e:49:84:07:e0:c1:
         ba:f7:d1:09:46:c1:53:8a:9a:dc:7f:d4:1a:e6:34:69:e8:b3:
         6f:b0:de:6f:5b:fa:c3:0a:47:95:31:47:c9:75:39:eb:1b:39:
         4b:4e:71:59:45:0d:13:fa:85:d5:42:9b:6c:ca:74:93:c9:6f:
         c5:1e:a2:8d:6c:b5:34:55:bb:e7:63:e9:a2:e1:a3:b5:4c:af:
         49:56:9b:b2:e9:3e:99:31:18:c4:cd:96:1e:56:c5:7e:0f:c2:
         5f:d8:40:58:d9:ad:74:d8:a9:af:9c:3a:5d:a9:fb:1e:00:35:
         ee:ff:ab:e0:66:61:6b:f8:b2:7f:8a:4e:5c:38:c6:ef:31:14:
         8d:05:c1:37:0e:8d:94:77:f6:36:10:ae:a0:3b:dc:92:20:9d:
         32:07:5a:ad:34:76:70:b8:55:c5:d4:98:0a:f2:85:69:b2:27:
         28:8b:f2:7c:c8:fb:21:b9:7b:84:bb:9c:3d:12:15:ec:83:c1:
         8d:2a:6e:97:66:6b:ac:7c:76:9e:fe:d4:a1:2e:ae:e7:e7:3e:
         05:95:97:30:5f:78:a2:10:0a:f2:46:0a:9a:f9:27:22:6f:4e:
         de:fe:58:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----