Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
File:                     J0hJVnNlSeqzsG4jqricpZk6gHY.mft (raw, json)
Hash identifier:          vCiqGPhJJp9R18X5AcuamnH4mL26rpQMPaB0pK0u0gw=
Subject key identifier:   34:DD:2A:50:6E:C7:01:11:52:12:24:1D:7B:1E:67:76:BF:61:1F:80
Authority key identifier: 27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76
Certificate issuer:       /CN=27484956736549eab3b06e23aab89ca5993a8076
Certificate serial:       0195DFD952271F50F97027D3D544D0EDF913
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft
Manifest number:          10C6
Signing time:             Sat 29 Mar 2025 03:01:56 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:56 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:56 +0000
Files and hashes:         1: J0hJVnNlSeqzsG4jqricpZk6gHY.crl (hash: an+0CIoJseWq8ThewvyoPGe7hPGPLJ79XrEehNMici0=)
                          2: JSfSNBZp2sArMnNqgy7JPjlV3w0.roa (hash: AAxuDoIwBhXDcehYAfqhoDL4a0JHM/VmkCzff4ZSoTk=)
                          3: aHgUlmeQvXSLOAXmjY6OG9x7CHw.roa (hash: EkeJb1vk/DYNvMk3tNYmPq0HrdN72YN06ty6+3e7rPU=)
                          4: hOUd1wZ_zMaTKuCxsCn2r2bH2BU.roa (hash: bxwt1u/r3VzOjW3gEkeatdflQyeXrR7mqzyeYNfcLHY=)
                          5: tW9YcXZ53Rr1e1oEOmqCt5AR9Sc.roa (hash: O3S/RX4GnOSFqdUE+99ZJDVtp7vahAb9JLGw0JZrYQw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d9:52:27:1f:50:f9:70:27:d3:d5:44:d0:ed:f9:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27484956736549eab3b06e23aab89ca5993a8076
        Validity
            Not Before: Mar 29 03:01:56 2025 GMT
            Not After : Mar 30 03:01:56 2025 GMT
        Subject: CN=34dd2a506ec701115212241d7b1e6776bf611f80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5d:a4:20:e9:95:50:66:a5:12:6d:90:ff:85:
                    7a:1d:e9:b6:8f:2b:cd:e0:82:fc:7f:75:6e:a3:e3:
                    bb:26:ef:1f:cd:ad:ef:7e:d3:a3:cd:21:4c:2c:4f:
                    12:61:c9:36:f1:73:6a:5b:0d:7a:d4:84:44:8f:fa:
                    0c:30:d9:6e:11:1e:48:85:7e:0a:a3:86:74:07:fd:
                    ef:43:b8:8e:50:ad:fd:87:e4:07:8a:26:d0:d1:f0:
                    10:ae:b6:18:62:e0:f0:e7:55:e9:8d:a3:73:49:cc:
                    77:29:7a:e8:ba:71:34:95:a0:de:d2:3a:3f:b5:75:
                    33:85:32:cf:8e:16:5b:d4:d3:e4:6d:c9:85:63:9e:
                    d5:a6:c5:8f:8b:94:06:2a:3a:1b:a7:50:6d:b9:42:
                    32:44:6f:0f:c8:d9:84:ec:59:47:90:af:0b:0a:b8:
                    33:9f:ab:8d:ce:ce:54:57:c7:c5:6d:9f:51:48:30:
                    04:aa:ce:67:e5:ec:55:c1:fb:24:6a:13:7a:dd:77:
                    c6:f8:e0:1d:37:20:29:7b:7e:f7:a3:8d:16:c3:3a:
                    56:6a:40:fd:fb:48:d8:0e:5f:66:fc:21:1d:f1:d5:
                    58:2d:11:c7:ec:ff:66:c6:64:b9:29:6a:1f:8f:2b:
                    8b:8c:7f:f6:f8:95:40:cc:aa:27:2b:f5:39:66:a0:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DD:2A:50:6E:C7:01:11:52:12:24:1D:7B:1E:67:76:BF:61:1F:80
            X509v3 Authority Key Identifier:
                keyid:27:48:49:56:73:65:49:EA:B3:B0:6E:23:AA:B8:9C:A5:99:3A:80:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J0hJVnNlSeqzsG4jqricpZk6gHY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dee578-f2c6-41c0-b728-ad163ab354c8/1/J0hJVnNlSeqzsG4jqricpZk6gHY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:9e:7c:20:0f:df:f8:17:4f:2e:2b:3a:ac:ca:6e:cf:7f:bf:
         06:72:48:9c:ab:61:05:63:02:3e:9a:03:50:8d:ce:7d:61:d5:
         89:cc:7c:33:6c:b8:f6:50:50:6e:11:73:3a:9e:46:ad:83:b1:
         dd:1b:27:d4:13:db:4a:9a:00:ea:af:d5:73:46:9d:e7:66:61:
         8b:99:cb:7d:4b:5d:f1:6b:1f:69:3b:24:ee:bb:15:b1:93:8c:
         7b:87:51:5c:7f:05:a9:3f:b4:72:2e:34:77:45:b0:48:0b:41:
         c7:9e:61:d6:1b:55:38:90:58:e4:d0:f5:b6:0e:74:f1:99:68:
         f8:17:e1:c3:de:ef:17:4b:23:e7:28:f0:cf:a7:b6:6d:99:73:
         bb:c5:28:a6:e3:99:53:34:23:6a:ac:c7:7c:9b:b8:73:18:a2:
         08:f2:b9:4a:e5:6f:35:8c:4c:81:07:24:4e:48:25:43:aa:3d:
         3c:10:81:ad:f3:6b:16:0e:ab:03:37:58:7b:24:97:0d:35:97:
         da:c5:cc:d6:30:37:c4:6c:dc:c7:7a:97:d3:d8:17:f8:4e:cc:
         9a:75:64:6a:f4:90:56:da:b7:af:fe:8f:bb:2b:a3:01:45:13:
         74:57:a8:a1:5d:c3:2f:15:7f:00:45:0b:94:65:85:6e:83:fb:
         d8:56:dd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----