Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File:                     Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier:          fNXWXx5beUI0a0MawWJKnHlyc1VPBw9uNCNs0UYdpmo=
Subject key identifier:   88:6F:88:73:44:25:F9:5E:70:32:37:7A:2D:14:9F:3B:1D:4E:5E:0A
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer:       /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial:       0195DFD96684C6DF6E536415948CA76DEA31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number:          04F3
Signing time:             Sat 29 Mar 2025 03:02:01 +0000
Manifest this update:     Sat 29 Mar 2025 03:02:01 +0000
Manifest next update:     Sun 30 Mar 2025 03:02:01 +0000
Files and hashes:         1: Mz51AcN2wZIHDhS3_4YmvmIRGhQ.roa (hash: uO7pu6+EQ/hXwHNJ2EqENUuB+uo9LMGBRXK6r0igHMI=)
                          2: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: 87rUeCjC18mHYK6T9Pj9DZyhAxBs+E8DA39LurUDsZQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d9:66:84:c6:df:6e:53:64:15:94:8c:a7:6d:ea:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
        Validity
            Not Before: Mar 29 03:02:01 2025 GMT
            Not After : Mar 30 03:02:01 2025 GMT
        Subject: CN=886f88734425f95e7032377a2d149f3b1d4e5e0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:80:e5:ab:d6:91:a2:76:f5:cb:42:26:18:92:
                    0d:b9:f4:0e:41:4a:fa:12:4b:e5:29:c4:6c:a5:dd:
                    dd:18:13:06:95:64:83:41:ce:f7:5f:0c:29:34:35:
                    4f:aa:f6:a5:f6:ee:2a:3a:fc:8f:fa:9b:f1:bd:20:
                    08:7f:41:97:7c:13:17:d5:0e:3a:6b:76:7f:a0:4d:
                    7b:77:c3:46:f6:ca:f0:c2:25:6b:2b:f0:f4:d2:70:
                    08:03:93:53:db:a4:03:02:21:5d:b2:69:06:c8:cb:
                    53:8b:81:fb:fa:14:58:c2:09:8f:31:03:bd:01:a2:
                    5f:1a:22:4e:70:7a:72:77:31:27:64:b0:3d:ab:8f:
                    39:87:c9:04:16:e3:0d:17:3a:04:a6:93:62:7c:19:
                    92:04:1f:5d:a2:0c:a3:12:08:0b:e0:3e:a3:21:e2:
                    b9:cb:2d:87:f5:a5:8e:ff:89:72:1b:ec:bb:68:a0:
                    0f:b1:f2:67:cf:9d:6c:2c:9d:17:f1:1c:ca:11:e8:
                    6b:24:db:cd:32:c1:b8:d0:8d:7d:bb:5e:3f:b8:a1:
                    8c:c0:a2:ed:6b:80:07:98:13:e6:00:52:c3:db:f0:
                    b5:34:14:d7:ac:97:db:e5:19:86:68:bc:58:75:d9:
                    a9:00:a3:fa:59:02:52:cf:eb:92:67:89:5a:03:73:
                    c9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:6F:88:73:44:25:F9:5E:70:32:37:7A:2D:14:9F:3B:1D:4E:5E:0A
            X509v3 Authority Key Identifier:
                keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ef:71:72:e8:94:54:89:e1:3f:45:04:b1:12:1d:6d:ab:f1:
         7a:36:70:84:ad:7b:64:2c:cf:60:aa:9e:33:bc:6a:13:49:7d:
         a8:1c:a8:cb:ec:46:d1:9b:80:4e:7b:de:7c:77:1e:5b:9e:01:
         44:b6:bb:65:58:33:19:16:e2:e1:63:ce:9f:1e:c0:37:8e:88:
         3f:07:11:c0:d2:a7:a5:2f:50:16:70:bf:f1:b1:41:e6:40:5a:
         a0:d8:c5:9f:3c:a3:d0:72:cd:72:22:c1:cc:ce:32:16:8e:7d:
         f8:8e:64:85:7b:a6:c5:b8:a8:5c:41:0f:ac:df:2c:2d:2c:4c:
         ec:64:43:92:fb:7c:a0:c3:4d:a5:ea:f1:53:e4:74:0d:c5:7f:
         35:34:e8:42:5e:44:d3:c6:bd:84:1b:c0:d1:9c:bb:54:53:91:
         dc:c2:55:6b:7f:6c:15:4c:53:c9:48:f1:0d:ee:b3:99:08:3b:
         07:1b:60:e2:1c:e0:7b:49:28:ab:39:70:17:53:37:fb:a9:b6:
         2e:13:ed:87:57:ed:9d:f2:7d:4e:36:0f:84:6f:a3:19:6e:1d:
         a1:0b:b9:3a:b2:17:48:d0:dd:ce:f4:03:04:af:8b:0b:f6:e1:
         6a:75:3c:73:4d:18:18:cd:9e:b1:6d:ba:06:57:ad:07:d0:b3:
         91:d3:da:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:38:41 2025 by rpki-client