Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
File:                     dkkoqXvpVTdwE9OCxilA6VDdISs.mft (raw, json)
Hash identifier:          1v+cZ+mmhtKs/K1wCXaxqldzPuEWAik6HxuiQYrw1nU=
Subject key identifier:   F3:B7:D2:A1:DC:D3:68:CC:BF:01:69:1D:B9:9C:91:A7:7E:52:3B:AF
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Certificate issuer:       /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial:       0195E0EB095464B23B92D4191FCDB70D805F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
Manifest number:          0F9D
Signing time:             Sat 29 Mar 2025 08:00:54 +0000
Manifest this update:     Sat 29 Mar 2025 08:00:54 +0000
Manifest next update:     Sun 30 Mar 2025 08:00:54 +0000
Files and hashes:         1: FcY_QKqq9c1xfH6rECvdKY1Kcu8.roa (hash: Ju8mYMjl2LUkVKbzqtiMt1rTH2nwPvl1R7kMAYH3RPc=)
                          2: IeAOnvbZbd0JxF7ran2IKsJXZmY.roa (hash: a22ZpV1PraD9QyqLIF4t6hPyMcIcLe+GxaE9NUf90hg=)
                          3: LS7cmX4hkxBo29n9xBMkazlGUQA.roa (hash: LcZigv6OQHpGmVW5BHzHMIZtI+TTJsjlraR4mOoxOrA=)
                          4: bHETVGvggsNe0a6WvXBELNSVwc4.roa (hash: ghxBEvOC//7xSO8+ytfjs+nd2Bn+dpSbYc1UKClOMyw=)
                          5: dkkoqXvpVTdwE9OCxilA6VDdISs.crl (hash: fqcwqTgxdOEOOMSUKSp2wRQRegPF6Yn/BbkL1w7oPZk=)
                          6: qJx6x_1Si80i7zgxLEJabwqPPdM.roa (hash: VSNbxo3HViYCFTqzC6xV6bqWlabz9RKcmoeLCtu/aVM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:09:54:64:b2:3b:92:d4:19:1f:cd:b7:0d:80:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764928a97be955377013d382c62940e950dd212b
        Validity
            Not Before: Mar 29 08:00:54 2025 GMT
            Not After : Mar 30 08:00:54 2025 GMT
        Subject: CN=f3b7d2a1dcd368ccbf01691db99c91a77e523baf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:74:44:e2:a5:90:92:cb:ae:e2:52:ee:8b:fe:
                    07:a1:05:a0:c2:26:51:4a:e6:3b:78:2c:02:f9:5f:
                    83:ed:ea:b0:42:e6:77:5d:eb:19:0c:8f:cd:94:e7:
                    5f:bf:8a:f0:84:2b:21:1a:30:91:3b:aa:a4:9d:be:
                    d4:c3:69:b5:48:73:e4:3c:4a:57:47:0e:9a:c3:9e:
                    e8:12:d9:07:43:3a:c1:3e:ad:71:46:7a:ea:67:c4:
                    f5:2c:c2:ca:4a:aa:b3:1b:97:00:4b:41:13:62:c1:
                    95:93:6f:40:75:21:43:d4:c6:c3:be:b8:24:7f:2e:
                    d5:f5:08:82:30:fc:15:95:dc:b4:fa:72:9c:38:9c:
                    5c:d7:1e:85:a2:a8:56:8d:50:7c:15:ca:46:4f:87:
                    3b:ae:aa:2b:41:6a:5f:48:4b:1e:fa:05:f8:f1:5f:
                    fa:1b:20:52:53:e8:db:fa:c9:21:e5:6a:b7:fe:c4:
                    30:1e:36:35:a7:74:a4:56:cf:cb:f6:cd:7a:21:a5:
                    6c:d6:57:57:b2:2b:eb:e0:7f:9c:c3:0e:a2:40:6d:
                    34:58:24:07:70:ca:cc:88:21:95:52:df:ca:5f:05:
                    96:3a:a8:e5:fb:cb:62:2b:db:fb:6e:5e:65:4e:3a:
                    78:01:27:c3:b8:af:e5:af:a2:52:ae:44:b0:8b:84:
                    ba:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B7:D2:A1:DC:D3:68:CC:BF:01:69:1D:B9:9C:91:A7:7E:52:3B:AF
            X509v3 Authority Key Identifier:
                keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:d3:98:65:55:f3:dc:34:e8:07:9a:97:e0:6a:a8:7a:27:4d:
         c5:5c:bb:4e:34:41:9c:6d:8e:80:da:d7:25:bf:be:17:ee:06:
         bd:6f:fe:5f:48:de:bc:51:c6:46:05:df:1f:0f:4d:f2:f4:f4:
         81:68:52:9b:7f:a9:18:72:7e:a3:ba:b7:9c:b7:a0:e2:ba:0e:
         5e:b3:96:74:8c:1e:a5:ba:ab:c3:ee:56:d9:96:be:3a:e2:f7:
         ab:84:9c:15:2d:f6:77:4b:b8:ff:ed:29:35:83:3b:c3:88:c2:
         a6:1f:ae:70:78:d3:5f:32:94:d5:64:75:a5:42:e6:02:b5:37:
         e0:a5:08:2f:d7:98:c9:31:42:ca:5b:8b:42:a3:16:fb:b0:c2:
         39:64:f5:3e:d0:5a:2e:97:78:55:ab:5c:cd:ad:8d:81:52:f9:
         9c:10:27:26:54:82:7c:f3:1e:74:37:b9:1f:bd:ea:bc:57:cc:
         97:b7:83:0b:82:ca:83:de:d9:c0:c1:a5:14:53:fb:f6:82:9e:
         4f:4d:b4:0f:ce:5a:03:53:b3:10:ea:08:26:ab:d1:cf:fe:b0:
         f5:52:90:bd:ac:28:99:be:fb:7b:fa:54:93:c1:72:74:b6:71:
         e9:51:d1:23:34:77:ce:fa:9c:62:54:87:ce:77:c0:35:bb:f7:
         9a:c4:44:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----