Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.mft
File:                     nBzRs8h3KVb6hVNahGS0yhlmOt4.mft (raw, json)
Hash identifier:          O3XysAf2GJ7fHnBcBmsuIgPvKag/i33CdAXGdumKPho=
Subject key identifier:   B8:3B:61:E8:65:60:11:3B:26:F0:06:B1:A8:DB:05:AA:9F:1B:BC:0D
Authority key identifier: 9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE
Certificate issuer:       /CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
Certificate serial:       0195E190544EEE84B296CC3C6A87F864D0D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.mft
Manifest number:          14C6
Signing time:             Sat 29 Mar 2025 11:01:27 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:27 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:27 +0000
Files and hashes:         1: JeBncY6ChKBRQOUTYTSFHZE1uH8.roa (hash: xgTh9uFZcGgpjhz25blPwKqXY1Nn7zce/RhA70u2mJQ=)
                          2: XOwu2ebvUDQPT_bMtirnTz4DXtY.roa (hash: +WWsZzcafcQYxozcv0fQHPsnMiE94A7luCuf63M9dXs=)
                          3: nBzRs8h3KVb6hVNahGS0yhlmOt4.crl (hash: cbDFzsox6jm2wlUnvINTFFX17kmgeDNTelMDDkZCoRU=)
                          4: o2jbAYhRTuQBmdDMbACuxNgCDog.roa (hash: l9P4NF0hkDAdmr9McK92Zf+I3x80Yj+ORPskROTVaoo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:54:4e:ee:84:b2:96:cc:3c:6a:87:f8:64:d0:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c1cd1b3c8772956fa85535a8464b4ca19663ade
        Validity
            Not Before: Mar 29 11:01:27 2025 GMT
            Not After : Mar 30 11:01:27 2025 GMT
        Subject: CN=b83b61e86560113b26f006b1a8db05aa9f1bbc0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:79:d4:08:78:4e:7f:9e:ab:16:f1:e9:43:f6:
                    92:35:13:ad:96:62:30:64:72:0d:c0:51:73:83:75:
                    6e:80:a6:d3:0f:1a:17:f5:7f:fa:1b:15:11:54:9c:
                    7b:3e:1a:33:fe:78:9f:d9:4c:5a:ae:6e:6a:7c:15:
                    21:25:7e:26:08:ef:bc:4a:b3:81:22:50:ea:ea:bb:
                    a5:e1:d8:4f:56:b9:f4:be:2b:69:99:5c:d9:9f:ee:
                    e8:30:ce:1e:68:27:a5:ae:04:7d:cc:95:ee:4a:f2:
                    9c:a8:c2:27:2a:36:d9:57:5a:bc:28:89:7e:ed:bb:
                    bb:38:b4:1e:8a:a9:9d:b4:92:84:0b:9a:b4:1a:63:
                    73:d0:87:bf:94:21:a3:32:29:60:4e:f7:eb:f5:5f:
                    6d:df:0c:15:e6:e9:b4:a9:23:90:47:e5:ed:b8:81:
                    5d:5a:d1:1f:0d:0d:f4:9f:00:0d:ae:32:16:d0:d2:
                    ad:62:08:29:ea:58:40:b6:84:cd:4a:75:fa:88:26:
                    59:44:74:9a:b6:ac:fb:0d:26:e1:14:29:e0:ee:ed:
                    17:86:a8:76:a1:0a:98:3f:a0:b1:4e:60:0e:5a:4c:
                    20:a7:9b:84:82:f8:c2:93:17:b7:bc:8e:55:87:a1:
                    ae:29:00:f9:04:3d:ce:6a:f8:86:46:8e:c3:84:83:
                    87:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3B:61:E8:65:60:11:3B:26:F0:06:B1:A8:DB:05:AA:9F:1B:BC:0D
            X509v3 Authority Key Identifier:
                keyid:9C:1C:D1:B3:C8:77:29:56:FA:85:53:5A:84:64:B4:CA:19:66:3A:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBzRs8h3KVb6hVNahGS0yhlmOt4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/06eab0-6c6e-4c95-bbdc-916047062a22/1/nBzRs8h3KVb6hVNahGS0yhlmOt4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:dd:06:06:e2:98:be:75:d4:fd:2e:b6:65:5d:31:73:97:00:
         5c:17:c0:c3:49:76:a1:8a:06:91:3c:1a:08:4d:01:84:6e:89:
         6a:a3:b7:6d:12:69:a2:8e:91:db:1b:b3:7a:be:47:b7:88:67:
         73:92:49:dd:85:ec:5b:84:fc:82:19:8a:62:57:73:8f:d2:30:
         27:62:02:58:e5:42:e4:df:68:d5:56:c0:03:d8:62:4d:7e:6e:
         80:01:83:e6:34:2c:78:29:99:5b:28:60:9d:e4:2b:e9:3d:0e:
         d4:88:fe:f2:01:33:e5:ab:72:3c:fd:1b:7f:98:2e:66:9d:3d:
         69:82:f7:8f:8a:87:d7:0c:cf:19:e7:56:b1:06:15:f4:75:d6:
         77:dd:8b:50:d7:19:ea:69:28:d3:6f:1f:f3:c8:18:40:30:cf:
         d8:c3:03:6a:ba:19:1b:38:78:1d:f5:23:51:e5:9c:8f:43:3b:
         09:e3:3d:fd:4a:79:e3:b0:fd:51:d1:2b:7b:e8:1e:d8:e1:5b:
         d6:54:e0:0c:19:c1:cf:d8:d2:6d:a7:26:f9:d3:1c:85:e5:95:
         72:ec:8c:23:7c:d5:8a:7e:5f:34:16:27:e8:c3:05:15:a8:72:
         5f:b2:9e:7d:c7:7e:d0:3d:39:71:86:66:ae:fe:00:25:3d:01:
         db:0f:1b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----