Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
File:                     _zLWRjYhsT945TDRRP6sAj4eRYI.mft (raw, json)
Hash identifier:          VfQ/83A9ORhlgmrBAkPD+s9S1dyfQlBGLrl4dEosjUI=
Subject key identifier:   DF:37:DA:15:E7:F2:5B:2A:12:83:50:6A:59:A7:FE:B4:DC:50:85:B6
Authority key identifier: FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82
Certificate issuer:       /CN=ff32d6463621b13f78e530d144feac023e1e4582
Certificate serial:       0195E00FE5D391CBD1CC96D3B574DBA2D6FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft
Manifest number:          02B0
Signing time:             Sat 29 Mar 2025 04:01:32 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:32 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:32 +0000
Files and hashes:         1: _zLWRjYhsT945TDRRP6sAj4eRYI.crl (hash: rNeJEpe8scK3S53ii0K5+2xVE0pG6ecmhsD6OxvJTeo=)
                          2: eq5Eim9KBsmi3XU8htjV8anK_NE.roa (hash: EyydfpDXeHT6D2quI197b3wlG8U+XsJ23kRkj7BvaNU=)
                          3: zn5C8fAocAiuB2ZE1nzAyisylHk.roa (hash: AAikGT90Pn2msY679R7PQpNXsSFlO6fo1qsXsGW4c7w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:e5:d3:91:cb:d1:cc:96:d3:b5:74:db:a2:d6:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff32d6463621b13f78e530d144feac023e1e4582
        Validity
            Not Before: Mar 29 04:01:32 2025 GMT
            Not After : Mar 30 04:01:32 2025 GMT
        Subject: CN=df37da15e7f25b2a1283506a59a7feb4dc5085b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:21:fc:6d:a7:73:d5:f5:fd:b0:ca:ea:e6:98:
                    48:c2:66:75:9e:a7:d1:21:61:5c:00:83:ed:9a:4d:
                    2d:f8:23:bb:6a:1b:96:e1:e1:c6:03:e2:88:77:8d:
                    95:f2:a9:f3:07:24:9e:0b:e7:7d:64:9e:b3:88:1d:
                    77:d1:e6:e7:e2:67:07:22:d4:91:7d:0c:28:d6:a8:
                    f6:1c:dc:d3:2d:45:4c:a8:db:9a:f4:d1:d7:21:f6:
                    66:f9:de:ce:d2:d1:72:31:c3:6f:cd:f2:eb:17:93:
                    7c:18:9e:9e:37:4d:98:53:e2:91:e0:75:17:7a:2e:
                    0a:2b:92:2c:df:ae:ba:48:6d:b5:36:35:77:f3:fa:
                    83:df:14:20:bd:f8:36:3e:80:dc:4a:09:92:e7:ae:
                    81:10:b9:5a:6e:37:1d:2b:37:4a:8c:5f:4c:f4:27:
                    64:5d:3b:d6:94:e0:0d:c0:62:db:46:c9:23:1b:8d:
                    cb:9b:08:4e:87:d2:7d:9d:b1:e3:4b:99:52:f3:65:
                    6f:2f:b4:58:65:91:57:bf:e9:f1:c6:ce:a1:ea:0d:
                    89:de:b5:57:23:5b:ef:4c:4c:71:b6:67:63:46:17:
                    f4:44:41:e0:a3:36:63:48:a5:ac:a0:6f:19:69:26:
                    8e:04:18:08:6a:16:ea:5f:b5:98:a7:a9:65:36:c7:
                    de:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:37:DA:15:E7:F2:5B:2A:12:83:50:6A:59:A7:FE:B4:DC:50:85:B6
            X509v3 Authority Key Identifier:
                keyid:FF:32:D6:46:36:21:B1:3F:78:E5:30:D1:44:FE:AC:02:3E:1E:45:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zLWRjYhsT945TDRRP6sAj4eRYI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/f96900-cf17-41f5-ae28-2b00ea32937b/1/_zLWRjYhsT945TDRRP6sAj4eRYI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:99:ef:3c:bf:0c:02:88:6e:5e:b7:fb:00:1b:83:3d:a2:bd:
         0f:64:96:1a:aa:f9:ef:cb:c8:4b:f0:9a:91:c5:50:53:17:47:
         3a:31:d6:a1:15:d6:71:4c:61:2f:35:c2:ee:ad:32:0b:65:e4:
         36:e1:e3:bc:72:53:95:4c:25:b6:25:5b:7f:1d:74:b2:cc:3e:
         eb:4b:07:b2:8a:43:42:92:b0:2d:9e:32:8a:5d:b3:0b:c9:1b:
         32:7c:57:f5:3c:1f:70:60:a4:9c:ac:58:9c:78:d9:fb:44:5e:
         0f:6f:57:a1:b6:0c:0d:67:e0:40:64:5e:85:c6:d2:49:77:95:
         a0:00:69:70:b8:c5:36:46:11:ec:ba:cc:b8:f9:1d:5d:d7:31:
         89:09:3b:a1:5d:bc:9a:65:61:25:3f:bb:ac:e7:c4:11:17:5e:
         60:b1:83:5c:cf:17:19:2a:bc:9d:e1:90:09:f3:5b:07:75:fe:
         59:e8:30:f1:a1:4e:1a:a1:59:95:63:a2:40:b5:0b:6c:d3:0a:
         4c:0e:ec:cd:07:de:3d:24:cc:cf:52:06:85:35:c5:ea:97:7a:
         1c:bf:ff:e7:78:34:64:c4:bb:11:8b:4c:0e:c4:55:c2:ba:1d:
         70:f0:d8:88:97:23:da:3b:cd:ea:79:72:6c:3b:d6:67:f3:b9:
         ba:c9:6e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----