Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
File:                     3Prn1OadQuT0yV2Z9IK5qUTb78g.mft (raw, json)
Hash identifier:          sZ0tp7GcKaRvvpWrMBd7F3o+KsUg64Koyyg3/4q63j4=
Subject key identifier:   CB:D2:DA:4D:1E:FA:24:C0:CB:BD:B3:30:87:88:0D:5E:BF:D0:C9:D9
Authority key identifier: DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8
Certificate issuer:       /CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
Certificate serial:       0195E0EB175F6EA68FC9CA0C9FBA10ACF08C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft
Manifest number:          11A8
Signing time:             Sat 29 Mar 2025 08:00:58 +0000
Manifest this update:     Sat 29 Mar 2025 08:00:58 +0000
Manifest next update:     Sun 30 Mar 2025 08:00:58 +0000
Files and hashes:         1: 3Prn1OadQuT0yV2Z9IK5qUTb78g.crl (hash: MOYAhISMHMQBcaV7aCTLwyRLFDyendlLPMyIVW3cwnA=)
                          2: AFa9BeMRC9KZa5ESZVY3qezRhqo.roa (hash: kFgjZZQAO7DQ4A//2mPuGomN/dVKyDVTDikOVl1cxRM=)
                          3: oTU6jls5Cbp2h-8jJVa1y-YZLoo.roa (hash: UlQbXDO/2Z5fLH/VOiXf6qQdUrJ+q43vGjJDK0Fi6XA=)
                          4: onN6KmPVXQwrcGzs19GCsiDsKrQ.roa (hash: z68kDOoDWacxs1gAQw1w/1PdDLWcZUVC2dAlyVoGWL0=)
                          5: rrglEeDtNMMTRuZ3vbypZH_RQmE.roa (hash: urqCGELvaxYkBx+UEtrFXZNDg3RBmJzxwZn3ZWt36zo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:17:5f:6e:a6:8f:c9:ca:0c:9f:ba:10:ac:f0:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcfae7d4e69d42e4f4c95d99f482b9a944dbefc8
        Validity
            Not Before: Mar 29 08:00:58 2025 GMT
            Not After : Mar 30 08:00:58 2025 GMT
        Subject: CN=cbd2da4d1efa24c0cbbdb33087880d5ebfd0c9d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d4:06:73:d8:83:95:2c:4c:ea:d3:16:66:5e:
                    55:e0:52:55:40:03:5f:13:80:85:b6:02:e2:be:f9:
                    25:fd:3f:9d:f5:c5:7b:c1:2a:e7:1d:fe:39:b1:e6:
                    3e:6c:93:85:7f:28:90:86:96:f9:50:ae:66:d1:31:
                    c7:79:3c:78:e7:59:1a:c5:9a:f1:bb:a3:ff:1c:6f:
                    aa:54:74:6b:ac:ac:9f:08:90:d9:4b:ac:27:c1:fc:
                    49:2c:e6:96:0b:38:7a:a6:e4:3e:19:4a:74:52:9b:
                    40:59:b3:b0:19:8e:d2:58:ce:ef:1b:d7:35:1c:30:
                    02:4e:38:30:3d:ff:83:ce:9c:a8:0d:d5:90:fa:c9:
                    93:d3:67:9e:f5:ec:c1:d6:2a:1b:7e:37:53:80:ca:
                    9f:a0:c0:04:f6:f1:11:7a:f8:09:2d:48:5f:b6:be:
                    a6:07:8e:17:5d:1d:81:ee:48:b4:a5:e2:ac:a9:1e:
                    1c:21:af:fc:ad:10:7d:87:fe:ac:e7:5d:53:6d:2c:
                    79:f7:8b:7b:cd:0b:33:5f:c8:05:d4:a1:f5:27:f5:
                    8c:56:8b:3b:a4:70:be:b7:e7:bf:61:c3:7f:d2:3f:
                    9a:c5:c5:e5:fe:22:91:2d:de:9f:61:c0:fc:a9:69:
                    7d:ea:77:bf:d3:bb:1a:79:89:2a:37:ab:3b:db:f1:
                    f2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D2:DA:4D:1E:FA:24:C0:CB:BD:B3:30:87:88:0D:5E:BF:D0:C9:D9
            X509v3 Authority Key Identifier:
                keyid:DC:FA:E7:D4:E6:9D:42:E4:F4:C9:5D:99:F4:82:B9:A9:44:DB:EF:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Prn1OadQuT0yV2Z9IK5qUTb78g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9342f8-df9e-45bb-972f-37273df3901c/1/3Prn1OadQuT0yV2Z9IK5qUTb78g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:0c:f5:38:89:ea:b8:84:79:5d:3e:ac:86:9d:b0:b8:6a:bd:
         2e:2d:64:10:bf:17:31:b5:af:12:1d:c6:88:2b:88:a1:8a:61:
         1c:34:e2:b4:85:4b:b9:d2:70:4d:52:f7:6e:ca:05:0f:71:4f:
         c0:60:f1:00:ff:f0:4d:b5:cb:e2:b7:83:b4:6a:32:5f:0d:16:
         07:35:1c:ec:6f:dc:76:f1:df:ba:04:2a:b9:0b:04:9d:ad:02:
         00:3c:97:5d:6d:df:3c:0d:52:4d:e9:dd:5d:b4:a1:19:0c:6f:
         be:1a:87:02:ad:79:13:a2:12:19:8b:22:f1:f2:18:b3:de:c4:
         76:69:6b:57:85:5d:8e:7a:2f:04:6b:5c:75:d7:5d:2a:6e:42:
         4e:6b:0a:ae:8f:7a:98:69:be:c0:73:d1:44:25:46:87:d3:d7:
         c8:04:9b:67:ec:95:a6:5c:21:95:7d:3f:88:9e:a5:e9:66:25:
         07:8a:ac:24:ad:80:46:ec:5d:f6:28:60:a8:0d:2a:d8:1c:55:
         ac:02:4e:40:b8:3f:24:0f:e2:4c:91:41:17:d1:3f:6a:62:10:
         4f:78:fa:02:27:83:18:26:63:f9:24:dc:cc:81:95:12:c6:72:
         93:92:41:05:b3:25:c3:15:8b:60:a6:6a:a8:ce:99:56:c7:87:
         14:ea:46:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----