Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
File:                     KflnDuKjDqyMCjncR_96jNJHOwA.mft (raw, json)
Hash identifier:          HgwaNdb+iiyb1bJ4Pw4YekG2hjRpV67shiEAMNfvFmE=
Subject key identifier:   69:90:EF:66:74:F9:09:AB:A0:CF:9F:F0:51:25:3A:2F:84:EE:C5:C6
Authority key identifier: 29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00
Certificate issuer:       /CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
Certificate serial:       0195E1596FE8C70D78738690CAF81FAD3F25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft
Manifest number:          0C8E
Signing time:             Sat 29 Mar 2025 10:01:29 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:29 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:29 +0000
Files and hashes:         1: KflnDuKjDqyMCjncR_96jNJHOwA.crl (hash: L3WX5ge39GHeHVaOzW4hDDj/I0yTaz1lPYZA44WM964=)
                          2: mL9iMZ16_8ZjCy4qonDTON3ib5Q.roa (hash: ZVZsKyrcHGv4PPqTEb+ceebYDVLTESRPFX1GG8GQzE8=)
                          3: mUB9Mn63gmxSfZpMf68Tr-CQjA4.roa (hash: j5sd8G9co8tEBEb8Kjzqu6zB4AaZ/F0GaTIxGbtmjPc=)
                          4: y2LXjfv6XAO363F71AjmXKGlqgQ.roa (hash: 4mLPhNeJT0HKJvx3+B0TdXW/+X53H3DeeKwHTkudT30=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:6f:e8:c7:0d:78:73:86:90:ca:f8:1f:ad:3f:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f9670ee2a30eac8c0a39dc47ff7a8cd2473b00
        Validity
            Not Before: Mar 29 10:01:29 2025 GMT
            Not After : Mar 30 10:01:29 2025 GMT
        Subject: CN=6990ef6674f909aba0cf9ff051253a2f84eec5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:5c:bd:47:2c:25:01:12:d1:f0:2b:89:28:
                    9f:a0:3e:10:7e:39:1d:0d:06:71:9a:33:27:6b:e4:
                    06:10:53:a8:2b:47:f1:3c:69:5c:1c:24:aa:d7:8f:
                    15:e9:88:f2:72:cb:43:16:56:8c:b1:9e:d7:14:d1:
                    86:c2:5c:a0:31:f4:d4:50:57:3a:ca:e1:00:10:86:
                    12:95:e7:d0:03:a5:57:55:8a:da:42:b0:2d:ef:48:
                    ad:4e:36:d7:4e:2a:5b:f7:01:24:90:c3:d9:1f:5c:
                    df:ba:99:45:9b:60:be:af:af:51:38:90:6a:19:0a:
                    01:4b:6e:98:22:66:2e:cb:83:72:d1:d4:c9:d1:91:
                    de:b9:de:75:fb:6b:85:8a:bf:1a:05:71:18:54:53:
                    46:87:d2:0f:99:97:08:71:08:ae:5d:b8:fc:a7:2d:
                    b8:f5:8f:f4:64:30:09:83:85:da:e4:ba:00:a9:bc:
                    2b:98:4d:66:83:f7:2b:cc:3d:8b:84:6b:78:98:79:
                    18:d1:d1:54:7a:fd:1e:95:35:f2:27:2e:03:9a:72:
                    27:04:99:f0:36:ff:42:0b:31:c0:d9:b4:51:16:5f:
                    b0:6f:42:9a:4d:b1:8d:49:e6:8f:aa:9c:bb:fc:83:
                    ef:46:d1:91:f4:42:f6:02:7c:91:ab:24:92:04:2a:
                    98:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:90:EF:66:74:F9:09:AB:A0:CF:9F:F0:51:25:3A:2F:84:EE:C5:C6
            X509v3 Authority Key Identifier:
                keyid:29:F9:67:0E:E2:A3:0E:AC:8C:0A:39:DC:47:FF:7A:8C:D2:47:3B:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KflnDuKjDqyMCjncR_96jNJHOwA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/2ff76d-f116-4430-8407-6e29efdfd4e3/1/KflnDuKjDqyMCjncR_96jNJHOwA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:c3:84:3f:e3:51:de:6c:a6:f4:54:d7:e4:1f:6b:74:37:5b:
         01:1a:6e:e3:df:25:d6:e8:af:20:ce:81:a8:a4:1a:3b:37:5c:
         0c:0b:e0:de:4f:3d:b4:56:7c:01:dd:c3:b3:4e:3a:01:95:d1:
         c1:33:e9:a3:43:63:b1:62:30:04:0e:23:26:d6:4d:1a:72:00:
         f2:33:87:b3:70:a3:ac:35:47:bb:7f:18:35:f1:77:dc:e0:3c:
         4b:22:4e:15:a3:8f:fb:d1:fa:e9:be:a6:68:6c:6c:8e:a2:d7:
         d7:ef:0b:cd:bd:0f:37:b9:ab:53:16:1f:f2:c1:79:8f:91:72:
         fd:33:ae:bb:60:86:a0:15:36:c3:cd:7f:d1:d1:ec:dd:6d:88:
         ee:9d:54:41:66:a8:a3:7c:0b:f4:d0:d0:f5:5c:54:51:4e:88:
         e3:b5:02:99:df:ad:2f:64:1f:78:30:e8:b6:15:7b:d4:d3:ae:
         5a:1d:58:54:82:98:9d:21:e0:92:92:16:a5:2d:0e:4e:a4:54:
         17:b4:9f:8e:2a:ab:33:71:54:7e:b2:1e:2d:26:54:c0:de:ab:
         ff:bf:44:f3:e6:9b:50:69:53:b4:85:61:68:8f:ed:1d:70:1e:
         a4:2e:b3:f7:29:19:cb:e1:29:63:8d:4c:67:b7:e3:5e:9a:8c:
         ae:b1:c9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----