Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft
File:                     n68L-T_EOB__fnqoa0B2wDMkL_o.mft (raw, json)
Hash identifier:          4bkfHkQsa1YCf+0cJ6dVeDKmX88EwSF2sNJFVm4fwlk=
Subject key identifier:   FB:0B:87:B5:A1:B8:0D:29:7C:15:34:A1:6B:AE:D8:B0:2F:ED:2A:9B
Authority key identifier: 9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
Certificate issuer:       /CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
Certificate serial:       0195E07D380B703491D8D9EDC04526462C83
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft
Manifest number:          14CA
Signing time:             Sat 29 Mar 2025 06:00:57 +0000
Manifest this update:     Sat 29 Mar 2025 06:00:57 +0000
Manifest next update:     Sun 30 Mar 2025 06:00:57 +0000
Files and hashes:         1: Orf9dx9lP2Aq1RT4wGk6GNHmX0A.roa (hash: gI2QpRe4bPe1SlAUdlEc7QRHCXDom37+yMhhP7/Xj/Q=)
                          2: lDWyFXs9JgGOhDKJmAMUd3zIK5w.roa (hash: 2q/dpzMOt8Z4VXz7M3w9S5I7SSYKdZBx6BiCTtjP4qg=)
                          3: n2XhVDe2ggLEf7MqKLu4m2oiDCI.roa (hash: s/3Lc9LGACFlvJc5xu/AbuESJL8OCx+FeCaTIr0OPuE=)
                          4: n68L-T_EOB__fnqoa0B2wDMkL_o.crl (hash: JLAEhL04aMC4RqeV2220vwWfm/W0GbGoin6TGGx3F7g=)
                          5: sU28xKNoz0ebnELHinDQhAfTGOk.roa (hash: LcOsotfaJ4XCbUKW+GqA754WNTnRpE0EUj8P0SYZfGM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:38:0b:70:34:91:d8:d9:ed:c0:45:26:46:2c:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
        Validity
            Not Before: Mar 29 06:00:57 2025 GMT
            Not After : Mar 30 06:00:57 2025 GMT
        Subject: CN=fb0b87b5a1b80d297c1534a16baed8b02fed2a9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fb:96:3a:31:f9:95:fc:ed:98:7a:c5:0b:b0:
                    ae:77:76:22:4f:19:ed:d4:f1:5e:d3:97:59:3b:be:
                    ed:36:d6:62:1b:51:f7:52:78:8c:f1:9f:bb:d9:14:
                    27:18:21:01:d8:1f:5a:bc:32:50:ac:af:5f:28:c2:
                    2e:b0:7e:c0:f5:fd:df:59:a7:17:2b:41:86:1c:e6:
                    79:a8:a5:69:c4:20:a3:df:4b:a5:4f:e8:de:4f:64:
                    e3:a4:2b:75:be:6b:03:85:bb:99:34:1b:ce:1a:70:
                    e5:74:66:90:39:06:e2:dc:01:6d:83:52:59:d8:2e:
                    6a:3c:49:7f:87:81:5b:8d:7b:d1:3d:f8:9f:a5:a0:
                    d0:ca:30:34:78:de:d5:d2:1c:9a:69:21:82:2c:0f:
                    6a:f2:37:23:aa:7f:ff:5d:da:97:25:b1:bc:f0:16:
                    af:54:4f:89:c8:e2:ea:55:70:ca:df:88:e2:17:6a:
                    0a:a5:25:62:66:08:fa:86:97:fb:7e:01:ad:96:98:
                    d0:38:15:05:a1:79:31:01:e3:fb:0b:f5:45:9a:b2:
                    50:2e:b4:32:2b:94:bb:ae:20:d3:d3:be:20:22:4e:
                    ad:52:88:68:6e:62:6c:58:a0:ae:34:e9:e4:a8:46:
                    aa:09:ec:3c:4a:06:e0:8e:f3:c5:d3:83:73:f8:3a:
                    4c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:0B:87:B5:A1:B8:0D:29:7C:15:34:A1:6B:AE:D8:B0:2F:ED:2A:9B
            X509v3 Authority Key Identifier:
                keyid:9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:a8:53:f2:1b:57:1c:3e:ce:61:b2:db:5f:dc:44:0f:b2:9f:
         69:e3:31:15:44:4a:17:a3:bb:d8:bb:20:54:d2:77:7d:2b:e4:
         d2:ba:08:1d:ca:bd:fc:b6:94:1a:e0:e3:71:88:d9:b4:64:c8:
         82:72:22:08:64:19:fa:b0:1a:46:c6:b6:5f:1b:45:5d:cb:1e:
         35:8d:58:2a:13:6f:d1:bb:6b:75:45:99:eb:75:dd:27:67:5c:
         66:cd:4d:e8:7d:86:8a:6f:36:41:e9:27:e1:f4:c9:d6:f2:d2:
         3b:5a:b5:f7:61:36:23:2a:85:c1:f8:b0:ae:69:4b:3e:68:41:
         6f:64:91:71:9e:fa:7a:d7:78:f0:28:08:4a:51:12:d9:db:2b:
         ed:22:aa:fe:f8:99:b3:6f:80:a6:0a:b3:f3:5c:fc:98:3f:d5:
         09:05:f5:f9:5b:6e:e1:d8:b6:67:23:a6:53:0d:4b:5e:ea:4d:
         fd:16:97:ae:23:85:fb:d6:63:1f:17:f8:c5:76:44:36:07:19:
         91:14:4e:b7:06:f5:5d:b6:90:9d:06:e6:43:9e:5c:48:04:99:
         4a:97:dd:e0:83:b1:a8:47:05:16:23:24:c5:f8:94:18:ca:e5:
         e7:b7:8e:23:4c:3a:de:1d:09:19:b1:dc:4c:51:cd:05:3c:a9:
         1a:04:dd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----