Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
File:                     vfo6-DmqHc51j0ieLTGuIgkvyZo.mft (raw, json)
Hash identifier:          v1NwuxeZew0TbPq1Om6H7R2yKITtsGHw39HjMWLh8Ao=
Subject key identifier:   E6:23:4F:7B:AB:ED:F7:39:B7:5D:B8:E1:AA:95:0F:C2:28:89:41:A5
Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
Certificate issuer:       /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Certificate serial:       0195E00FE42C1758ABDDF2579705AC51B03A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
Manifest number:          14C5
Signing time:             Sat 29 Mar 2025 04:01:32 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:32 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:32 +0000
Files and hashes:         1: 02L_0yvjrj7KDTzjU6X6m1mtpQI.roa (hash: n98M+U3c1grhlxXcswrUg59R80vb+hM1RgpHM3qQuPY=)
                          2: 7C0Ptfd131vRO631WH816-TiLmM.roa (hash: vVG6CyuAsSWdSPh0xSG091fPSEug6kwYq/eGfl7DFQA=)
                          3: LDkoUP_y05Q4menYaO8UkXEB7c4.roa (hash: KlbVBac/f0Y5FEisWs64/Ycn/xUCteAxkti9GeZFBNk=)
                          4: qrNw_4pWdm_geFtfy5BpF6RB3Lw.roa (hash: QyClSiOoVb03SqPau0rHxsvXZNW+BEw2UB08FmFuOP0=)
                          5: vfo6-DmqHc51j0ieLTGuIgkvyZo.crl (hash: yjmx7wxWIzQ76NfJrP6YqsWrKQRc6KxIq9Z5oVBnlrw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:e4:2c:17:58:ab:dd:f2:57:97:05:ac:51:b0:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
        Validity
            Not Before: Mar 29 04:01:32 2025 GMT
            Not After : Mar 30 04:01:32 2025 GMT
        Subject: CN=e6234f7babedf739b75db8e1aa950fc2288941a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8c:61:41:ef:ed:03:cd:24:20:16:08:b2:4a:
                    d7:5f:19:8c:1f:21:6e:d1:87:bc:15:e5:a8:e5:2d:
                    cb:a7:18:ce:37:f6:45:3e:24:0e:fd:4f:90:38:b5:
                    15:bb:da:49:e2:7d:ee:38:3f:b2:94:f5:51:17:6d:
                    b3:cb:1a:37:68:9a:e7:94:36:f6:3e:cc:1a:fa:2a:
                    97:9c:76:89:bc:85:5a:bd:1d:ab:e6:d9:1f:1f:24:
                    d7:5a:60:14:b8:f8:9b:44:2e:7c:d1:11:4e:e3:19:
                    ff:eb:44:03:04:7e:e7:24:87:e5:9c:6c:92:85:8a:
                    21:e9:ed:cb:43:d9:9f:d9:22:b3:e5:a1:67:52:9c:
                    ad:31:04:0a:d4:d3:21:20:96:5a:c7:0b:9a:86:16:
                    8f:2e:a6:7b:d6:a9:ae:43:18:40:c3:5b:2c:9c:2e:
                    cf:2d:61:9c:44:5f:8e:63:b0:1b:89:8c:52:1a:79:
                    d9:ed:75:6a:b6:4a:2e:fc:52:94:d1:2f:ef:3f:d9:
                    0b:4d:ce:bc:c4:b3:b8:d1:45:e2:9e:2e:c0:85:70:
                    be:ce:8a:35:b5:bf:c0:6c:5d:6a:a0:ac:10:cc:18:
                    bc:50:02:44:08:d9:36:9b:cf:1b:d0:07:86:d6:0f:
                    3e:43:6c:66:02:a0:7b:a7:a9:c4:01:89:0f:d0:1d:
                    05:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:23:4F:7B:AB:ED:F7:39:B7:5D:B8:E1:AA:95:0F:C2:28:89:41:A5
            X509v3 Authority Key Identifier:
                keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:38:d7:2c:85:08:39:b2:0b:7f:a4:71:36:86:a1:18:61:f4:
         8c:58:a3:0e:01:4d:89:3e:e5:f4:15:e9:27:fd:ce:e7:d0:e6:
         01:47:c6:e3:1d:cf:e2:98:d6:6c:d2:be:83:11:95:98:15:c1:
         bf:c1:1c:31:f8:89:d9:6e:fb:99:8a:55:6a:c1:3d:66:02:8d:
         76:e1:82:d7:bc:d0:c5:4c:66:3a:8f:90:1a:a0:8b:51:82:6b:
         8d:ac:c0:fa:45:e5:cd:f1:c8:35:5b:eb:ab:85:7d:af:e6:ab:
         a4:4d:ad:6a:2b:f3:f0:88:92:86:01:fa:48:a6:44:b8:89:c3:
         b4:45:df:e3:57:1c:2d:bc:c5:34:e8:5e:90:c3:48:25:23:65:
         e5:7f:f4:29:c6:60:45:d6:11:78:82:bc:00:ce:56:15:c0:63:
         cd:db:6c:a4:16:6e:7d:22:42:b9:64:69:4a:27:92:f5:9b:e0:
         0e:1c:45:45:dc:23:01:74:a5:e6:d4:22:d2:05:8d:02:51:fa:
         bf:62:71:c5:19:cb:27:84:b9:62:24:8a:ad:b5:bf:f7:3d:47:
         94:2c:65:12:91:5e:15:f6:20:c3:8c:3b:e1:d9:44:ee:3b:9e:
         b0:4e:3e:3f:fa:0c:77:43:74:ea:af:a9:40:c4:b2:2b:55:47:
         4a:48:2e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----