Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
File:                     rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft (raw, json)
Hash identifier:          wWRtIu41x4okyAYBnk4fUSI9GPYCqf/RszIyha569Iw=
Subject key identifier:   66:E6:13:C5:D6:A7:F0:8D:D6:75:28:1D:C5:B8:B8:15:C4:22:40:D1
Authority key identifier: AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE
Certificate issuer:       /CN=acf910f36291c3c224ddb596d956543197f163de
Certificate serial:       0195E159E4E7A51585D0619DC3DC8121A452
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft
Manifest number:          1483
Signing time:             Sat 29 Mar 2025 10:01:59 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:59 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:59 +0000
Files and hashes:         1: 8eCmueBEOSsAwO1CHji1gE-_3LI.roa (hash: l5xAz+doohGBqrtfOFmej8JqC0mnQVYKQDeIBm1ToAM=)
                          2: DtvFUItZKqyAuC0qVO7xK12HQO0.roa (hash: z+RXHMTUA/r+jPrvwbj//4T8rVTRPjeJiPQfneeOdNs=)
                          3: J5Nzje0wm67y5K6t3cH8za4h1d0.roa (hash: qpAZrfLDKqU9NwWz286x02NAvGgP6kk6hcqmLvVKz8c=)
                          4: klr8zXHLn6mli5IxFQr4R9FyMV0.roa (hash: I+JofOB+oo9ML4ISV8ODtPvO84Ef+x27qR0wwlNvvJ8=)
                          5: q0Eds_oIDCgE88gdpI6r4kp33h8.roa (hash: sqISDzfU6JYm1UcY8Gcz5wDK5BeEeTVU67gC4Pg+KUk=)
                          6: rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl (hash: 37ttaE2AIfJ86oqWh9V1LxZ31fgJt7kb5EoIS2XV8Ng=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:e4:e7:a5:15:85:d0:61:9d:c3:dc:81:21:a4:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf910f36291c3c224ddb596d956543197f163de
        Validity
            Not Before: Mar 29 10:01:59 2025 GMT
            Not After : Mar 30 10:01:59 2025 GMT
        Subject: CN=66e613c5d6a7f08dd675281dc5b8b815c42240d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:da:43:70:94:6d:12:6d:b9:d6:5a:b6:0f:e9:
                    f7:dc:a0:7a:35:1a:a1:f3:64:9a:90:1b:79:b4:78:
                    2a:0f:18:6f:37:b9:1f:77:35:eb:dc:26:93:b4:b4:
                    d9:21:6b:fd:19:65:7b:7c:d5:04:86:27:4f:1d:74:
                    b9:89:10:90:d2:fc:f5:dd:7e:13:c1:0d:3f:71:f7:
                    83:71:15:2d:c9:e8:db:a1:80:e9:4c:6c:96:86:06:
                    32:ed:66:78:8b:d0:d8:d1:8a:2b:59:4b:61:28:4d:
                    a7:d0:07:dc:64:81:af:47:14:69:ec:07:e9:02:6c:
                    1d:4e:d2:a7:50:b9:52:1d:73:32:9c:4d:7b:28:14:
                    62:0d:c2:19:0d:b8:42:e9:b6:74:e7:73:3d:f7:35:
                    57:d2:62:1a:0d:d5:1d:3e:9f:95:1d:21:e5:e7:a5:
                    ca:98:b6:8d:b7:cb:7c:8a:1c:f0:af:02:60:10:e2:
                    04:b3:65:e2:cd:bc:d5:41:6e:9a:76:d7:6b:e8:64:
                    b3:de:7d:d5:7f:6b:f2:b6:74:b3:1f:3d:8e:f8:e5:
                    80:da:9c:74:62:5d:72:78:67:3b:16:d3:6e:8d:75:
                    28:a8:62:6a:38:ad:d1:6f:84:95:b9:25:28:c7:64:
                    9e:a1:31:a5:9c:18:21:18:68:c5:71:46:5b:b5:bc:
                    0d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E6:13:C5:D6:A7:F0:8D:D6:75:28:1D:C5:B8:B8:15:C4:22:40:D1
            X509v3 Authority Key Identifier:
                keyid:AC:F9:10:F3:62:91:C3:C2:24:DD:B5:96:D9:56:54:31:97:F1:63:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPkQ82KRw8Ik3bWW2VZUMZfxY94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1f5e07-32b6-4114-8b0d-d3b58f698148/1/rPkQ82KRw8Ik3bWW2VZUMZfxY94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:2c:f5:9f:2c:21:03:1f:d6:7c:5f:3c:c5:0f:8b:db:d2:a3:
         de:f5:65:9e:c1:79:5b:8f:a4:ab:56:41:bc:c3:95:bc:4a:9e:
         82:9c:f4:ba:42:27:84:29:c3:94:8d:2b:fd:6a:b6:b3:0e:e1:
         ed:5a:82:38:e3:b9:1f:b7:85:2c:9b:e1:4d:c7:b5:8a:7b:bc:
         70:bb:8b:98:33:3f:e4:03:30:7d:63:38:7b:39:bd:2d:0e:a8:
         2b:b2:03:7f:88:32:cf:1c:3c:6b:bd:2c:f4:37:7f:6e:44:bf:
         80:5f:50:6c:d1:2c:6a:f8:17:44:95:ed:55:db:0a:51:35:d5:
         72:00:2a:1d:80:c9:59:88:49:b9:25:59:94:91:51:ce:1f:fb:
         48:2d:31:0a:4a:f7:6e:db:da:82:65:04:b1:8e:17:34:b9:58:
         21:83:67:66:33:9d:2d:64:b0:8a:31:9a:eb:0e:fb:3e:35:23:
         99:f0:be:00:fa:07:0e:64:5c:28:9f:d1:9b:a5:7d:9b:31:fc:
         02:c6:c3:84:bc:fd:4b:ca:05:14:51:1b:15:a2:78:9d:16:90:
         ad:cd:b1:5e:69:5d:70:9c:df:3f:7b:f5:cb:f7:25:02:20:d5:
         a3:82:22:ea:c8:94:89:d4:61:fb:3d:81:bc:9b:d9:fe:70:57:
         1d:e4:1f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----