Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
File:                     eCa2BPb4wD_p32yY5h856u11VaU.mft (raw, json)
Hash identifier:          LWxbAEUley0Ai6SyXX5Yzjytj2SMe5/auZwzZMTEs6Q=
Subject key identifier:   A6:F3:47:EF:48:1B:FF:2E:86:E2:3E:C8:E2:9F:6E:D0:2A:84:C5:FE
Authority key identifier: 78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5
Certificate issuer:       /CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
Certificate serial:       0195E1590A316F3AE96827725EA7AF608458
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft
Manifest number:          14C3
Signing time:             Sat 29 Mar 2025 10:01:03 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:03 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:03 +0000
Files and hashes:         1: 842mFfTvhpMCx5O_VlnhbyC5DPc.roa (hash: Y0uuEcHUMVeKlkZHSWT3ejEG3c8HH3MwGXKgGUvrUyI=)
                          2: W8WjY9YYv8iljwDY45MThfbAk84.roa (hash: dxrwQI2i6fKiTUhyw6w33TI4PVDbBCXq3QCNhLROPGc=)
                          3: eCa2BPb4wD_p32yY5h856u11VaU.crl (hash: SpoK+iFxIa3kKg0vTWgIGneKp7s/qI5lophiPuaWvco=)
                          4: vkWj2nsjhackefLzTv92x4E_mxA.roa (hash: WehOyXDU50Ry7h0fUSMpd4vK4omZPxG7KTOejPEntu0=)
                          5: zHyi0zO0aepoCj3YfwkO2CsuHDk.roa (hash: 64jkIZP0sVFKnl22gW7SzeQyLPkea22pOG/lfDbS5eU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:0a:31:6f:3a:e9:68:27:72:5e:a7:af:60:84:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7826b604f6f8c03fe9df6c98e61f39eaed7555a5
        Validity
            Not Before: Mar 29 10:01:03 2025 GMT
            Not After : Mar 30 10:01:03 2025 GMT
        Subject: CN=a6f347ef481bff2e86e23ec8e29f6ed02a84c5fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:26:f7:0a:aa:6f:83:a5:70:fb:b8:7f:3e:d1:
                    01:eb:09:54:fc:48:71:3b:a5:1f:27:d2:3f:f4:2b:
                    9c:54:20:4d:8e:c8:d0:a6:45:fa:90:37:4f:29:a6:
                    66:d6:57:43:6e:03:5e:fe:52:9c:36:fc:2e:16:d3:
                    a7:0c:3f:c8:20:60:f4:8c:a4:93:18:23:6a:c0:71:
                    de:7c:d1:8c:85:4d:0e:e7:5f:b6:1c:de:f3:c5:0d:
                    c9:6e:55:ad:65:42:e6:9b:ee:ff:5b:05:8b:68:23:
                    94:c6:7a:4c:87:01:2d:f2:3c:53:f7:1c:1a:8b:0c:
                    4c:40:9c:fb:dc:84:58:55:2f:9e:0a:75:fe:90:16:
                    47:f6:4d:3d:63:8e:bb:fe:01:55:6e:08:e6:c8:5a:
                    9b:51:e9:e1:f5:80:c9:0f:b6:62:01:69:b0:65:7f:
                    bf:7e:fe:b2:1c:4b:0f:07:71:2e:b4:6a:55:0e:59:
                    18:0f:78:e1:dc:05:6f:bc:6c:c9:63:68:e5:fa:7f:
                    91:c9:9c:1c:65:d8:3b:7f:82:1c:72:b5:7f:5c:b4:
                    70:6e:74:61:20:47:45:65:6b:9f:f0:dc:e4:c1:60:
                    da:fe:90:b1:87:69:91:bf:b0:63:70:e8:71:c5:ed:
                    44:01:6e:48:03:17:e7:45:49:4d:ea:63:f7:a1:c7:
                    cd:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:F3:47:EF:48:1B:FF:2E:86:E2:3E:C8:E2:9F:6E:D0:2A:84:C5:FE
            X509v3 Authority Key Identifier:
                keyid:78:26:B6:04:F6:F8:C0:3F:E9:DF:6C:98:E6:1F:39:EA:ED:75:55:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eCa2BPb4wD_p32yY5h856u11VaU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c94c65-ea02-405a-bba7-ca0474adf373/1/eCa2BPb4wD_p32yY5h856u11VaU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:7c:c6:40:d5:84:37:23:93:01:89:c7:5e:f9:ec:93:61:ab:
         81:f3:da:fc:3d:ea:fc:81:93:a8:94:a4:45:7f:79:b5:ac:96:
         44:4f:bd:0c:bd:6b:58:c8:7b:02:02:be:9b:1a:16:75:16:af:
         21:9d:7d:ac:6b:5d:e4:57:86:2f:81:90:1d:42:aa:f3:12:c3:
         79:95:fd:31:5c:f7:5e:55:92:35:9d:24:f1:63:53:76:6a:88:
         bb:c1:63:a3:b7:9b:69:5d:c1:e0:48:34:b4:5d:13:6c:2e:71:
         d4:2a:d7:c8:f3:09:53:03:07:26:94:09:c8:2f:03:df:68:79:
         68:48:1e:ba:e9:29:61:73:13:7c:02:15:6d:a4:53:38:cb:2e:
         5e:41:f7:99:4e:d2:97:53:89:3f:6a:8d:6f:0e:0b:a0:3f:f9:
         d5:25:f2:f5:68:10:8e:7e:c4:6a:74:fc:ad:73:dc:ae:03:79:
         7f:ad:34:a1:91:0c:ce:6e:0f:af:4c:57:05:a7:e4:08:c2:9f:
         23:88:31:c9:46:5f:71:d6:00:65:19:f3:fa:5e:7c:b6:86:b9:
         d4:6c:95:c2:4c:fb:66:65:c3:35:05:ee:ab:9b:32:68:fa:3f:
         8e:d8:64:b2:74:1c:da:1c:72:90:cb:b4:c5:60:cb:77:45:35:
         f2:f3:91:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----