Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
File:                     M41C-7P0P1bduHguZUkKI9hbcuE.mft (raw, json)
Hash identifier:          xM6UdHvpkl7AdF7lcRgVStdcdNJRethOYa/agy0ULq4=
Subject key identifier:   0B:A8:6A:BF:AB:52:D2:03:F4:91:61:DD:57:ED:AE:0E:11:6D:B1:C6
Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
Certificate issuer:       /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Certificate serial:       0195E15965B7C12CA36E6C06F2760EBCB898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
Manifest number:          093E
Signing time:             Sat 29 Mar 2025 10:01:27 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:27 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:27 +0000
Files and hashes:         1: 2VDjJz9n7fNb41CHgZLbe3-QdD0.roa (hash: NTSasPJavqqAm1Q5mw/3+6GrzCofhHPMKBh40Uo0ZUU=)
                          2: M41C-7P0P1bduHguZUkKI9hbcuE.crl (hash: qHU1QV6MI91zPen6VRj7dL1Y1cq+FyvlpdZ/icrWkfo=)
                          3: NMTc166VLRQ_ryCoHTFRsR83UNY.roa (hash: BF6b/jv7hOFjJwviuax9djqsB1bZ01DAfPp+52Wk9Hs=)
                          4: Q7HPJqSYzwAL9MgLg7-PWUtYCvA.roa (hash: Kzr58t+vIh856QCyC0+GN1fLeCTArKtLtDUh4zpgaGA=)
                          5: cij7W2iI6HP-gownSQ8PPT8Mc5A.roa (hash: 6BJ7lK+voZ1wFQ4hs8ZtoQUXFJFgei3ZQ3BBrbapu48=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:65:b7:c1:2c:a3:6e:6c:06:f2:76:0e:bc:b8:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
        Validity
            Not Before: Mar 29 10:01:27 2025 GMT
            Not After : Mar 30 10:01:27 2025 GMT
        Subject: CN=0ba86abfab52d203f49161dd57edae0e116db1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:32:1d:7b:f1:16:a7:46:d2:53:46:e5:27:17:
                    a7:fa:80:76:04:a5:89:ab:d7:5b:ea:93:a2:3a:4b:
                    bd:27:50:e9:5e:34:ee:6f:3d:f0:cf:0d:bf:8a:ab:
                    61:70:e0:43:6d:d0:bd:f5:06:5e:ba:60:13:bf:89:
                    6d:98:87:df:70:fe:35:a1:26:d7:97:e3:75:34:05:
                    40:06:76:50:8c:a8:03:ac:16:cb:06:f8:b3:f1:bf:
                    a6:e0:e1:ce:09:4d:fd:ea:08:a2:22:f2:d2:90:17:
                    07:82:69:61:4d:83:a7:97:e8:52:30:bb:64:7f:b4:
                    ef:b6:16:8b:46:b8:00:f2:fa:91:e5:06:a6:91:69:
                    c2:5f:83:58:05:f2:51:4c:38:fe:fa:36:60:d7:46:
                    8b:0b:e9:94:82:37:7c:4e:e8:bd:29:18:d6:c3:ea:
                    be:ea:c0:c0:50:87:6a:e7:fa:50:13:7c:0d:dd:d8:
                    15:f6:35:18:6c:cf:cf:6b:dc:ba:21:bc:f1:e0:cc:
                    f4:90:d6:27:66:2e:65:18:d3:aa:14:c2:d0:06:9a:
                    2f:e5:4b:d4:e9:34:5b:de:b3:15:1c:3f:32:6e:a7:
                    46:31:1c:5b:ea:4d:f1:2a:75:0f:eb:0c:b6:c9:76:
                    5a:02:2e:f6:28:0b:98:45:f5:72:f0:11:95:b6:aa:
                    d6:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A8:6A:BF:AB:52:D2:03:F4:91:61:DD:57:ED:AE:0E:11:6D:B1:C6
            X509v3 Authority Key Identifier:
                keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:5e:ef:de:42:13:09:57:d8:57:b7:53:59:28:fa:c3:74:31:
         ca:2d:a4:b4:88:eb:5f:8f:8d:b0:b2:ea:93:15:bf:23:53:93:
         2f:69:23:ba:bb:01:e6:d7:f9:c3:2a:4e:43:c8:d7:09:0d:d3:
         a3:84:38:23:20:2c:d8:85:2e:8f:a6:10:b9:98:00:80:67:b0:
         dd:43:3d:75:7d:bb:ae:d9:9d:43:27:74:ba:54:06:32:63:ac:
         6c:13:57:58:46:7d:16:f2:b4:19:a8:c1:27:c2:e5:e4:18:1c:
         e6:c8:d1:76:03:7c:a5:f4:1b:06:c9:8b:53:0c:c5:e3:41:dc:
         f9:f0:3f:7f:ac:ec:55:47:da:1c:b3:23:ab:cb:26:5e:5f:bd:
         51:81:9b:7a:46:81:21:7a:2f:7d:4d:d0:a8:1c:d4:aa:29:20:
         3d:fc:c9:0b:1b:34:8b:38:16:82:b5:97:78:21:d8:78:ef:a8:
         d6:27:41:35:74:47:76:c7:c4:fa:93:8f:aa:48:e7:8c:fe:1a:
         2c:32:85:b3:87:0a:e3:1e:b3:60:6e:6c:d1:51:21:33:37:79:
         9c:55:b3:cf:2a:f4:cc:ed:e6:86:cf:85:c1:66:1f:09:c2:d1:
         c6:cb:15:30:42:95:6a:dd:cc:f4:a3:f7:d5:d8:f0:36:36:7b:
         df:d8:a8:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----