Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
File:                     C6vWgsGo_FA3rb9oFDrnf9APOKs.mft (raw, json)
Hash identifier:          0rQTUnnWdouCJZraTSJ6yrMPSVlET/hHhRWSxuR4DUo=
Subject key identifier:   3E:A9:5F:74:05:B8:3F:F5:A6:83:38:3C:CC:2E:64:A5:07:EC:B0:F2
Authority key identifier: 0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB
Certificate issuer:       /CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
Certificate serial:       0195E190302512EC9F040EB3C67D73605ED8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft
Manifest number:          05AA
Signing time:             Sat 29 Mar 2025 11:01:17 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:17 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:17 +0000
Files and hashes:         1: 1-Smkp6h6clLOytvsZTW7IYXWdA0.roa (hash: ea3w2mh66EAHkh2gpMZxmUqrFjNif7rFJ3Ux5dT6P3Y=)
                          2: C6vWgsGo_FA3rb9oFDrnf9APOKs.crl (hash: J0Y0bUqLeimo9K4AUo08Mb64gD6NBKsojkFnEZwiu3M=)
                          3: bEDl4F0oErintdjUmPi3KwD4d5k.roa (hash: Sj0vj1Cb+cSjoHj9Gcm8jJEMPloRebSIxFZ4ot1qytE=)
                          4: fKSs4hH9Txh8Zlj65oG1tsFnMhc.roa (hash: spRUtws11ycMpOdqPxogpwVFrj1ssSP4E3wT9grjXjM=)
                          5: kl_1BZ9zz0p-OrHj-rvFCPqjzc8.roa (hash: Q8fDVCk74lV9QZSReJUdZzpV1u+rNruWQfm4y3jiGc8=)
                          6: pAEDN-h1-DUGqiGuMkWdVhlgowg.roa (hash: 3zGPa3AJjPYig0kDedAY3IsrPUE9H1fVHWA5Xf9h6RE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:30:25:12:ec:9f:04:0e:b3:c6:7d:73:60:5e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0babd682c1a8fc5037adbf68143ae77fd00f38ab
        Validity
            Not Before: Mar 29 11:01:17 2025 GMT
            Not After : Mar 30 11:01:17 2025 GMT
        Subject: CN=3ea95f7405b83ff5a683383ccc2e64a507ecb0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:d9:ee:59:2a:1c:3f:5f:57:61:9f:9b:82:4c:
                    ad:4a:f6:48:16:ac:ac:2e:21:11:e2:12:e9:d4:71:
                    c6:18:b3:44:35:9d:bb:ef:91:f4:d8:de:28:c3:74:
                    32:4c:6e:c7:ef:a0:44:b2:ad:67:9c:15:e4:c9:3c:
                    97:1d:60:14:84:d7:f2:91:52:e3:5c:6a:c5:a3:96:
                    34:74:4c:fd:69:2b:50:4e:38:cd:73:80:65:3d:c7:
                    5b:84:09:5f:b2:6e:25:cd:85:14:8e:09:28:81:ee:
                    17:8f:56:4f:af:4c:f7:08:9d:91:05:f9:0d:8b:b1:
                    d2:68:a5:ce:01:f6:57:07:c3:85:bd:19:b6:3e:dc:
                    7e:c4:62:e6:b7:7a:12:d2:e6:8b:09:69:05:81:c7:
                    66:b4:f8:b5:08:f3:a9:e5:5d:87:64:52:dc:e7:09:
                    33:0e:18:43:6f:ec:6a:2e:c1:76:59:85:cb:ff:98:
                    5c:40:c0:b0:04:d0:8b:bd:ac:97:f0:6f:ad:a0:66:
                    ca:0c:e4:23:0d:40:90:b2:73:fc:00:54:f4:c4:01:
                    7e:21:bf:37:96:0d:68:b6:a0:28:37:b4:80:42:ce:
                    5b:8f:21:90:10:d7:f7:9f:0e:ed:db:f9:3a:bd:11:
                    f5:8e:6c:46:73:1a:25:24:ba:fc:c9:78:03:fc:1d:
                    52:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A9:5F:74:05:B8:3F:F5:A6:83:38:3C:CC:2E:64:A5:07:EC:B0:F2
            X509v3 Authority Key Identifier:
                keyid:0B:AB:D6:82:C1:A8:FC:50:37:AD:BF:68:14:3A:E7:7F:D0:0F:38:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6vWgsGo_FA3rb9oFDrnf9APOKs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/bc401a-6938-4fdc-9c6e-fac3d5543a2c/1/C6vWgsGo_FA3rb9oFDrnf9APOKs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:50:f0:1c:1b:b8:82:22:5d:03:66:fd:a3:58:80:4b:54:82:
         ab:f3:12:b5:16:08:e2:74:44:6c:60:9d:49:0f:e3:f8:c4:21:
         80:61:59:76:5c:a3:7e:ed:d6:c4:20:16:99:ab:c1:ed:1d:6c:
         f2:db:03:f4:0a:44:44:ee:5f:4a:a2:cd:5a:6d:cc:4d:9b:4f:
         30:a8:37:34:eb:66:ff:cc:7a:7f:61:d3:1a:e9:d3:18:2b:4f:
         d2:5e:4a:ef:e5:39:ad:14:03:48:0c:38:7c:73:26:75:0b:70:
         9d:e6:2f:4f:87:84:47:ed:4f:52:77:5d:ae:7d:e8:81:65:47:
         e5:44:1a:63:34:36:a2:f7:3c:6b:e2:0a:50:d5:c8:00:cc:9a:
         b7:3c:c0:9a:58:f6:1c:58:07:38:ca:f5:02:0d:e9:9a:6d:a8:
         68:64:a3:f1:8a:c9:c1:83:23:a4:4d:cb:a7:2e:86:7d:36:55:
         10:a3:3f:b1:92:d7:7c:f5:98:26:56:4b:b7:9a:1e:0f:6c:36:
         7a:84:b7:d6:db:b3:90:86:7e:01:d6:67:9a:56:6d:83:a3:d0:
         77:22:c6:56:26:12:09:f6:49:70:7d:7b:b0:b1:e0:ac:7e:88:
         f2:56:35:a6:2b:82:d6:04:08:9e:c6:29:68:50:43:99:e3:b4:
         66:80:fa:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----