Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
File:                     ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft (raw, json)
Hash identifier:          CWYzFq/9EM/uShreRCPhGMADTkh9ot2uINIqaL+Obzk=
Subject key identifier:   19:81:37:AF:B5:30:3F:85:30:C4:77:AC:A7:0E:ED:9F:C9:1B:B9:78
Authority key identifier: 65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8
Certificate issuer:       /CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
Certificate serial:       0195E00FC83170EAC6BAC5824352B68BA41C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft
Manifest number:          14CA
Signing time:             Sat 29 Mar 2025 04:01:25 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:25 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:25 +0000
Files and hashes:         1: 08cbr85HkKL256WKPSBbjEBkUog.roa (hash: 5K7bdmLXsunQxf6ydRqaBdSla8m7yjvCwX6GQr2FyeQ=)
                          2: 1_VIXcn389cDhH5pQfcOHcgm1SA.roa (hash: DL+3+aiYPEstQJ/sUeRLgWJ6P/7ylF16Rs1Q6RQQLlE=)
                          3: AyxM3qUSp4vgIaJ1AQtSeDaW3v8.roa (hash: DID4wPyNJmFDb+hLJYcp8aWza0ytEMMJn7voP8pdhw0=)
                          4: GmoSLMOyGmAE3DVEod4OY1EVNkg.roa (hash: V4/CqFclfl4k9hlXoXkdtyPxDhPK8FCrQ1XJC3/zOcY=)
                          5: ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl (hash: cAAhSG0tg/aPeDsc7Jt7QyU06JI38p1OKrLxLY6q8q0=)
                          6: aQlOLPDeolF5uYY7VkMgbIlakC4.roa (hash: S5wKpeaQD33X7vEA4AJwuoJHgqZl5CaYGcEVikwgdoI=)
                          7: cs1_hnr2v_RESMbUBcnLEeHdvL0.roa (hash: bQIbEK9aQwzm+EgLeePtROO+uC2BmOE2JtvqLImUO3Y=)
                          8: kES3a_NmTCIqnMJDYdktZEAui6g.roa (hash: oWDzOnsZ0P67iTYQElx7vSfgd2r2XhuMUt+O6nZknyU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:c8:31:70:ea:c6:ba:c5:82:43:52:b6:8b:a4:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=653f55629121b60fb19c97f99c75dd6f015dd6e8
        Validity
            Not Before: Mar 29 04:01:25 2025 GMT
            Not After : Mar 30 04:01:25 2025 GMT
        Subject: CN=198137afb5303f8530c477aca70eed9fc91bb978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:94:44:1c:c9:e0:12:a3:c9:b0:1b:f5:f5:f9:
                    56:44:10:68:a5:f8:5e:fd:13:35:99:01:95:42:98:
                    7a:88:f6:08:4a:8c:fb:1b:1f:73:56:40:ff:93:56:
                    48:22:4a:8c:5c:0d:44:9f:bb:76:b8:01:69:51:64:
                    66:6a:a2:a8:b2:c7:ff:0b:85:f1:a0:72:83:ef:c1:
                    45:3f:37:a8:c7:51:90:e6:ad:8a:1e:7b:c4:75:38:
                    e4:d3:56:77:34:3a:97:37:49:1d:0f:d6:a9:e6:0f:
                    15:0e:a5:c7:3c:07:33:9e:d3:2e:3e:b8:3b:b9:fe:
                    4f:4c:1f:32:06:f0:d0:1b:0b:80:b3:f7:60:28:89:
                    66:50:5f:c3:e8:91:6c:bc:68:5f:5c:53:fd:da:bb:
                    ec:28:f3:1e:50:3d:e0:e2:ab:52:f1:eb:ab:ff:61:
                    4a:2b:38:3d:68:45:bf:f9:23:d5:7e:d2:c1:10:90:
                    fb:d9:06:68:76:ba:13:1c:48:4e:17:db:cc:77:be:
                    e1:55:35:0e:39:f0:56:f7:c1:cc:aa:8a:d2:9f:91:
                    fb:01:af:fc:c2:64:83:53:6c:4e:19:a5:aa:c0:1d:
                    d8:a7:8c:06:65:69:f1:49:d6:8e:1e:b0:fe:df:7f:
                    1b:bb:b4:d2:ba:8f:c3:6b:70:68:83:d2:19:05:76:
                    89:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:81:37:AF:B5:30:3F:85:30:C4:77:AC:A7:0E:ED:9F:C9:1B:B9:78
            X509v3 Authority Key Identifier:
                keyid:65:3F:55:62:91:21:B6:0F:B1:9C:97:F9:9C:75:DD:6F:01:5D:D6:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/74cf3b-9f5c-4f5e-96c4-2926d281b514/1/ZT9VYpEhtg-xnJf5nHXdbwFd1ug.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:a4:f6:c1:42:75:ef:0f:68:1c:e4:b5:0a:ff:9c:15:d2:21:
         93:e1:b1:88:6e:db:1c:e7:14:5e:2e:23:4e:d5:e4:77:f6:38:
         07:50:bb:84:7f:29:8d:e4:a3:69:33:96:b8:07:7b:bd:d0:60:
         74:7d:9f:c5:f2:c7:76:17:45:d2:ea:2a:f1:81:e6:1a:d4:64:
         8e:9c:14:e3:15:95:f1:07:6e:f0:aa:4b:f5:2d:92:66:f3:b3:
         64:14:0e:db:90:06:81:b6:0b:ea:5f:c7:c7:e9:15:58:62:c2:
         9d:77:e0:4f:2a:07:7c:0c:48:41:c5:9d:a3:1d:a7:22:92:81:
         1b:33:38:ce:6f:43:ac:88:33:e1:f0:cb:7d:f1:f3:df:ba:3b:
         f1:a9:bc:e8:8d:ed:02:30:87:5f:da:7c:27:d9:19:7b:d6:bb:
         bd:dd:ad:67:7e:58:e5:ca:c0:05:8f:e6:6d:14:ee:27:d1:ba:
         14:56:0c:83:64:a8:5c:90:37:ed:0e:a6:50:27:2b:fe:94:d1:
         80:f8:03:fb:22:09:12:2d:ea:41:f6:2f:7a:2d:76:02:45:59:
         e5:c3:4b:eb:2c:12:c5:e7:3e:54:af:64:c1:29:3b:7f:ef:23:
         80:2d:dd:70:49:5b:70:9e:85:0d:3a:f9:4d:63:ae:3a:f2:47:
         c6:5d:fd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----