Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
File:                     j6zLrHFHe5QOXNQQPj7uYdthWRU.mft (raw, json)
Hash identifier:          tmfLnh+rwG+xTV3JXhN2G+uBCiap9VTlmZtYJBv9W4Y=
Subject key identifier:   BC:31:2A:20:C6:31:62:8E:90:B0:93:10:E8:6E:11:5C:D8:B1:AF:ED
Authority key identifier: 8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15
Certificate issuer:       /CN=8faccbac71477b940e5cd4103e3eee61db615915
Certificate serial:       0195E00FBF86925434B25FEC7EFA965DAC44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft
Manifest number:          02E3
Signing time:             Sat 29 Mar 2025 04:01:23 +0000
Manifest this update:     Sat 29 Mar 2025 04:01:23 +0000
Manifest next update:     Sun 30 Mar 2025 04:01:23 +0000
Files and hashes:         1: EKSKrQ1FbAZmq1KtPIW7Uy3IctY.roa (hash: QeMTexv2bHp61zdnXh2g6I+MqFr8HxGSohB7DT8On60=)
                          2: a44sy3HYySYYWzX1Xc0gD8ljcUU.roa (hash: mG+H6uo6FVVDTMv9HhWuPrvRA4BkbeYs8ovYondFREA=)
                          3: j6zLrHFHe5QOXNQQPj7uYdthWRU.crl (hash: UMzCD++kDYf9ZkN8DnJhfLxsEQFfKN4FcJKl2lI+Bv8=)
                          4: t_igGhLq7IzbkQZnR3SxFZTI3tA.roa (hash: 6dLogSW/OhD3Yu1E3Y4ZKNcTx1tRF0Y/a9V0hhFyQW0=)
                          5: wFmITchCOTh-4_pkSKxt-DBDXmI.roa (hash: 0czxK7spC8QNTMDj8fqbhsYijXl48ZLs3CZRQQWgFNg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:0f:bf:86:92:54:34:b2:5f:ec:7e:fa:96:5d:ac:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8faccbac71477b940e5cd4103e3eee61db615915
        Validity
            Not Before: Mar 29 04:01:23 2025 GMT
            Not After : Mar 30 04:01:23 2025 GMT
        Subject: CN=bc312a20c631628e90b09310e86e115cd8b1afed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:67:1c:bf:9a:73:12:fb:90:ca:c7:12:b9:ff:
                    1c:2f:ad:40:83:8c:b4:10:62:b3:21:59:2f:5d:34:
                    3c:a0:f3:b8:4f:9a:c7:d4:c5:71:41:18:d3:79:67:
                    9e:51:5f:69:60:7f:8a:11:16:14:57:62:29:d1:af:
                    e4:11:ab:e0:f4:47:ea:17:2c:5c:5a:19:29:0e:98:
                    7f:b5:cf:bd:09:8c:17:3e:a4:00:8b:7f:86:ca:9c:
                    6e:34:1b:ea:05:66:4c:f6:37:f8:17:9b:62:53:67:
                    50:ec:58:9e:aa:ac:98:5d:c3:af:2a:31:33:e4:ef:
                    b9:0b:93:ba:8b:af:18:26:f2:73:57:2f:59:8d:5f:
                    6d:fa:62:41:cd:66:c7:54:43:67:f5:3f:c2:61:a9:
                    e6:e4:51:b9:81:f1:5a:39:b0:c3:2d:32:83:7a:58:
                    e1:fd:be:49:e3:a8:15:65:12:2a:ad:67:1a:61:5c:
                    30:99:1b:42:08:dc:33:7b:b1:32:6e:f5:df:d3:c8:
                    a6:f2:c8:69:53:c6:bd:ed:43:c8:c2:31:59:df:cf:
                    1a:21:ed:21:f7:e3:9c:80:db:48:53:e0:4b:7e:27:
                    a1:35:ef:41:5f:6d:dd:f0:fd:11:57:26:0b:53:5f:
                    52:26:f4:7d:92:83:8c:fe:6c:3f:77:30:41:e7:43:
                    23:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:31:2A:20:C6:31:62:8E:90:B0:93:10:E8:6E:11:5C:D8:B1:AF:ED
            X509v3 Authority Key Identifier:
                keyid:8F:AC:CB:AC:71:47:7B:94:0E:5C:D4:10:3E:3E:EE:61:DB:61:59:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6zLrHFHe5QOXNQQPj7uYdthWRU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/017eef-c49e-47a7-9ed3-098db3a24ff0/1/j6zLrHFHe5QOXNQQPj7uYdthWRU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:19:ac:3c:a1:d7:be:85:50:59:47:ff:06:ba:99:29:72:7a:
         86:cc:ef:4e:06:ad:76:35:74:54:75:48:45:a0:b7:ff:fe:5d:
         cf:cb:48:9c:8f:2c:15:30:17:8b:ab:77:8f:57:cd:5b:ae:8b:
         35:e2:07:66:70:b9:af:b7:7e:8d:55:87:60:c5:35:db:c8:96:
         39:c5:24:4d:24:de:46:1e:c7:e8:45:1d:bc:f1:24:f6:20:9d:
         8c:7b:97:2d:92:28:c8:2b:4c:9a:2e:bd:ec:0b:fe:7b:80:6c:
         07:55:c0:a9:8b:f0:09:79:13:b5:63:44:0b:0f:37:ca:8a:ab:
         e0:78:e0:27:2d:98:5f:82:0d:6b:8c:fd:64:2f:e5:34:0f:36:
         7d:33:99:42:0d:4d:82:fc:e4:fc:d6:e1:b9:04:75:34:b6:b4:
         bf:33:27:e5:f2:6a:ec:27:3c:3f:4b:51:5b:35:3f:8d:b8:c8:
         ab:9f:ad:67:ee:87:6a:a0:38:e8:6e:17:89:30:fb:8e:18:62:
         9e:25:c7:22:7d:b6:7e:14:6c:95:5c:c9:ab:bd:b3:76:6e:18:
         83:4e:24:8c:78:d6:5c:d3:a3:fe:53:87:29:2f:b9:b3:3d:4a:
         ae:11:dd:cd:fc:b8:e3:3c:7f:0f:09:e7:7c:84:0f:2c:d3:a6:
         29:f9:c2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----