Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
File:                     irPpZch0fi-l3dEoV2c_BgQu-kM.mft (raw, json)
Hash identifier:          ztjBZ7bpBW/+6YV3eZsTRw4FDmowEL3krAws5/oXXuo=
Subject key identifier:   0C:FF:0F:3A:B3:16:C8:BC:88:A4:D2:A3:9C:4A:70:4E:99:6A:68:B3
Authority key identifier: 8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43
Certificate issuer:       /CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
Certificate serial:       0195E07D29CEAC17A68A900DEBA93735C780
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft
Manifest number:          1455
Signing time:             Sat 29 Mar 2025 06:00:53 +0000
Manifest this update:     Sat 29 Mar 2025 06:00:53 +0000
Manifest next update:     Sun 30 Mar 2025 06:00:53 +0000
Files and hashes:         1: 0R4cTom2N3Ffy-a36Ai0y_lwR7M.roa (hash: Nepk/Ut8yLvwSKOE+VPPTDkKY+eqYlx1ya61v2fExqo=)
                          2: DO5JxSipVW_jSyusVYE1KNyV5oM.roa (hash: fTaf/BSF7U37w4OYShE1QwyUlpAokZv3Xb6JIFlzFT0=)
                          3: MHydlao-1yBTTsCdp3bBe4bDnkc.roa (hash: OnwOrVTgc/R+eeJsST7imMdVV9F4opbfB++sLNDhiX8=)
                          4: irPpZch0fi-l3dEoV2c_BgQu-kM.crl (hash: FwrLUn4JCbfLII6eK4xIqHYcWsTk8cEq9FKBfTEvBPk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:7d:29:ce:ac:17:a6:8a:90:0d:eb:a9:37:35:c7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ab3e965c8747e2fa5ddd12857673f06042efa43
        Validity
            Not Before: Mar 29 06:00:53 2025 GMT
            Not After : Mar 30 06:00:53 2025 GMT
        Subject: CN=0cff0f3ab316c8bc88a4d2a39c4a704e996a68b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:29:31:b8:24:8c:8f:dd:fb:4a:68:43:d6:5d:
                    7e:a4:07:09:da:b2:76:4c:62:ea:d6:e6:b3:64:2f:
                    c1:86:73:20:d4:c1:8b:82:c5:d7:09:fb:fd:25:db:
                    a7:b1:d0:37:46:6f:64:a1:03:98:8d:d5:c9:c0:8d:
                    70:a6:e0:08:5c:5e:b1:ae:01:7d:e3:de:d2:a0:11:
                    af:01:11:0c:c2:22:1f:94:78:c4:d9:80:ac:26:68:
                    f1:3d:e9:04:7f:41:e4:23:79:d8:a9:c0:48:e2:8b:
                    cc:2e:c4:0b:60:bf:ab:b1:b6:f2:8d:f3:91:96:d1:
                    24:bf:97:7f:28:30:dd:f8:45:57:93:e3:26:6f:ef:
                    44:69:dc:a5:d2:f0:5a:85:44:89:eb:a2:80:a3:1d:
                    09:b4:41:90:f3:aa:d9:34:49:92:d9:35:17:da:31:
                    e3:85:71:68:04:b9:5a:5f:4c:f3:09:2a:62:58:7a:
                    c5:1f:e1:e0:3f:9d:fa:fe:cd:a2:51:e6:32:86:cb:
                    3e:69:f1:8f:7e:d4:80:2d:06:94:6c:9d:12:dc:fb:
                    c0:0c:1f:fd:e7:0f:fc:d1:43:c1:a1:c2:99:44:04:
                    5e:fb:98:d7:25:01:2e:d6:5a:73:da:b9:a8:3f:f1:
                    a3:3f:ba:dc:83:1a:f0:a0:f9:f1:9b:84:78:1c:c4:
                    1d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:FF:0F:3A:B3:16:C8:BC:88:A4:D2:A3:9C:4A:70:4E:99:6A:68:B3
            X509v3 Authority Key Identifier:
                keyid:8A:B3:E9:65:C8:74:7E:2F:A5:DD:D1:28:57:67:3F:06:04:2E:FA:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/irPpZch0fi-l3dEoV2c_BgQu-kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/251360-c5c5-4a40-af72-04427a99f1c5/1/irPpZch0fi-l3dEoV2c_BgQu-kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b6:fa:f0:1c:b9:a0:44:28:3d:99:60:c8:44:bb:ae:85:59:
         16:9e:10:15:fe:f1:2b:2a:53:80:42:60:ab:5c:ee:0f:3a:3b:
         f1:53:fc:e9:3f:24:99:bb:0a:f4:6c:78:d5:5e:cf:54:14:6a:
         07:b9:55:e9:87:72:c8:ff:c0:0c:5d:55:91:79:2b:62:5c:7f:
         a4:0f:02:4e:dd:e9:04:57:d8:67:ac:f1:52:82:07:24:fe:f1:
         94:65:b9:1c:fe:0c:8c:d0:76:c8:b4:f5:fe:87:52:f1:b6:05:
         51:67:ba:12:ed:11:fb:09:51:a2:d7:46:29:d0:c7:29:93:df:
         46:85:53:83:ef:bc:80:41:ec:c4:ce:86:f2:c9:5d:ae:ba:6f:
         34:b6:bf:1f:18:1a:be:e7:4c:3e:94:a7:1c:d5:46:c3:82:e3:
         f0:10:65:0b:31:4c:ac:2c:cf:69:a8:db:19:69:93:8a:7a:47:
         74:55:ae:99:96:69:37:75:c3:ce:98:8a:08:0c:2b:5c:db:d2:
         72:93:13:e2:04:09:e4:78:49:55:ac:39:87:6f:ac:2f:b8:cc:
         53:e7:b2:92:1f:09:bd:39:0b:28:b9:30:17:48:9e:6f:ed:9c:
         c7:b8:ac:45:6d:5b:a4:db:97:b7:05:34:59:ce:a3:e5:f5:39:
         5c:72:69:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----