Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
File:                     Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json)
Hash identifier:          EwyK2XQXWvcHXSb7UdP4uaimhXWxSGVeF2YRctStAR8=
Subject key identifier:   9A:EA:7C:2C:F6:29:08:2A:94:A4:90:D8:A0:07:99:05:4C:09:0A:3E
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Certificate issuer:       /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial:       0195E1596FEBD3814D3A0474C50A8EEF184E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
Manifest number:          14C4
Signing time:             Sat 29 Mar 2025 10:01:29 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:29 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:29 +0000
Files and hashes:         1: 7MtM04j_v2k1Wph2OgnR4TG2Sv8.roa (hash: 4itzuX/fQ15qNQ7YFYgNHc2z9oC3AqKBZmDxx9ZMouE=)
                          2: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: KMeZqiHD/8xteh8zSUDjxQEjLL1SCYGIb3Voi4w2pYw=)
                          3: kx9kPAQ67ntw1Xkq0X26moD-pwk.roa (hash: X9S/3YSjUgYxw6y4t3NQ27+L1d2kR0+Z9uu+3WHTnVY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:6f:eb:d3:81:4d:3a:04:74:c5:0a:8e:ef:18:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
        Validity
            Not Before: Mar 29 10:01:29 2025 GMT
            Not After : Mar 30 10:01:29 2025 GMT
        Subject: CN=9aea7c2cf629082a94a490d8a00799054c090a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fd:2d:5b:ae:29:ad:08:ad:9d:dd:46:2d:ca:
                    70:9a:8d:8a:98:99:f0:34:19:8b:2d:b4:43:81:d8:
                    2e:f7:12:61:ef:6b:53:f9:f0:12:df:26:43:57:49:
                    78:4c:55:e3:f7:c9:81:f9:0b:05:08:a5:1c:6f:35:
                    22:b7:40:85:27:c9:ed:ad:a9:ac:0f:a2:8a:84:38:
                    81:77:1f:8a:33:4a:92:c4:e1:e4:79:aa:00:3d:3a:
                    e1:7a:ef:db:a8:e7:6a:0a:fc:72:27:6c:a3:77:de:
                    ca:9b:7c:d9:db:13:ee:fe:3c:f4:36:a6:27:e2:a2:
                    bf:d5:42:ac:a5:ab:3c:4b:a2:1e:fd:aa:81:db:81:
                    6e:1c:71:67:2d:35:17:9b:a2:ad:aa:cd:f4:8d:60:
                    a2:ba:8d:e0:5b:f3:ca:9a:09:5b:d9:4f:bb:aa:15:
                    b9:e0:53:c0:8c:d5:5c:b1:45:f9:4d:e5:23:8d:24:
                    38:46:c9:4f:0c:71:b9:e7:3d:4c:c1:56:31:e2:8f:
                    27:b5:29:37:c8:8d:59:3f:83:00:19:17:19:cc:7c:
                    ae:97:ef:10:2a:29:d4:f3:de:01:de:79:69:16:2d:
                    27:5e:3d:5e:6a:04:58:3e:6f:9c:54:ec:cd:7c:f3:
                    ce:e9:10:be:35:13:ca:e7:0d:8e:50:59:a3:4a:19:
                    5b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EA:7C:2C:F6:29:08:2A:94:A4:90:D8:A0:07:99:05:4C:09:0A:3E
            X509v3 Authority Key Identifier:
                keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:83:9d:99:10:c0:02:7d:a0:71:74:8f:38:85:55:9f:c4:d1:
         60:c8:96:1a:55:22:7f:41:d0:af:81:22:93:73:1e:8a:56:c8:
         b9:94:5d:96:cf:45:05:66:4d:1e:41:27:8e:95:75:3b:d2:73:
         78:ab:d5:1c:61:09:ec:9f:fe:18:40:bc:0a:61:9c:02:eb:31:
         86:4c:fd:f3:fd:2e:3a:b1:7a:bf:f4:e0:05:c2:66:7a:45:77:
         17:f6:f6:30:da:bf:d2:4b:c1:11:f2:19:19:5a:a1:b1:92:6e:
         c4:a3:04:b8:3f:95:10:31:2c:13:72:cc:d4:7d:70:a6:2f:eb:
         a8:1e:08:15:6d:14:7c:4e:f9:d3:7d:fd:4e:65:73:41:1a:cd:
         43:a3:2e:5b:be:2e:e5:e9:9b:e1:5e:ba:23:36:8e:12:de:b1:
         f5:be:8a:bf:6d:22:9c:f9:83:61:c7:fd:a3:4f:ae:f7:fc:ee:
         17:5b:58:ba:9c:40:80:08:a4:de:3c:18:24:4a:be:40:57:50:
         42:9d:fe:01:e5:b5:4f:37:f0:8c:32:05:fb:84:ff:1c:40:4b:
         17:c5:6b:69:b5:7a:a3:3f:9a:2e:80:62:29:ae:5b:99:b5:4e:
         f2:e7:5f:87:1b:e6:95:96:f6:08:a3:2f:e6:b0:b1:ce:cd:6a:
         0d:e1:b0:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----