Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
File:                     61E1nJmJuWPpWUwZKcggNn3jIt0.mft (raw, json)
Hash identifier:          168+SjaQ0ur9w+2R2hFoz1Z/LP3sSUU/42i/g80sing=
Subject key identifier:   BD:99:D5:B4:6D:F2:A8:7A:9C:64:8A:90:1D:29:4B:14:6B:F9:40:13
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       0195DFD8BF5F2096D8D8AAB5DB0995412F30
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
Manifest number:          0E52
Signing time:             Sat 29 Mar 2025 03:01:18 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:18 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:18 +0000
Files and hashes:         1: 61E1nJmJuWPpWUwZKcggNn3jIt0.crl (hash: ziC8qLAgASw8QmzyDw5gL+nRKhyB+TQhMdqGtyKWnGI=)
                          2: RNGBIcy26YwkLmRvqwWnod98dHw.roa (hash: 1chB1LaT432Rfh7J104MJnAPyL20nkhH0rEwOvkmqjI=)
                          3: avVrdRPNFcMtwTGR2Zab9qIvEIs.roa (hash: B8YMI/WajLnQclAWhZ2JVb5JaRJxPn4UkZ5gdPRrKXc=)
                          4: xvJJCJmfitiZoRrYzWugczL4VyQ.roa (hash: UrxIyZ/4qn/YP7b/SzV5GX2KUOXeEfz4V6Bha/YX2bk=)
                          5: xyTpJytoxvfRC1JuuZE55vlvpVw.roa (hash: pSf6Tfcl7fvUBPO0OcEa6L2J3bwaxMhwUDqFkg86IIo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d8:bf:5f:20:96:d8:d8:aa:b5:db:09:95:41:2f:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: Mar 29 03:01:18 2025 GMT
            Not After : Mar 30 03:01:18 2025 GMT
        Subject: CN=bd99d5b46df2a87a9c648a901d294b146bf94013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:88:64:f2:1a:5c:89:2d:8a:dc:00:95:1d:
                    5f:b2:e0:6f:c0:95:39:70:5c:73:c4:1a:43:ae:47:
                    c0:c1:d0:89:0f:e4:1b:33:e9:1e:25:f3:89:8b:c1:
                    ca:32:27:ca:6e:b9:02:e4:ed:5a:19:40:97:17:96:
                    a3:5d:a8:ee:01:01:33:d9:b2:d3:d5:eb:57:30:29:
                    55:45:42:0b:b6:2e:17:e7:30:84:5b:5e:5a:87:5e:
                    7b:de:11:72:fa:2b:dc:ae:d5:d3:8b:fe:ae:0f:6b:
                    f3:ab:43:7d:ec:1d:46:1d:b4:8f:2b:18:07:24:b8:
                    50:42:45:a4:4e:61:42:8d:b1:72:b7:ff:d0:ff:ae:
                    90:28:30:a2:71:8d:cc:4b:71:af:77:d2:e2:7a:e9:
                    0f:3a:5d:bb:f7:c9:8f:45:0b:52:aa:82:c7:95:f0:
                    26:aa:83:78:04:65:fa:cd:f3:14:12:65:1e:b5:2a:
                    b4:06:c1:37:2c:f6:0b:4f:6b:a9:9a:ae:ec:9e:15:
                    68:bf:a3:73:10:c3:22:94:6d:5f:7c:5e:4d:13:4a:
                    43:d7:68:81:4f:a8:d8:24:be:ae:a1:f6:04:68:71:
                    7b:a0:2f:5a:ea:a4:85:97:d9:d2:6a:de:50:be:e1:
                    e6:f6:2a:fe:13:d2:cb:f3:4f:63:12:09:f5:7b:08:
                    75:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:99:D5:B4:6D:F2:A8:7A:9C:64:8A:90:1D:29:4B:14:6B:F9:40:13
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:cb:c8:2d:79:9a:86:dd:ff:89:ce:ed:1a:d7:25:6d:f7:ee:
         12:88:71:e4:14:3a:94:6b:33:d5:cb:d5:d8:29:d3:06:95:f1:
         c0:e7:4e:14:45:61:e2:a1:de:c8:85:a1:e2:35:6e:38:a2:5c:
         a2:f1:b2:dc:a1:21:75:87:dd:86:91:06:b4:75:d0:db:cc:60:
         b6:92:fb:b8:99:08:77:82:83:22:5a:d0:e5:2b:99:f3:f1:66:
         fb:e0:32:7d:f8:c7:75:e3:fd:ea:b1:69:5e:2c:2d:c4:4a:ab:
         ed:98:d9:c0:b2:c4:d1:15:02:90:c8:60:69:03:01:89:7d:45:
         f4:6e:9e:ae:94:a1:36:1c:40:d5:a2:48:dd:37:c4:41:03:03:
         55:81:ce:92:eb:07:de:7b:76:2e:f1:fa:c1:7e:7f:6a:06:3e:
         45:54:42:0a:09:35:d6:bc:00:c7:87:c0:75:c0:85:c3:eb:a6:
         dd:19:1b:ee:41:ea:48:8e:65:21:8d:c2:2d:3e:aa:26:bd:2c:
         49:cc:a8:c2:2c:45:a7:c0:05:0f:00:81:bf:6c:2b:7a:bc:38:
         0e:bd:be:50:35:cb:fb:36:69:e9:57:39:1a:9e:7b:6c:bc:82:
         ba:4f:3c:69:3e:12:d6:69:94:22:65:cf:76:db:e5:b8:fb:4b:
         f9:d7:16:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----