Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
File:                     5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft (raw, json)
Hash identifier:          IllN7A0Qi2H18erAiz232tvwQfwxQLhneeivt5beNW0=
Subject key identifier:   4F:C0:A4:81:7C:C6:52:EE:AD:26:1A:F0:93:9B:69:F7:2B:5E:D1:A7
Authority key identifier: E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0
Certificate issuer:       /CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
Certificate serial:       0195E1593AFB6F59FDB88FB82F9A2BC67519
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft
Manifest number:          14C5
Signing time:             Sat 29 Mar 2025 10:01:16 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:16 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:16 +0000
Files and hashes:         1: 5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl (hash: 1Ed/cmIhE69F1v7yK4+Hmr6w8/Nv/nIO2QwDCsgd63o=)
                          2: PsjhieTymPBMhbBeD2G4Eb2tiXM.roa (hash: bN6R2jhfh/x3ks5vaycX08tQPelsEHr78ADbPw3Z954=)
                          3: b_wZ8vjY3m-nqcgia8Q1-09feRc.roa (hash: tIRWyoM1DUPvrXEJ2hmu6whNi1gGh3fnMsdJLxUNaQ4=)
                          4: db-V4RFiWk-DRMRx23Yi5GGB828.roa (hash: nklnqznrcypY4CcHnGmzs30m8K1faHbW1Og3XBCrp1c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:3a:fb:6f:59:fd:b8:8f:b8:2f:9a:2b:c6:75:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e479af1716dc461e5bb3f876215bcb94e8808ba0
        Validity
            Not Before: Mar 29 10:01:16 2025 GMT
            Not After : Mar 30 10:01:16 2025 GMT
        Subject: CN=4fc0a4817cc652eead261af0939b69f72b5ed1a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d6:cb:86:08:8c:e8:af:ae:6e:4b:ce:2f:36:
                    f9:46:bd:79:95:6a:ce:64:56:a7:86:a7:29:3e:85:
                    5c:45:85:3a:64:c9:6d:23:a2:40:76:94:75:10:2e:
                    69:7d:fb:f2:e9:9e:d7:40:5b:c2:4b:1d:25:29:00:
                    d7:c8:54:8f:79:fc:a6:4f:8f:0f:8f:82:5d:3a:2b:
                    01:3d:16:a8:ad:b0:8c:63:95:a3:46:a0:cf:00:a7:
                    a8:f2:83:37:ca:d0:74:8e:0f:76:f4:14:76:22:6c:
                    43:1f:f8:90:5c:34:6a:c3:a6:83:4c:ab:c7:e5:6d:
                    c1:ef:03:7f:dc:63:d5:6b:8c:01:8b:06:28:03:d2:
                    33:d8:7c:90:83:b0:7e:d6:1a:96:bd:04:ea:06:85:
                    ce:a0:9d:bf:76:41:87:ac:89:bb:f1:d8:a7:75:58:
                    50:91:0f:fe:24:49:a4:ed:a6:97:49:0d:41:43:d4:
                    d7:c8:bf:7e:2a:46:29:4d:d0:7c:a4:a1:ec:c5:b8:
                    28:f2:6e:c8:d0:4e:66:19:19:42:f5:3a:0b:0e:04:
                    41:7d:f0:aa:d9:f4:aa:d9:4d:1c:7d:92:2b:ab:a5:
                    50:93:79:bf:fc:55:c7:76:11:e5:67:9f:f2:4f:1b:
                    84:1c:17:38:1b:03:e9:19:0c:90:36:3b:96:cf:9e:
                    f7:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C0:A4:81:7C:C6:52:EE:AD:26:1A:F0:93:9B:69:F7:2B:5E:D1:A7
            X509v3 Authority Key Identifier:
                keyid:E4:79:AF:17:16:DC:46:1E:5B:B3:F8:76:21:5B:CB:94:E8:80:8B:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5HmvFxbcRh5bs_h2IVvLlOiAi6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/63299a-86b2-49ff-b6e2-241eab61483f/1/5HmvFxbcRh5bs_h2IVvLlOiAi6A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:89:07:c7:a4:60:02:2d:52:f2:b8:2a:c3:92:0e:5c:80:af:
         a9:e6:a6:e8:c7:3b:db:6c:13:01:c2:45:08:fb:4a:8c:68:98:
         c2:af:38:d7:c9:1b:75:a9:7b:a1:ed:6c:e8:88:87:49:79:55:
         45:1f:35:5d:ee:54:16:43:fd:d3:05:60:80:0d:12:7b:3e:3a:
         7b:77:48:07:60:d1:6d:97:68:65:64:f0:9a:56:29:99:50:7c:
         e6:56:5e:bc:e7:d3:c8:2f:88:ae:63:b1:b1:d1:41:cb:8a:1b:
         89:b1:d6:42:09:5f:22:ef:71:5c:22:ae:fe:9a:82:1f:2e:b5:
         ef:46:36:73:f6:db:a7:9f:92:58:a6:94:fa:91:57:9c:d8:57:
         6a:e3:5d:63:1e:47:7f:c2:34:ff:13:39:be:6a:58:e6:b8:08:
         1f:6c:d9:68:1a:58:aa:5e:6c:4e:25:0d:51:47:a1:b4:dd:05:
         99:ce:98:6b:6a:7d:44:20:6e:eb:d9:57:bd:df:e5:64:61:eb:
         1f:51:b7:18:be:cd:f7:8e:2e:fb:43:4a:87:01:1a:b4:b4:4b:
         30:6d:0e:f3:10:56:a9:cf:a7:06:4e:83:a6:f8:f9:5e:66:8b:
         ef:c2:d6:0f:27:65:1e:98:aa:dd:6b:82:8f:30:ae:ad:9c:a4:
         61:7a:a8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----