Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
File:                     Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft (raw, json)
Hash identifier:          NfL+L2WdVLuaOB1hSmvOChUIzRoGaqFEh9/3/i+km+M=
Subject key identifier:   36:38:5C:26:60:8A:C9:B0:C8:7A:F1:84:CE:88:3B:B6:57:A4:69:62
Authority key identifier: 49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0
Certificate issuer:       /CN=49de578dac792d95e217d9871e04f66973bb7eb0
Certificate serial:       01962F06A4A2E921726DE30CB8D9EE9D9C25
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft
Manifest number:          051C
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: Mz51AcN2wZIHDhS3_4YmvmIRGhQ.roa (hash: uO7pu6+EQ/hXwHNJ2EqENUuB+uo9LMGBRXK6r0igHMI=)
                          2: Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl (hash: GEbZwFKPgF5R5A3u1HBjBpoQr20RqFYYfMuJpzxCIBw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a4:a2:e9:21:72:6d:e3:0c:b8:d9:ee:9d:9c:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49de578dac792d95e217d9871e04f66973bb7eb0
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=36385c26608ac9b0c87af184ce883bb657a46962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2b:ac:03:97:ea:e1:01:6b:3d:00:e6:47:82:
                    3a:48:84:3a:da:10:de:7b:42:7c:e8:95:d3:87:69:
                    53:05:83:e6:80:1a:89:19:e8:e3:89:11:34:77:53:
                    b9:ce:2f:71:94:8e:47:21:a9:27:60:98:1b:d0:d4:
                    13:0c:59:ba:fb:6b:db:3a:a8:40:33:16:b5:98:82:
                    c5:79:e4:1c:76:20:04:1f:2e:7f:da:28:d2:0b:1d:
                    e5:67:61:76:61:95:28:30:6f:50:aa:37:0b:24:84:
                    06:33:fb:40:c1:48:41:47:84:21:1c:4d:13:1a:94:
                    ca:34:ab:bd:48:45:c8:5e:a6:2f:f9:b3:0f:98:b3:
                    47:bb:a3:02:2e:72:10:8e:4b:58:f7:9a:3d:9e:37:
                    24:62:99:b7:ea:61:d7:d1:3a:4d:35:1c:f5:93:8a:
                    a1:63:f8:b3:76:e0:73:05:73:7a:bc:f5:18:df:f2:
                    25:e8:f9:d4:da:54:51:fe:86:bc:71:67:48:01:7e:
                    5d:b9:56:3f:95:51:27:e7:39:95:8b:85:b3:2e:37:
                    5b:95:ee:e7:9b:fb:f3:49:70:8c:54:37:77:13:9a:
                    c9:c6:f9:09:34:4a:f5:14:f9:d1:69:fd:ed:9a:00:
                    dc:51:80:30:1f:9a:dc:f0:b4:f0:9b:be:21:e0:8c:
                    2c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:38:5C:26:60:8A:C9:B0:C8:7A:F1:84:CE:88:3B:B6:57:A4:69:62
            X509v3 Authority Key Identifier:
                keyid:49:DE:57:8D:AC:79:2D:95:E2:17:D9:87:1E:04:F6:69:73:BB:7E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sd5Xjax5LZXiF9mHHgT2aXO7frA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/e7c7eb-f7c6-43b7-a6ff-63e020feecf9/1/Sd5Xjax5LZXiF9mHHgT2aXO7frA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:98:69:fe:6b:49:bd:fe:ea:ad:dc:9f:55:e7:6e:85:c2:e6:
         06:30:ae:05:f5:35:79:9c:df:92:db:14:09:b9:6c:a2:9e:5e:
         14:2d:40:33:cc:66:cf:25:56:2c:8b:d6:43:d6:6c:e5:1b:86:
         9a:28:45:00:50:db:a4:80:bc:02:cb:d6:33:0c:d0:43:87:d3:
         f5:37:55:22:b6:35:3b:8a:8a:d6:31:19:36:1b:b3:03:eb:41:
         a2:da:5f:85:c7:70:b5:f1:91:83:76:05:c9:fe:0e:97:fc:c4:
         c7:41:38:c3:f4:82:ab:a9:70:60:38:cc:27:6f:dc:7f:20:9e:
         73:c8:ff:78:82:5d:3b:ac:26:8d:d8:55:3d:de:bb:d2:95:7b:
         af:6f:88:b2:6e:f4:e1:de:17:65:40:59:af:6d:96:a6:41:5b:
         fa:0c:43:ae:2f:1a:6b:8a:8b:0f:e3:df:ed:4c:63:2f:af:cd:
         ae:a7:84:2b:93:51:32:10:3d:c8:0a:81:38:dc:93:00:2b:02:
         63:d8:a2:49:83:00:06:ea:1a:aa:9f:74:1b:49:25:a7:07:66:
         e7:2e:33:af:78:78:fe:fc:0e:4f:8d:57:0b:0a:ec:aa:f6:b8:
         d8:fc:a7:96:1b:1e:ca:ad:fd:80:40:a3:a4:d1:94:24:9f:71:
         f5:76:5b:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----