Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
File:                     OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft (raw, json)
Hash identifier:          R9SfZO21z9svnLTJrWDCEc1zaqvVgcwIEVpOjyv0wt4=
Subject key identifier:   88:44:F2:F7:43:0E:A0:C7:82:38:E3:BA:FB:F4:65:1A:8C:B3:F4:8D
Authority key identifier: 38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43
Certificate issuer:       /CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
Certificate serial:       019994B3CCA893E1B52D84897A2734C98CA2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft
Manifest number:          16AF
Signing time:             Mon 29 Sep 2025 09:00:35 +0000
Manifest this update:     Mon 29 Sep 2025 09:00:35 +0000
Manifest next update:     Tue 30 Sep 2025 09:00:35 +0000
Files and hashes:         1: OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl (hash: CqKCWMbEzdnjMTHpyDNQHMU6YJYCWaeOmkCusLMCVKA=)
                          2: P-qDcpUjUWgiMApBb5BbPbEUdus.roa (hash: S9R1fM6ee5L0InXw/97Mdsuva54hJaVpgqKQTLiB5Tw=)
                          3: VyN653hL4rAY_e2hdksKGUqIxbM.roa (hash: VrgaTpIZV9tWUm9PEYZT3bNMzddxfH9mCTF1o6wKY4w=)
                          4: ev01UlTf8xnmaZcDqeNnJaY8mDw.roa (hash: bBrSvTSN1a9z7klG5jouNd18ngFrGD6DYe0uz0gXvaQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:99:94:b3:cc:a8:93:e1:b5:2d:84:89:7a:27:34:c9:8c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38bd6d8ebb82404d5709351bc2329a0ee43a9a43
        Validity
            Not Before: Sep 29 09:00:35 2025 GMT
            Not After : Sep 30 09:00:35 2025 GMT
        Subject: CN=8844f2f7430ea0c78238e3bafbf4651a8cb3f48d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:88:32:8a:40:87:ce:5e:d5:3f:1a:86:3f:f6:
                    39:61:43:ad:60:39:d2:af:21:ed:84:6b:14:38:c9:
                    7f:33:1f:bb:8e:bc:07:02:cf:db:f2:c1:ed:12:36:
                    be:9f:24:b9:22:42:e3:f8:b3:64:1e:a8:99:52:6c:
                    cc:1c:fe:51:83:7c:1c:ba:f4:eb:bb:18:48:67:b0:
                    b6:60:98:65:19:86:52:f1:a7:d3:39:92:9c:fd:3f:
                    9e:09:f2:94:14:68:78:36:0d:9b:e3:b7:e0:9d:e0:
                    04:68:ee:9b:b3:fd:cf:c9:1f:07:fe:c4:5f:de:35:
                    a9:70:5f:61:cc:b0:36:8a:96:38:8d:54:ed:1c:5e:
                    ca:36:51:93:5e:a0:44:a3:b9:92:e7:82:ac:cc:d7:
                    b1:8f:7a:cc:b7:cb:f1:3e:c9:2f:09:f2:b1:7b:88:
                    e2:ca:45:89:26:63:28:66:70:77:d8:a0:50:0d:0b:
                    ee:da:61:d0:3b:67:c4:20:1d:d8:ef:cb:8b:bb:ad:
                    fb:33:82:b5:f8:50:0c:b8:bf:22:fb:56:d1:f7:85:
                    15:5a:2a:dc:1c:1f:8e:55:2f:ca:b1:a2:3e:91:73:
                    75:1d:86:54:98:e1:c8:77:8b:be:0c:ad:07:ff:fd:
                    37:a7:40:16:48:8e:f4:95:5b:56:1d:18:b0:a8:fa:
                    74:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:44:F2:F7:43:0E:A0:C7:82:38:E3:BA:FB:F4:65:1A:8C:B3:F4:8D
            X509v3 Authority Key Identifier:
                keyid:38:BD:6D:8E:BB:82:40:4D:57:09:35:1B:C2:32:9A:0E:E4:3A:9A:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OL1tjruCQE1XCTUbwjKaDuQ6mkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/bb3b49-62d0-497c-bd1e-8c9539f444c6/1/OL1tjruCQE1XCTUbwjKaDuQ6mkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:0f:41:2f:19:91:ba:4c:04:45:52:6e:58:9f:cb:20:ae:9d:
         4e:e3:10:15:f7:dc:3b:24:69:ec:62:94:43:89:52:7b:f2:06:
         89:d3:de:21:f3:11:63:d5:35:97:52:6b:91:40:6c:25:90:d5:
         50:a0:97:7b:99:d9:5d:c5:91:36:3c:b1:b0:35:93:47:b8:ab:
         3f:02:48:5c:a0:0c:a0:4d:49:5a:c3:03:e8:d7:bf:c7:88:ba:
         29:89:38:e6:1f:4c:d2:67:0b:28:d2:b9:dd:73:7a:31:e0:f6:
         9b:f6:a7:81:0d:85:ef:51:9c:d8:0a:6e:2d:03:6d:1e:86:c2:
         90:50:0e:90:a8:f7:68:69:cd:b5:ff:dc:f0:ab:7a:66:c9:13:
         83:8c:0d:46:5e:b4:f2:32:5c:6f:a7:b6:8e:75:15:3e:a4:39:
         20:0a:ad:c7:b5:d0:16:c0:a0:a6:10:7b:ee:0f:94:59:80:5d:
         88:9f:88:a9:38:e8:3f:e2:ff:7d:83:cb:45:f2:8c:aa:ab:49:
         60:2f:9b:e3:e1:9b:e3:8e:70:dc:36:81:44:2f:93:1e:1d:37:
         a7:db:8e:b7:97:a2:df:db:b1:f9:6c:36:4a:67:19:62:e2:db:
         81:07:cc:8a:aa:94:2f:77:95:d8:d6:30:ac:60:a7:c0:5e:3f:
         96:41:2f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----