Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
File:                     3EThniu05wI8wboQ1Jt07eS_hlw.mft (raw, json)
Hash identifier:          IGqDy29VZKNhjhwuPl5to4dzte9pcg4d0iYJA9Gjqes=
Subject key identifier:   F9:26:46:DB:3F:82:66:A2:5F:4C:E5:BD:06:58:3C:3D:08:FB:25:A0
Authority key identifier: DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C
Certificate issuer:       /CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
Certificate serial:       0194BCA9C1632370659ACBF67A1D92CCBEF1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft
Manifest number:          0D88
Signing time:             Fri 31 Jan 2025 14:00:29 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:29 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:29 +0000
Files and hashes:         1: 3EThniu05wI8wboQ1Jt07eS_hlw.crl (hash: Z2E3G41DyYspCOv5/5HA0rbqPLuDdchwEgZ4qWx6ado=)
                          2: NO2hwXxk6AiYVNho9DdnmakKibo.roa (hash: KjRA6xm9G+dFvFvEr1pRfwpBhmr4/09q+ZWaH5ApdDY=)
                          3: On6R4nNTZ0YYv_0GBGytm6COqe8.roa (hash: bNbiiOOyNE6FHV7YY8Nd3d02QHZTqUZthKpv3jqVHn4=)
                          4: _UiUxv0oU2Vs8vl9aQlqGT-rguM.roa (hash: EibngS/6U5WbywdZke7WcdMlnrfByt82mvGn2UMi818=)
                          5: qnHwx7ZjqkHGMQ3UL_6iH_ZiPZ0.roa (hash: v6x8FXcAuZgdOrpOuZAffsHlmhE2j1MwJFDVe05keHE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:c1:63:23:70:65:9a:cb:f6:7a:1d:92:cc:be:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc44e19e2bb4e7023cc1ba10d49b74ede4bf865c
        Validity
            Not Before: Jan 31 14:00:29 2025 GMT
            Not After : Feb  1 14:00:29 2025 GMT
        Subject: CN=f92646db3f8266a25f4ce5bd06583c3d08fb25a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:75:36:ec:56:47:13:4f:0f:20:c9:87:06:80:
                    64:15:a3:71:6a:c7:de:0b:31:2a:ae:cf:32:fe:6b:
                    22:36:91:05:2c:01:ff:71:33:4e:29:8c:b6:8f:24:
                    05:ae:3d:35:b9:0b:47:70:c0:35:3b:98:90:9a:0d:
                    67:60:67:97:ec:86:b6:be:f6:f1:00:dd:50:57:fe:
                    78:97:6c:66:12:90:fb:44:ee:29:21:23:cc:88:6c:
                    13:f1:ac:98:8f:ff:1c:15:5d:90:76:94:08:4c:1c:
                    12:ca:49:b5:fb:6e:db:db:29:e0:56:ea:85:f1:ab:
                    58:4f:61:67:30:57:0e:5f:53:6a:33:09:4d:28:9d:
                    91:b5:61:c7:53:6c:11:ff:65:52:db:28:78:f1:8e:
                    8b:5f:17:6a:f6:36:0f:17:32:ab:6d:62:06:76:d4:
                    c9:de:7b:c2:3d:bc:96:b0:bb:de:da:f4:8d:61:fe:
                    e1:f7:e6:ce:c4:2f:a6:9b:5b:03:5c:a5:c0:15:32:
                    55:89:ba:8d:b6:66:b9:48:58:73:9a:5f:1f:b0:ed:
                    c0:6f:68:26:93:7a:4c:dc:45:fc:7b:94:7f:a3:1f:
                    f8:c4:29:c3:32:1b:7b:8b:6f:0f:d7:9c:dd:2b:f8:
                    a8:59:ad:fe:49:fc:b3:a9:8d:c7:61:9c:6f:3e:cf:
                    80:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:26:46:DB:3F:82:66:A2:5F:4C:E5:BD:06:58:3C:3D:08:FB:25:A0
            X509v3 Authority Key Identifier:
                keyid:DC:44:E1:9E:2B:B4:E7:02:3C:C1:BA:10:D4:9B:74:ED:E4:BF:86:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EThniu05wI8wboQ1Jt07eS_hlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/46f5b9-6000-4072-89f2-4c82ace72c85/1/3EThniu05wI8wboQ1Jt07eS_hlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:15:27:f1:75:e2:d0:5d:c4:02:c9:79:05:34:5b:69:6e:de:
         94:6f:0a:b2:59:e2:98:dd:de:cc:be:a6:e7:e2:f9:5a:3a:b4:
         e8:d4:c4:13:1a:ea:5c:18:87:bb:da:6a:30:39:13:4e:da:18:
         3d:3e:d1:c5:ac:d2:99:e3:fe:67:0b:9c:f0:2c:33:aa:e2:c7:
         a8:11:f4:3b:0e:b2:91:06:52:f9:0d:22:fd:67:9b:75:29:95:
         3f:9b:a9:3b:e8:bb:1e:96:ac:05:a9:ff:81:4a:9e:99:30:be:
         ab:a6:85:79:d2:47:38:b9:8f:6b:da:c1:00:c0:52:e2:67:dd:
         44:8b:a0:6e:7e:7f:17:30:18:eb:bb:f4:2c:93:34:4b:6b:e5:
         33:be:5d:fe:9b:d3:98:ab:71:6b:3e:02:e0:6a:92:b6:94:90:
         2b:23:b8:a0:df:58:7f:60:23:49:2c:56:3b:ab:82:c4:63:72:
         71:a2:95:dd:e2:7a:6e:fc:22:c8:4c:03:1f:58:6c:d0:c0:53:
         ba:fa:50:c8:88:1b:8d:a5:8b:d5:ae:aa:39:86:56:0a:12:79:
         5e:db:50:6e:90:d6:c1:7e:f3:cd:c5:da:18:d0:4f:2f:1c:7b:
         9c:4a:9f:3f:ae:06:a9:f9:f4:9f:88:e4:6c:e2:25:ef:e5:a5:
         9d:79:05:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----