Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
File:                     xd4yu5zJnhFd269rf6IwUXifL2E.mft (raw, json)
Hash identifier:          GyLMAd99FSX4beEp9fn5J/iA6H1rOSV8j/v2VwgObU8=
Subject key identifier:   EA:90:0E:48:95:0F:B1:8D:DF:87:5B:14:C1:3F:77:04:54:23:59:00
Authority key identifier: C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61
Certificate issuer:       /CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
Certificate serial:       0194BC3BFE864B5EEDA0A27899252973E9DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft
Manifest number:          0599
Signing time:             Fri 31 Jan 2025 12:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:35 +0000
Files and hashes:         1: _QBZZm_j6pkBqG7ULTSKSuYA6m4.roa (hash: J+NZ6+xHvgyZBnOnyLbSKcqDP+9z+FmiBI8TDK00aCo=)
                          2: gCeEg2-aKNA4NJwCq_wet9ZUHSo.roa (hash: c1XqtEHbwnDz4EEYbDLzjNU+kaoA7BLTobxYu0vC/Ec=)
                          3: jpN0hvuTgqmocPyed3qkYPDHQdk.roa (hash: k+R6t5Hzmk9H5O7QG4Q3cEOcrN/jFXUPR3aXqZ2Jg1U=)
                          4: jwHZ08gRRHj7Qb_vI14QIVxmAuo.roa (hash: 6PfMRUJs2ydpnjPkR93o1yH/0S/+dpkr0n+r8qVdIsA=)
                          5: xd4yu5zJnhFd269rf6IwUXifL2E.crl (hash: XGy62MJKS0LJLGSH0uxXPBvaCFhhWqPO3jhU8ejjhKs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:fe:86:4b:5e:ed:a0:a2:78:99:25:29:73:e9:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5de32bb9cc99e115ddbaf6b7fa23051789f2f61
        Validity
            Not Before: Jan 31 12:00:35 2025 GMT
            Not After : Feb  1 12:00:35 2025 GMT
        Subject: CN=ea900e48950fb18ddf875b14c13f770454235900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:cd:1b:6f:0f:81:64:f2:f2:89:78:6a:5e:4c:
                    15:2f:fb:77:2b:b4:8a:1e:74:22:e8:6a:8a:1e:ff:
                    5c:cd:b3:ff:d3:60:fd:db:84:71:48:c3:32:2a:7f:
                    f2:e7:c2:ea:b0:25:8d:a1:81:6c:5b:05:ba:b1:04:
                    5e:3f:8e:1a:29:fa:a5:d4:f9:26:e1:03:55:75:47:
                    27:73:a6:b1:d7:86:1c:ec:34:d1:c3:85:92:70:08:
                    fc:10:d9:a6:72:22:d8:57:fd:58:7c:b0:4a:f9:52:
                    85:1f:0f:32:ce:5c:31:48:61:7c:e8:96:21:63:97:
                    59:34:a5:ac:61:22:6e:f8:26:5b:c5:57:d7:9f:2c:
                    2a:ae:71:10:9c:af:54:e9:58:e5:0c:1a:b4:0e:7f:
                    00:03:34:19:9a:e0:79:a1:48:39:5b:58:14:08:68:
                    cc:25:58:2b:3a:f0:22:b3:bf:a4:f7:20:af:ae:8c:
                    d1:d7:01:40:f3:21:b4:d7:6d:81:ef:8a:c9:5f:17:
                    b3:f2:93:bd:27:a7:79:4f:39:a7:60:10:d8:7e:f3:
                    0d:25:ec:8a:5a:7f:4c:c1:f3:5c:ed:ab:bf:35:22:
                    03:b9:85:31:03:4a:00:f4:f0:de:61:27:b9:a7:ee:
                    6e:95:e3:1a:11:4c:51:d2:81:ba:c0:b1:b2:51:c1:
                    5d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:90:0E:48:95:0F:B1:8D:DF:87:5B:14:C1:3F:77:04:54:23:59:00
            X509v3 Authority Key Identifier:
                keyid:C5:DE:32:BB:9C:C9:9E:11:5D:DB:AF:6B:7F:A2:30:51:78:9F:2F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xd4yu5zJnhFd269rf6IwUXifL2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bd09e7-c40b-47a6-8a2e-0636753679b6/1/xd4yu5zJnhFd269rf6IwUXifL2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:0e:5a:e9:50:93:0e:08:7e:a8:69:67:e1:59:14:7f:ec:21:
         d9:b1:ab:18:e7:34:0b:34:46:a8:89:7b:4d:d5:0f:2a:7b:ee:
         e2:05:3b:32:c4:6e:d7:f6:d4:40:d0:f8:63:f0:28:e9:74:9d:
         38:2e:c5:23:ef:71:9c:c7:ce:fd:41:e3:8a:26:34:cc:7e:2d:
         e5:a6:85:3a:61:67:59:8c:47:cd:de:dc:a6:8c:5a:88:f5:c6:
         62:79:46:9e:1b:18:2b:ae:df:ae:16:9b:05:b4:2c:cb:54:ff:
         26:ba:31:e4:b1:51:48:09:1d:a5:01:a9:e0:d5:79:79:37:ca:
         d0:ca:0a:d0:39:96:04:49:17:63:dd:49:d6:13:e4:79:2b:c2:
         b8:a7:56:9a:cc:46:0f:aa:b6:bf:b9:0d:e9:9d:97:61:bd:35:
         2b:46:ca:6b:11:b1:6f:04:b1:99:e1:23:34:d3:29:2e:53:ea:
         80:28:6f:b3:71:08:50:5e:52:bc:a3:d1:db:05:9c:7c:77:71:
         69:6c:c0:05:78:45:e3:3c:0b:12:24:1d:d8:66:70:c7:24:ac:
         02:fb:c4:c6:8c:53:5d:6d:9b:a3:aa:0a:62:00:b1:2b:42:13:
         38:aa:de:21:f3:67:25:13:69:41:47:4c:3d:03:ec:a9:c2:e0:
         b6:e7:b5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----