Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
File:                     g5ka_NRV6xsXT8-J-OEOr39ws1U.mft (raw, json)
Hash identifier:          8eOLuisCXPsLIjDbVQ+f7G7Tfn1kNk9ACdHG2dE+XDE=
Subject key identifier:   CC:BD:95:F4:BA:EA:0D:18:B5:91:6C:49:EE:C4:1C:97:0C:B2:EF:A5
Authority key identifier: 83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55
Certificate issuer:       /CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
Certificate serial:       0194BC3BF038710D5755C6FAF85323173F65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft
Manifest number:          1449
Signing time:             Fri 31 Jan 2025 12:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:32 +0000
Files and hashes:         1: JTjIGaNjpzftNO-kFk1BOWWIlR0.roa (hash: QhcjtouUn5V8upOm/6e13CmIXaLDrm57wRtRFJI8pfQ=)
                          2: Udl4Y8sRVjim2rAFzxKQuecnclg.roa (hash: OhoAEIIYExt/Quqv/8KIxubBzRvH8hZ7uh526RWh78k=)
                          3: g5ka_NRV6xsXT8-J-OEOr39ws1U.crl (hash: 0ZSuM4mTN/JVAnLgFZcvAchPIZOtJUWO5Bcs7f09rXo=)
                          4: iItCjBu7NqQrWbQleZcs2InABtI.roa (hash: cxiVo1wViQ58OFWvWqbHd9qDUKA+J+hZBuev/y366W0=)
                          5: yjHXpxae4GvC2hVgF9lA84wEs5M.roa (hash: 4Bi95QC518DbFT+lc7i5bmvKADegBbbEtWKzYAy7Xo0=)
                          6: yvNRdoKPa6T74yCCtKA2QvJhdbs.roa (hash: gmVjs/E675HoTkgwked1IKQnLBzNPHHSFLe/DEwf98c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:f0:38:71:0d:57:55:c6:fa:f8:53:23:17:3f:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83991afcd455eb1b174fcf89f8e10eaf7f70b355
        Validity
            Not Before: Jan 31 12:00:32 2025 GMT
            Not After : Feb  1 12:00:32 2025 GMT
        Subject: CN=ccbd95f4baea0d18b5916c49eec41c970cb2efa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e9:76:cb:75:47:7e:8c:36:80:11:27:b0:f6:
                    72:5b:c2:9d:27:e4:f9:69:aa:55:2c:5b:e5:2f:16:
                    42:14:4e:d4:a6:13:d5:14:36:bc:12:f6:37:d3:2b:
                    45:fc:15:ba:66:88:88:3b:31:fe:60:07:c6:7f:ed:
                    5e:44:f5:5d:66:2d:74:27:3b:52:23:36:15:1f:50:
                    50:43:15:13:88:47:0d:04:f8:3f:0c:97:0f:a5:0d:
                    37:e6:8e:dd:13:bc:0b:bc:42:bd:c5:b6:8d:83:a7:
                    cf:95:fc:31:54:25:ac:49:52:cb:f4:b2:f3:5a:d5:
                    4c:8d:9b:63:c6:b3:1b:45:e9:1f:21:1f:99:36:09:
                    25:91:20:1a:7a:60:cd:fe:c8:26:a2:fa:c9:a6:02:
                    01:9b:2e:8d:e9:4d:c9:7d:7c:94:f0:ed:49:b1:c1:
                    7a:fe:96:34:55:c5:7a:eb:50:16:0d:fb:ac:b1:fb:
                    b4:77:63:8f:33:4d:a4:c9:61:2f:ae:dd:5d:86:e4:
                    87:b0:58:49:ce:8a:24:4c:81:94:a6:ef:5a:1e:8b:
                    39:9b:ef:af:97:32:b7:85:1f:f4:11:f3:8f:bb:ae:
                    a5:a0:7c:e6:ca:53:31:6d:c7:10:af:cf:ab:fc:18:
                    17:dc:19:46:ca:38:29:f6:85:63:ed:0e:f9:49:08:
                    0b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:BD:95:F4:BA:EA:0D:18:B5:91:6C:49:EE:C4:1C:97:0C:B2:EF:A5
            X509v3 Authority Key Identifier:
                keyid:83:99:1A:FC:D4:55:EB:1B:17:4F:CF:89:F8:E1:0E:AF:7F:70:B3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g5ka_NRV6xsXT8-J-OEOr39ws1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/69ed29-af4e-4524-adfb-e15437380099/1/g5ka_NRV6xsXT8-J-OEOr39ws1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:f7:04:bc:94:c0:07:e0:55:3c:d3:92:8f:bf:18:97:90:3f:
         43:72:53:14:97:45:45:e7:ae:9c:d5:98:35:44:b1:b6:50:61:
         e7:17:cd:2d:f4:7a:b0:fe:22:c0:ce:bd:80:06:d2:dc:29:f6:
         a7:5f:cc:8f:7e:31:06:97:96:1e:35:6a:20:d6:8a:c6:1d:ff:
         9b:3b:0a:0d:a3:7b:5c:af:8e:e2:a4:1d:17:7e:be:bd:74:ae:
         35:84:37:b5:5a:ca:c6:c6:93:a2:2d:ce:89:31:10:36:ad:5c:
         2c:df:44:ea:a5:01:5d:c4:1c:6c:62:64:ea:db:04:dd:46:8b:
         b4:31:fa:8c:ea:cb:64:ec:7c:92:70:a8:1b:09:27:10:1b:55:
         91:78:c5:4a:2d:a2:27:17:94:f9:a0:0b:1f:79:5f:27:15:2d:
         07:e4:b5:e2:1e:ab:11:d1:da:fb:95:92:f4:44:04:8d:37:bb:
         0c:e5:86:92:20:dc:9e:bf:2f:bf:fd:4e:7e:00:df:fa:00:2e:
         d1:d1:91:4f:90:2e:55:be:8e:41:16:22:f5:60:ed:00:a8:50:
         86:29:df:6e:5e:68:64:c5:fd:85:d6:ca:aa:c8:48:92:8d:05:
         b0:91:02:80:d8:f5:74:b5:55:cb:2c:0a:51:0c:65:ab:b7:8d:
         92:fe:ee:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----