Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
File:                     _JYxHyB-MOBOXtGJYLMfs7pn2cw.mft (raw, json)
Hash identifier:          cD3wUWfHuMkI7sRCKR8pPS3MtQVg1R3nk1fdJVXKqXk=
Subject key identifier:   E8:0A:B6:74:DC:B7:A5:0A:2A:F8:61:0E:22:39:5B:E4:B1:B4:BA:F5
Authority key identifier: FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC
Certificate issuer:       /CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
Certificate serial:       0194BCE0B8CA51B97018FC09CCCDE2E8C491
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 15:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:31 +0000
Files and hashes:         1: AUcUK79-20dcWVzVbs60qA_79k0.roa (hash: FTerUGKVvthiTr4P9HvWIOzRwtpT4BbcBUUyIajjaKI=)
                          2: NLujiyLDNINg7_ALKuGpNWHf90o.roa (hash: S6u8CLwoGP6KKvaV/764lqLnv660M41bJlIaV+CiIbg=)
                          3: _JYxHyB-MOBOXtGJYLMfs7pn2cw.crl (hash: YAE8ksDMmo0TVkLwdNHB7ziSFp9zITHb+rPJTsN9rWM=)
                          4: nQ49DO6jLERCGih3b5vaO6Deyv4.roa (hash: ckCboVu+SkUbYcpUmTQnzPt52sUcRNCO41XKBdBSHpY=)
                          5: xG2m4O3Ec8nKtJOjwCFJQqNJGtM.roa (hash: craC+wIX6RgDFVXZJLTuVHpltgHDojNuxm0azD0e50I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:b8:ca:51:b9:70:18:fc:09:cc:cd:e2:e8:c4:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc96311f207e30e04e5ed18960b31fb3ba67d9cc
        Validity
            Not Before: Jan 31 15:00:31 2025 GMT
            Not After : Feb  1 15:00:31 2025 GMT
        Subject: CN=e80ab674dcb7a50a2af8610e22395be4b1b4baf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:68:88:cf:a6:e7:29:38:6f:e8:c9:95:39:6f:
                    50:f8:27:c0:34:fd:bb:1d:42:ce:77:c2:16:32:89:
                    98:a8:af:99:b4:4b:85:9d:f8:8e:a4:12:6f:0f:8c:
                    6c:ba:74:fc:d9:4a:e3:ca:a5:2e:a0:59:26:77:f5:
                    6a:58:84:bb:c2:e3:7d:c3:22:51:dd:ef:34:d7:1f:
                    db:17:5f:f7:d5:96:aa:b8:75:aa:5f:92:ce:09:2f:
                    e4:b2:d1:b8:41:d7:29:e2:2a:4a:2f:8b:81:a8:cb:
                    95:8a:5c:19:6d:4b:1b:07:5e:14:41:db:4b:c5:6a:
                    7d:4d:8c:b7:da:df:52:23:19:64:7b:ec:94:4e:7b:
                    91:cc:ef:53:3b:72:a7:69:33:d9:c7:8d:88:8d:85:
                    50:0d:99:3f:c2:14:b9:e8:a5:27:5b:cf:d1:74:d4:
                    ff:16:06:02:61:79:ff:a9:df:89:e0:de:ac:8d:3d:
                    b1:fc:e1:bc:fc:48:01:a9:93:17:73:38:3a:ad:d8:
                    83:47:25:20:36:ff:31:ec:d4:c5:3d:f8:c2:93:73:
                    15:75:c7:fc:ea:c5:eb:4a:dd:6a:fe:a4:ea:fc:1f:
                    8e:77:8d:08:f7:88:29:6b:00:58:59:39:9e:04:e8:
                    1b:c5:0e:be:88:96:e6:c3:3b:2e:99:43:c4:03:25:
                    f1:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:0A:B6:74:DC:B7:A5:0A:2A:F8:61:0E:22:39:5B:E4:B1:B4:BA:F5
            X509v3 Authority Key Identifier:
                keyid:FC:96:31:1F:20:7E:30:E0:4E:5E:D1:89:60:B3:1F:B3:BA:67:D9:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JYxHyB-MOBOXtGJYLMfs7pn2cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bc48d2-28e8-405d-9f9a-03897f4cb35d/1/_JYxHyB-MOBOXtGJYLMfs7pn2cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:38:15:20:44:0a:84:a2:12:1b:26:95:2a:06:0c:4b:9a:e9:
         93:f9:ca:59:24:0f:cd:b3:f2:2a:93:ae:12:e5:f0:25:7e:f5:
         df:4a:28:8a:ee:4d:84:ba:5b:ec:ed:20:c9:9d:40:4e:11:5b:
         84:44:fa:3f:da:0c:25:22:83:21:c6:0c:9e:41:41:1c:eb:b6:
         37:90:56:d3:05:5f:95:42:ed:8f:2b:e5:6b:e1:98:db:ac:f8:
         a2:e6:40:ac:b6:16:01:96:7e:c0:e4:d8:4a:a6:a4:cf:ae:80:
         dc:98:33:8e:5f:0b:75:ed:5b:c8:32:d1:20:01:ab:54:98:86:
         25:1d:73:d5:70:17:f9:c8:24:95:37:c7:84:be:ca:6f:b7:ff:
         fa:ca:c6:8b:9e:85:5e:12:2e:b0:36:2b:3a:c0:ae:3f:c9:48:
         dd:7e:bc:aa:a6:d4:9c:5a:e7:8b:35:f6:ae:e1:01:fa:db:05:
         d4:1e:2e:99:2f:bd:c6:5d:1f:e7:1f:e3:42:f7:c0:3e:e5:78:
         90:88:68:15:06:4d:8b:c4:36:65:25:86:cc:e4:08:c4:ab:2a:
         18:f0:06:93:20:9c:57:62:d5:1f:2f:b5:d7:2b:80:cd:0a:5c:
         29:9a:c4:ae:08:d9:af:6d:ce:c8:6d:23:7f:42:e5:93:04:ef:
         81:7a:fc:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----