Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
File:                     hduDqDZaYER28oLSTTJ60e8P3lI.mft (raw, json)
Hash identifier:          P6fok3THc5VIbOfuLZBoX7S3Q/XmU8som/K4VBhrY5s=
Subject key identifier:   00:FE:DA:65:5A:28:14:13:8D:B7:42:5F:8E:74:EE:B0:B2:34:53:6B
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Certificate issuer:       /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial:       0194BC3C47158F0965D2886FE594ED95F5C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 12:00:54 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:54 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:54 +0000
Files and hashes:         1: ESXrpZgGSFTBEiaTfpuO1Ua_m8o.roa (hash: fDiB8gqQjZSMqzctJDGZ4eRYCm04M7zaIMybwkgd7NA=)
                          2: OX-bEI30XI3qZt_0uPtv4ZRBwqM.roa (hash: R7u83JZv+jgtAvgDHO6iu/lmN813J7jjtpcNdpp0wSc=)
                          3: SY3ZqrZlsamFdxroiGiYXJ5gcVY.roa (hash: xkCC9spBf1ER1WQbzhUiifntsvYj+ggONAikx8P5lU4=)
                          4: a9hV5v7mUiE4DnyjTCLFaLF9E48.roa (hash: dRABmrzUalUqXSxyUGJSYnEylJa1e3qLhaBosE0bOrA=)
                          5: hduDqDZaYER28oLSTTJ60e8P3lI.crl (hash: EfsL7oMGEUg46DuNNww6IYv850nKyk1/6zbHFjrodXY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:47:15:8f:09:65:d2:88:6f:e5:94:ed:95:f5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
        Validity
            Not Before: Jan 31 12:00:54 2025 GMT
            Not After : Feb  1 12:00:54 2025 GMT
        Subject: CN=00feda655a2814138db7425f8e74eeb0b234536b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:10:e0:23:72:8f:cb:d3:df:33:5a:09:df:61:
                    66:07:c3:e6:fb:e4:5a:46:1d:c0:d3:22:07:17:ff:
                    51:c5:e2:b2:c5:13:fb:5c:90:3f:f5:26:1d:af:f7:
                    83:93:84:e3:b3:32:5b:8a:3b:c4:73:4a:13:43:88:
                    4c:ec:d3:3f:7c:77:8d:f0:48:5c:21:68:44:c4:17:
                    d5:c3:44:f4:fe:c5:3a:8e:90:dc:78:6e:b6:81:72:
                    d3:68:5b:00:46:55:91:f5:a6:83:36:7f:00:53:5d:
                    f1:65:cf:60:36:b6:96:c1:4e:25:47:78:53:df:e6:
                    be:45:ac:66:54:cb:25:2e:c3:49:aa:35:63:6f:71:
                    70:60:1c:1a:1b:09:22:3f:86:27:5a:1c:d0:02:fa:
                    19:b6:41:73:25:32:97:1f:e0:95:3b:d0:e8:6e:06:
                    2c:96:cb:7d:10:80:8b:b4:89:a3:5a:2a:39:f1:23:
                    c9:ef:d9:d7:14:b6:15:61:be:ca:94:a6:20:a8:90:
                    ee:80:6f:2c:8b:5f:0e:ff:9d:5e:63:8b:75:0c:ad:
                    4a:26:f3:4f:43:00:00:9d:07:10:37:8c:bc:e1:5c:
                    36:b7:bb:12:f6:9f:b0:72:e0:4a:90:01:4d:83:ef:
                    47:a4:50:df:17:0f:ad:69:46:42:ab:9c:54:e5:39:
                    b4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:FE:DA:65:5A:28:14:13:8D:B7:42:5F:8E:74:EE:B0:B2:34:53:6B
            X509v3 Authority Key Identifier:
                keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c2:9d:e8:2e:f6:81:2e:f2:cd:db:a4:f4:3d:cb:af:08:0e:
         a2:7b:e3:f6:08:0a:f6:34:54:96:91:7b:7d:54:47:b0:00:19:
         8d:37:eb:f5:77:c0:97:f1:5a:c9:fd:a1:f9:7a:47:9c:3f:f9:
         40:d3:82:11:ea:d8:f9:a2:6d:00:0a:03:33:b8:49:7e:31:e3:
         22:a5:91:b7:70:b5:2e:5d:f9:41:77:ff:ab:6b:12:7e:32:f0:
         e7:c2:66:b5:26:51:a0:30:23:26:67:b8:9c:b4:16:87:6e:0c:
         31:4e:c0:61:d0:c0:9e:ee:16:82:b2:3e:0d:ad:9c:cd:25:82:
         c3:78:cd:3b:de:fd:0b:a2:0f:ef:30:1a:cc:1d:c7:4f:ce:03:
         3f:79:d7:0c:32:d2:e6:2d:34:e6:8b:e8:68:07:61:f7:51:14:
         fc:4b:9d:df:df:da:11:40:33:11:55:33:73:19:d6:f6:e4:a2:
         c1:74:42:14:c1:b3:a0:d6:5b:f6:f8:f1:05:75:a2:d1:3a:6d:
         78:d9:13:1e:82:ce:4c:6c:1d:c2:9f:17:58:bb:a4:fb:fb:4d:
         85:70:35:18:de:aa:82:4b:f3:a7:f0:7a:e7:86:14:75:db:a0:
         25:a7:0c:77:18:9c:5a:b2:4f:f9:7a:09:e9:da:6a:98:f1:01:
         29:71:79:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----