Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
File:                     EhSn4qjHASMlrpc-0aK7oFsrucE.mft (raw, json)
Hash identifier:          l2ayiL8VYmaI14MfOmzjSqpRu+/b88irK7TUGn7+RGg=
Subject key identifier:   17:B3:B4:9F:BB:BF:8C:81:3F:1D:3E:0D:54:B3:D4:D3:E3:78:C2:75
Authority key identifier: 12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1
Certificate issuer:       /CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
Certificate serial:       0194BC3C27552C570B77519DBFF8B832804A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 12:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:46 +0000
Files and hashes:         1: 1DU-9zpdMFnLCpRFqEpUKjP1_SU.roa (hash: ECSzVL8H6djguciJDERoW94dzwpyxXLeOE5CnliCEPY=)
                          2: BH1qEokqqzS6QZQI0vKu4oCRwq0.roa (hash: FAUeRE2dz1nIQh6oaxPr0ilW7qqs+jlIqjguVCoEOyM=)
                          3: EhSn4qjHASMlrpc-0aK7oFsrucE.crl (hash: 1+Jc1tRr8AxII8lvVsMH3W81IYwA9jAyYBMgNWihUR8=)
                          4: Lhc4yA3jd8j7g6n7KG81PHwkNHA.roa (hash: RY0G2x4F2FmW8VJCMd43Nl3qoENwRZMQ0FWtUZlg72M=)
                          5: QhIb9pU2TFz78TnVhDlEb28bLew.roa (hash: RCBq8YAUky5FP3KjBMjIj1v3CgulfdLRMkZuDyWMETw=)
                          6: gOoOuIZOmTcmldEZvCq4XtMtjO0.roa (hash: hmwK87HYYcPAKwIEHNLhFiTNPFHHx/u4UOy/l/S/Aj8=)
                          7: m_k3Aqy-aX7CwHacvMO7KscI6WI.roa (hash: FW7of+gpwTivV7HfNQEL7I3Yftx4/Lrk33rZymDJAac=)
                          8: nie0Mmy1gieDJiKDb3rzMQ7GKsE.roa (hash: yfewYdidxvBmXesHwdrJgftWGHYEK1CBv49h98D7XZY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:27:55:2c:57:0b:77:51:9d:bf:f8:b8:32:80:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1214a7e2a8c7012325ae973ed1a2bba05b2bb9c1
        Validity
            Not Before: Jan 31 12:00:46 2025 GMT
            Not After : Feb  1 12:00:46 2025 GMT
        Subject: CN=17b3b49fbbbf8c813f1d3e0d54b3d4d3e378c275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:5b:7c:1b:79:93:03:57:f2:2b:fb:45:33:4f:
                    f8:3d:42:58:71:ef:84:50:60:dd:ae:80:d2:94:89:
                    72:9d:4f:31:9d:96:47:51:d6:ad:db:ba:05:26:22:
                    62:f5:79:ae:b7:94:59:e7:65:0a:9d:79:62:03:13:
                    22:eb:c7:c7:52:50:63:f9:38:2a:32:1f:6b:73:6b:
                    2a:d0:a1:05:81:45:57:7a:6b:96:4b:e1:c6:e3:22:
                    74:02:f0:c2:2e:ff:a3:e9:f1:80:f4:13:b3:bc:dc:
                    3d:92:6c:be:8e:62:af:ef:8b:1e:40:0a:ee:7d:17:
                    92:c9:7b:5e:b8:31:6c:4d:e4:3e:2e:97:56:f2:5b:
                    fd:da:7f:4f:69:08:0d:94:0e:3e:55:36:87:a3:02:
                    53:09:df:a7:2a:58:78:18:3d:ff:14:8a:92:30:02:
                    cf:50:2e:e8:24:fd:a3:ad:5b:fa:04:25:9f:85:9c:
                    ca:09:88:21:b9:f3:c0:5d:6f:86:8c:0a:7d:ef:db:
                    64:ba:ea:d6:8a:9f:08:68:c3:30:24:a5:80:d5:b8:
                    09:a1:e2:db:91:3d:b6:7e:54:36:84:ab:21:58:6a:
                    2c:4a:27:f1:e3:00:92:a2:02:04:fd:bc:b9:fb:87:
                    2f:3b:e8:77:42:d6:3f:5c:94:85:87:3f:62:24:95:
                    eb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:B3:B4:9F:BB:BF:8C:81:3F:1D:3E:0D:54:B3:D4:D3:E3:78:C2:75
            X509v3 Authority Key Identifier:
                keyid:12:14:A7:E2:A8:C7:01:23:25:AE:97:3E:D1:A2:BB:A0:5B:2B:B9:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EhSn4qjHASMlrpc-0aK7oFsrucE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/a68dbc-3f94-4fed-8d9d-e9c3649c1218/1/EhSn4qjHASMlrpc-0aK7oFsrucE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:00:3b:5a:56:73:e0:bd:04:96:c5:a1:0f:fc:d6:a0:73:a9:
         7d:61:bc:f5:85:29:67:47:e9:3d:12:29:05:60:a3:8b:87:0e:
         fe:d3:2e:e9:d1:dc:9e:ba:39:49:e8:16:4d:23:e4:22:dd:56:
         56:82:a3:61:1e:2c:99:ce:a5:47:86:d7:25:f1:cb:9b:75:8f:
         5b:6b:1e:97:46:34:03:91:26:96:65:8c:4f:b5:bc:09:54:62:
         a7:e7:7e:83:e1:c4:b3:5a:6b:70:d1:b4:ea:8a:80:3f:71:69:
         f1:37:93:2d:84:5c:db:e3:cd:6e:b1:19:3d:3d:63:ab:50:00:
         cb:7c:af:ef:4b:72:86:5e:d4:40:02:1d:6b:2e:04:59:d9:b5:
         e1:51:9b:54:a6:71:18:c0:09:05:83:77:33:bd:94:4f:4e:5f:
         4b:e0:7c:c8:23:03:c5:b0:f9:88:30:e1:d2:14:fa:1f:fe:5b:
         93:ae:c8:65:ef:35:e6:b8:70:89:b7:05:bb:4d:e3:00:90:4b:
         cc:a2:9c:01:97:cc:60:89:d5:12:21:a3:29:1a:4e:94:bd:f4:
         85:b0:74:7c:83:44:47:bb:fb:80:9d:50:97:e0:b9:a7:eb:d2:
         dc:3c:8a:17:bd:4f:3b:36:1c:7e:70:36:9b:63:2e:8e:d4:94:
         a3:c4:0b:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----