Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
File:                     z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft (raw, json)
Hash identifier:          HTlcsatRYcXZx3hXQn9lPMPDmQ/m9aLqxW35xStjdo0=
Subject key identifier:   DB:C7:06:98:31:D9:6B:0A:10:9B:27:E4:D1:EE:32:42:46:6B:3D:30
Authority key identifier: CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06
Certificate issuer:       /CN=cf89cb889f99212e8bf53d06e45d87abb9169506
Certificate serial:       0194BD17879E076556B62D2C291B91A4568F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft
Manifest number:          1150
Signing time:             Fri 31 Jan 2025 16:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:23 +0000
Files and hashes:         1: 5Jz_YVrHUaJFP3SWK2dAceUCNAY.roa (hash: FxW6Fxg1CqiXEfh82Ml+2If3mdaDZD5mWZiJYMERn9A=)
                          2: 9IMJEhU9cwZnj5RrF1Myybjj004.roa (hash: xqWR3tjhkJLohibyPz5kCzd/ogLtHaiChUPlLNFeUcM=)
                          3: SOxZEcdEe4nMHkNYwsHI6OPYza0.roa (hash: thDY9kCDf2fXa8AeCthe6BXqevrC5JyFRp9zOfWU8Gk=)
                          4: z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl (hash: voggmQlKlqRzw/5pkQB0VaqbirsVaD7h1hNRKwsxHPk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:87:9e:07:65:56:b6:2d:2c:29:1b:91:a4:56:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf89cb889f99212e8bf53d06e45d87abb9169506
        Validity
            Not Before: Jan 31 16:00:23 2025 GMT
            Not After : Feb  1 16:00:23 2025 GMT
        Subject: CN=dbc7069831d96b0a109b27e4d1ee3242466b3d30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:50:58:6f:d5:45:7e:59:3a:ab:5c:a8:f8:17:
                    63:d2:84:27:63:06:10:ba:b2:62:a2:42:c7:7f:a1:
                    be:4a:7a:a4:b9:10:ae:a5:9c:f5:22:07:3b:f6:d8:
                    7f:4f:e0:59:b0:ce:b1:0c:a5:ae:e7:db:5b:ba:d6:
                    1b:ca:93:07:6c:b2:39:55:ad:54:f9:ab:75:a3:23:
                    8d:c3:2d:65:e0:5c:c7:79:0d:c2:38:0f:32:8d:57:
                    5b:ed:43:58:5d:9b:c0:37:90:26:60:76:0a:2b:54:
                    39:53:7c:8e:a8:f2:d3:90:ee:2a:8c:22:96:b3:c7:
                    0b:80:ee:a4:84:f4:7b:5d:63:00:c9:56:65:dc:94:
                    cd:cd:95:09:7e:2f:c1:ad:2f:51:9f:34:f7:9f:2a:
                    48:e9:14:f8:29:80:9b:b3:1c:c2:fe:2d:5f:e1:66:
                    0f:27:ca:15:a6:c1:fc:82:c0:0d:e3:77:93:a5:6e:
                    82:0f:11:3b:6c:86:fe:17:9d:de:85:3c:06:a0:de:
                    40:89:22:6c:dd:5d:c0:6b:d3:e2:3f:ca:5c:64:d1:
                    44:ff:ee:90:19:6c:79:e8:30:7c:f2:81:d1:44:08:
                    8f:8b:18:07:74:f2:7c:1c:86:36:a1:ec:c8:dd:de:
                    18:40:65:80:76:e9:d4:dc:2c:0b:6a:c4:d8:7b:88:
                    de:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C7:06:98:31:D9:6B:0A:10:9B:27:E4:D1:EE:32:42:46:6B:3D:30
            X509v3 Authority Key Identifier:
                keyid:CF:89:CB:88:9F:99:21:2E:8B:F5:3D:06:E4:5D:87:AB:B9:16:95:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0b8951-2699-44b3-9067-d9a40c4d3291/1/z4nLiJ-ZIS6L9T0G5F2Hq7kWlQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:06:58:f2:37:e6:8b:e5:19:0a:0e:ec:16:5e:7d:8c:10:0b:
         c6:6f:68:ae:3c:75:95:74:aa:b2:89:fe:75:24:f3:56:87:3e:
         f4:24:57:c2:90:99:5a:c5:34:fd:8f:07:f7:3f:26:f8:11:95:
         99:b3:14:d3:a3:91:c6:75:c5:5f:fd:53:c6:ce:71:88:a6:2b:
         3b:f0:a8:6f:26:37:85:05:75:95:49:1b:59:57:94:85:28:5d:
         56:6f:f8:f2:6a:5e:f5:59:0d:08:48:fb:e7:2f:17:15:e4:1d:
         a2:18:79:0c:6f:cf:8e:01:90:25:2d:26:d4:54:65:62:7d:74:
         9b:f7:cc:ea:f0:cf:ca:5d:dd:99:33:81:af:c0:40:f0:52:72:
         80:76:33:d1:91:73:2e:21:3d:9c:e0:32:ba:2f:df:65:94:cb:
         80:74:2d:9e:37:c9:38:60:fc:99:08:88:a2:ea:0a:fa:e4:6f:
         a2:71:9a:cf:e0:f0:14:af:a0:55:b6:d2:07:c2:1d:d3:58:d2:
         d9:31:6b:ac:fe:9d:c1:19:da:67:e4:c3:bb:0d:60:43:e9:db:
         87:94:83:9b:cc:da:ac:4c:6a:8c:2c:61:08:47:79:79:35:52:
         af:cc:8b:68:d7:76:0e:ac:b4:13:b9:63:ce:70:aa:59:06:d0:
         b1:a2:30:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----