Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
File:                     edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft (raw, json)
Hash identifier:          QqLdhx73m+VeqLsgkuRXhNFKdF2/Uu0xTmn0XgTq4eM=
Subject key identifier:   1C:18:62:36:21:81:83:F1:F5:B8:67:F9:75:51:84:2F:6A:3F:29:DD
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Certificate issuer:       /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial:       0194BC3C72DC365E58F1AD3CD1A6AA0FF16F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
Manifest number:          0B4E
Signing time:             Fri 31 Jan 2025 12:01:05 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:05 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:05 +0000
Files and hashes:         1: EG5pUxGfwAIBOHWhSA_u40Ull48.roa (hash: j9AIedWxUThIEjIiNQ9a0XQAYjd/0yxU1No/HAT1wlg=)
                          2: EIlKz_yGKgG9o6LgyJUb5CYuXik.roa (hash: 7XI12BZ8oMxeo0lKGJtUxLNV8B1NZwQt+C2hSEvkeaU=)
                          3: eZbyMOXwsT8DM_J58p4lb08NYAk.roa (hash: /WC96WsqKWPbAIxaI0PJMY/euc4BODG5VIUj9O8Scw8=)
                          4: edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl (hash: 0IW30YnKEXVMUcMo+/QkBA+R9zPKIIsV1hln93dV+dA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:72:dc:36:5e:58:f1:ad:3c:d1:a6:aa:0f:f1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
        Validity
            Not Before: Jan 31 12:01:05 2025 GMT
            Not After : Feb  1 12:01:05 2025 GMT
        Subject: CN=1c186236218183f1f5b867f97551842f6a3f29dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:df:5f:e0:1e:20:2b:d9:97:e5:3d:b6:d6:db:
                    55:ac:8e:52:a9:74:c2:7f:5e:29:a6:8a:98:7a:3e:
                    e1:07:3e:b1:18:55:f3:73:0f:68:c0:a5:2f:b7:37:
                    51:3a:ae:af:ca:c5:7d:d7:a0:07:38:ea:17:a5:a5:
                    55:ef:23:61:1c:55:4c:ba:52:f1:3f:1f:79:3b:b8:
                    34:99:6d:24:54:10:27:4b:84:2b:da:f5:d9:fc:a0:
                    ea:31:ce:a8:db:3d:4c:30:8a:b9:cf:2c:34:54:7f:
                    48:ba:a9:3a:51:1a:df:77:35:ff:c7:f9:d5:b3:11:
                    41:89:ee:35:2c:ec:4e:91:ac:ae:28:d4:24:fd:09:
                    70:65:ec:26:36:dd:fd:aa:1d:92:e5:b2:f8:91:d8:
                    ec:3b:1f:35:0c:78:a7:37:27:f2:5b:ae:22:94:0d:
                    47:5e:b1:20:8e:8d:b6:67:3a:bc:ec:88:5e:48:8f:
                    be:6c:11:f3:0b:34:f3:3a:6a:8d:40:20:a7:23:e7:
                    0e:ec:9d:0b:74:f3:54:c0:c7:57:66:d1:ec:4c:7f:
                    bd:c0:48:97:4c:75:92:a2:e3:68:80:43:98:6e:5e:
                    c8:1e:12:b7:ba:47:ce:30:46:03:7b:13:54:47:e7:
                    44:e3:c8:68:94:3d:22:ed:03:b1:8a:f2:c1:eb:34:
                    0b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:18:62:36:21:81:83:F1:F5:B8:67:F9:75:51:84:2F:6A:3F:29:DD
            X509v3 Authority Key Identifier:
                keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:9e:2c:48:03:e1:0c:1c:20:e8:18:25:6b:47:56:69:09:ca:
         6f:f4:b2:d0:c0:bc:02:29:71:31:cd:00:84:78:e8:a2:16:8f:
         ad:a1:63:e4:28:69:af:f3:eb:da:0e:6d:30:e2:f9:56:a7:a6:
         db:0e:53:6b:98:d1:00:ae:c7:bf:6b:2a:29:92:7d:5d:43:97:
         af:b9:24:b1:28:ae:71:c6:91:1f:7b:39:1c:d3:85:d9:04:ee:
         2e:12:fb:81:27:f3:e4:bc:de:23:94:17:01:8a:5d:d6:07:3d:
         a8:0b:d3:63:18:86:cf:a7:cf:4d:57:9c:d5:b6:ab:ed:a0:5f:
         ac:0c:be:09:db:9d:24:81:7d:4c:f8:5b:0a:2b:fb:56:1f:7a:
         c5:33:d8:ef:91:0b:57:77:e8:53:5e:e2:0e:cb:32:7e:2d:60:
         71:30:29:73:70:66:30:9a:cb:77:98:c7:f7:a0:c5:75:9a:8d:
         bd:1e:19:4e:5c:89:82:35:ee:54:f9:4a:36:9a:e2:f3:e5:23:
         6b:1f:57:55:a6:c1:de:3e:3b:78:8e:bd:ea:f0:8e:72:20:9f:
         54:d1:71:a3:77:0d:e1:14:eb:39:25:13:36:76:bb:e6:68:66:
         1d:4f:36:82:1c:86:b7:72:ec:ec:22:24:4c:9f:b2:49:1c:20:
         d6:ca:5e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----