Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
File:                     McsA0vhEAYEMMgC1L6OI6TZR3fM.mft (raw, json)
Hash identifier:          UWQIXUbsbnf1psmPumJGw4WhrPbZiDX9Zb7SXlc6iIw=
Subject key identifier:   15:F9:86:E2:00:FA:4D:B2:93:FF:8C:3B:B1:25:0E:F8:57:30:05:A2
Authority key identifier: 31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3
Certificate issuer:       /CN=31cb00d2f84401810c3200b52fa388e93651ddf3
Certificate serial:       0194BD17A5D32BDCBB31552594E74B669F8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft
Manifest number:          03AE
Signing time:             Fri 31 Jan 2025 16:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:31 +0000
Files and hashes:         1: 0bSnoMCDjomKjH9l20xWi3AzK8U.roa (hash: w7ylFdvDoXCXnQ/NKrVCZ3HeQ1sG0SNLXLUNJWq26Aw=)
                          2: 6QZXrPa3sBN80OwKH97Qmpz11-w.roa (hash: UdHrwly/eXNnDWvZzXVWVnCJ0eO0DldyC6uMO4NJQeg=)
                          3: HNzUWXlP4veJqPrr6pXP0JJR8j8.roa (hash: su/Z3HJftIxQPXtbWly3dTZmcrPusOAjYOvLjMM2DMs=)
                          4: McsA0vhEAYEMMgC1L6OI6TZR3fM.crl (hash: fA7V4f2bNcARpwYojHBNRTan4DQrVG9T1lPIoiAaseU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:a5:d3:2b:dc:bb:31:55:25:94:e7:4b:66:9f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31cb00d2f84401810c3200b52fa388e93651ddf3
        Validity
            Not Before: Jan 31 16:00:31 2025 GMT
            Not After : Feb  1 16:00:31 2025 GMT
        Subject: CN=15f986e200fa4db293ff8c3bb1250ef8573005a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e6:6a:5b:6d:d3:0e:36:e0:b9:f3:15:ba:ae:
                    62:e1:d3:44:36:54:44:13:f6:a4:2b:22:97:54:93:
                    28:37:b5:ea:5d:f9:6b:2e:b4:b5:b1:25:b7:56:14:
                    13:58:19:39:01:43:17:aa:d3:26:6d:c1:dc:d9:27:
                    45:11:0a:17:59:bd:15:ef:61:7a:00:b5:33:dd:38:
                    b8:69:66:c3:30:80:1f:22:ef:de:1a:78:d9:6e:16:
                    54:46:8a:21:a2:b9:5f:c1:32:dd:fd:f1:29:e4:e7:
                    dd:70:5b:d3:f2:ad:3e:59:c7:f0:50:6b:49:57:0f:
                    a6:68:61:22:41:80:12:cc:3b:4b:b2:3c:00:dc:55:
                    8a:99:64:67:5d:25:95:06:22:f7:23:7f:9a:99:00:
                    07:56:77:a3:f4:d1:97:6e:26:d0:8b:57:e9:d8:f9:
                    f6:c5:b1:d1:09:bf:84:73:7e:ea:f6:53:90:67:8f:
                    6e:bd:00:0f:46:9b:b0:e6:8f:ca:2d:0d:af:c3:cd:
                    91:e5:e3:59:92:d6:f3:7c:15:9f:be:7c:ee:98:ed:
                    43:10:ac:70:21:55:2f:c4:b3:8e:f1:a1:fc:fc:52:
                    29:ca:36:94:bd:cc:d9:09:48:34:03:24:26:3e:5c:
                    ee:97:01:ae:68:27:57:52:44:3b:3d:89:5d:5c:bb:
                    c7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F9:86:E2:00:FA:4D:B2:93:FF:8C:3B:B1:25:0E:F8:57:30:05:A2
            X509v3 Authority Key Identifier:
                keyid:31:CB:00:D2:F8:44:01:81:0C:32:00:B5:2F:A3:88:E9:36:51:DD:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/McsA0vhEAYEMMgC1L6OI6TZR3fM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/11/ee9519-ff61-4679-9015-80e427596b5d/1/McsA0vhEAYEMMgC1L6OI6TZR3fM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ef:5a:5c:3a:3e:01:7d:ee:9f:b4:22:f8:63:85:a3:b4:c2:
         38:1a:bf:bd:f7:df:36:0e:fb:8e:e4:87:05:8f:2a:87:6e:b2:
         80:bf:9f:d9:3d:2d:e6:fe:db:32:09:15:07:df:1c:ab:9b:43:
         1f:ae:40:51:6a:d9:bf:02:c5:b4:c6:15:5b:8d:56:9a:56:40:
         ec:f5:bb:27:a2:f2:5e:d4:63:6b:74:1d:cd:38:6d:c8:2e:e9:
         e5:34:b1:97:d2:9b:cb:b9:dd:39:df:bd:51:82:00:93:0a:2a:
         ff:b7:d0:0d:c0:08:9b:b8:47:d6:27:39:7c:6d:ce:35:32:eb:
         a4:75:e4:a4:5e:dc:0c:46:8f:6b:a0:74:cc:e4:cc:66:81:e8:
         14:0f:8f:8a:44:b5:38:50:cc:5b:ea:ec:d8:11:d0:19:24:02:
         c2:80:a1:4f:2c:8c:96:89:96:33:e3:b1:28:db:ad:fd:99:f7:
         c4:7b:8c:4a:57:5a:b7:45:0f:70:e0:25:5b:00:19:a8:a7:6a:
         99:ca:03:bd:35:3e:3e:c2:50:96:f5:5f:ad:91:ca:c0:24:5d:
         77:a3:37:d0:d8:89:58:f8:71:16:69:84:91:2f:1e:42:6e:bf:
         36:0c:f1:a4:e0:14:40:6d:26:89:02:d5:a5:3e:de:ef:b2:b8:
         67:2f:9b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----