Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
File:                     HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft (raw, json)
Hash identifier:          iBHYE9X+3xxmpHyxYyCcGc7lre06esjyJzJsUhSvQ2I=
Subject key identifier:   83:15:FE:AA:68:5A:63:BB:A7:9E:DE:BB:BE:32:75:22:7B:29:C8:61
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Certificate issuer:       /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial:       0194BCE087E5C4A8900F7432ACE8A2334301
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
Manifest number:          1139
Signing time:             Fri 31 Jan 2025 15:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:18 +0000
Files and hashes:         1: 15KhGd4HmYbpuYXtzncXGULTUqY.roa (hash: iH3AMLCtT6vKx2SSnrUr9zrzWdEsbyifJgPpor+ZLYo=)
                          2: 3LJsJAxQUnMWxmTEqbv2Ne-HHLQ.roa (hash: +PAAkbA2OVlIxFRlm52Uu/fGQNUJSRnOJ9Ha52EnEH8=)
                          3: BhmCDxcE0gsUJ8n-5kUDWm_-44o.roa (hash: /tiZqBXubo3kuYkXe6qdVTzGxoqo7003YeEc2CAhCcU=)
                          4: HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl (hash: EaFkPRx/h//s5QLTEaugOHG5v6QFYVc/Zo6O6eSyuCU=)
                          5: NJaxBq74jsy6lmV1PZazizbRVW8.roa (hash: EcXsmMuzrFLzoXxAIYzIgOc73ikKA5Ft4ZM4pjDRgFo=)
                          6: QxGFNF72x4BqsfaQ6jtAOQBOPno.roa (hash: 65riUzSqL2rM8j5Yrj0UOmDbiXGurF7dxCWBn61aeEc=)
                          7: T14YGVIyo0B0GMjaoAuVV86EHfQ.roa (hash: 64ZLK4f1zxb+Q2lGELGqmESC0E6Ee+2GtOPU4byIZ/8=)
                          8: YnMnO6Ox-cLnCOmPN8tx_DOoXrE.roa (hash: H/u4fv7xb+AglIzSXH/LHd19mSFb3s1BHiBbxYj4lFI=)
                          9: jxv2C5982Ccg_jEpftvAMhLewtw.roa (hash: ueLKoc7Uurshn1hvFPw53fM94VCiIuFDiqRrlZVXFno=)
                          10: kitPrlRKaPvvRZMjj30sn5SBic8.roa (hash: fAdfxW88rLA4/vorwxlP/gvwEwkcGlSH5cxUXmS7nf0=)
                          11: vhqfgZBGlkmJeOA75et_kaK8pwc.roa (hash: HXruhXdyCN/4KKZEyQ4qWiEgEF32HHhcblnNFIim6w8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:87:e5:c4:a8:90:0f:74:32:ac:e8:a2:33:43:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
        Validity
            Not Before: Jan 31 15:00:18 2025 GMT
            Not After : Feb  1 15:00:18 2025 GMT
        Subject: CN=8315feaa685a63bba79edebbbe3275227b29c861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e5:8e:10:eb:ee:5a:ae:dc:ca:0a:a1:bb:a2:
                    c8:36:8f:9a:b9:b8:32:49:19:8f:7d:2b:ad:2e:b6:
                    82:05:26:f0:7b:3e:1a:03:2b:8a:59:43:a0:dc:c7:
                    fa:fb:45:32:84:db:88:09:f0:2a:d2:44:1a:1f:5e:
                    bd:67:e5:24:91:d3:e0:17:5b:ec:fb:31:9a:37:7e:
                    c0:01:70:90:68:7f:b1:22:8f:81:63:60:8d:09:5b:
                    06:dc:ec:e6:43:09:0a:89:cf:32:36:78:dd:a6:5e:
                    e8:b7:e8:53:bc:ea:b1:75:05:5d:dc:1b:0d:e5:62:
                    9e:79:12:e3:71:ab:5c:3c:0f:a5:7d:dd:0d:39:22:
                    ed:d5:00:f7:cc:e7:13:d2:82:e8:50:23:f1:53:de:
                    24:d1:fa:44:84:41:f7:50:13:4d:11:d8:c3:f1:6e:
                    fa:44:8e:64:0b:de:7c:ba:7a:a7:88:c4:7c:b4:44:
                    c2:f5:75:ba:4f:e5:ff:ef:61:39:83:28:d2:b2:23:
                    ea:57:72:8a:6d:fd:a6:02:9d:4f:51:b1:d8:71:e3:
                    f2:2d:56:9a:7c:f9:f1:b7:58:37:19:90:4e:c4:fa:
                    57:fb:5c:e8:40:94:b6:49:fb:59:7c:cd:94:70:54:
                    5f:df:33:15:dc:17:9b:c7:fe:1f:bf:9c:54:dd:9b:
                    4c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:15:FE:AA:68:5A:63:BB:A7:9E:DE:BB:BE:32:75:22:7B:29:C8:61
            X509v3 Authority Key Identifier:
                keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:77:d8:f2:cf:f5:58:4e:88:7a:0c:d6:fa:f5:24:94:be:a9:
         62:51:e0:7c:53:b2:2c:ff:b7:dd:b6:30:5d:f0:29:70:ca:26:
         19:b3:12:68:3c:e0:6c:36:11:18:3e:44:b3:a0:e9:2a:b4:46:
         d5:1e:3d:cd:90:40:5c:05:5c:09:f9:6b:a7:6b:06:25:fb:08:
         50:0e:00:e5:36:85:5c:dd:89:5b:a0:54:54:8f:db:0c:07:6a:
         3e:7d:66:3d:f9:f8:b8:57:f2:41:67:17:c6:16:f2:e4:2d:64:
         1c:50:f8:86:42:28:b0:b5:95:ee:c7:53:46:48:9a:ab:ea:4c:
         c1:ba:44:4e:07:67:8d:3f:cb:1f:f9:a7:1c:5c:da:05:f5:17:
         91:19:39:2f:21:81:9d:55:14:76:e3:9b:7f:42:93:34:b7:9f:
         f6:50:37:b3:10:71:59:42:a0:fa:7a:4e:9a:b9:9c:6f:05:f8:
         3b:eb:ce:37:6a:bd:5f:31:cb:95:2b:b3:66:34:86:64:cb:88:
         58:24:39:d1:65:8f:df:06:e6:08:ea:ff:21:45:13:b7:9a:1b:
         81:79:ee:f8:65:10:cb:c1:04:b2:aa:5b:b8:54:b1:cc:4d:e5:
         33:f6:50:c8:1c:64:11:d7:a2:c0:ae:7f:22:5a:3c:47:19:ed:
         e4:9e:e8:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----