Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
File:                     rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft (raw, json)
Hash identifier:          l8Kj6MbnpNohBg36GQlvUHD8o7FlDJP4RSi/r69q8wE=
Subject key identifier:   FB:60:8C:B3:9D:25:A2:DD:B3:E7:B2:F1:93:0A:2E:FB:7E:41:93:14
Authority key identifier: AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA
Certificate issuer:       /CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
Certificate serial:       0194BD85A2328B90C7A1A4D8E9C2FF2134D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 18:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:39 +0000
Files and hashes:         1: 5qbm6M-eiAs3Sax8KVJ3oyYfrrQ.roa (hash: wspJkKAHBhU/iiN7eXAG5eZQY0gy2K4ZxvhHdsXT2dg=)
                          2: KDzLGK1Ms1rQ3Sinf5MNoTfrlLk.roa (hash: bPUt0It2HOIJBVKWWo3dmSTmayPGgOml6jz8Zt5aBJ8=)
                          3: PfTK_laJnQS_hWcI1miH8YmD3XU.roa (hash: YfjG5i7yzO8QQ7ZO7iDAmyK16Fyt++8WwP+MEzSCTdY=)
                          4: ltmkR62UHp9Wf_efPpxh7HmSnT4.roa (hash: E1AG/jlqYwJrU9a3m+x6UqkYK+Xlbaxzv/rFzMbFu1E=)
                          5: rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl (hash: hB5H1jsZfzrbgmTWwv/uhTLtRuTaKtWZEwZNJlmymR4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:a2:32:8b:90:c7:a1:a4:d8:e9:c2:ff:21:34:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ae664b924e4ea027c1c3a0770df1ff80b1d568fa
        Validity
            Not Before: Jan 31 18:00:39 2025 GMT
            Not After : Feb  1 18:00:39 2025 GMT
        Subject: CN=fb608cb39d25a2ddb3e7b2f1930a2efb7e419314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a2:1f:90:4c:66:64:80:18:fd:d5:99:f4:67:
                    4e:65:88:61:bd:f4:d9:9a:85:7e:4f:1c:2e:de:42:
                    57:70:54:0a:36:05:28:5d:f4:66:c4:dd:af:8d:62:
                    88:f2:13:c6:10:1e:16:b7:0e:51:95:80:69:42:b2:
                    37:46:14:fe:dd:6a:f3:17:ef:e8:fe:ec:d7:13:eb:
                    9e:1c:05:59:12:95:c9:fa:3e:82:b2:52:82:3f:d5:
                    6f:a1:a8:62:29:d2:55:97:ab:3f:e5:36:05:fb:5f:
                    57:05:c6:0b:1c:43:84:09:ec:51:28:2d:88:43:86:
                    7c:2a:17:bd:b2:f4:40:d1:f9:d2:91:29:bf:a8:3d:
                    7d:8d:2d:3d:86:72:29:d9:ab:eb:29:12:18:62:c1:
                    9a:e5:07:98:30:48:33:f1:fb:e2:59:d6:3a:6b:12:
                    ad:69:9d:c9:53:02:19:c5:bb:5c:6e:c1:aa:0f:cc:
                    6f:fd:2e:18:47:20:75:33:23:0a:fb:a4:ae:9f:c4:
                    ec:9c:ed:c8:3f:bd:7a:13:42:e0:5f:04:94:23:2a:
                    58:da:6d:35:27:51:c0:74:43:81:60:70:09:4b:75:
                    ff:7b:cf:1e:f6:fc:0d:96:c6:36:e8:ee:c5:72:55:
                    01:fc:32:94:c5:78:d7:b4:d1:4f:1b:46:83:d2:e3:
                    bb:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:60:8C:B3:9D:25:A2:DD:B3:E7:B2:F1:93:0A:2E:FB:7E:41:93:14
            X509v3 Authority Key Identifier:
                keyid:AE:66:4B:92:4E:4E:A0:27:C1:C3:A0:77:0D:F1:FF:80:B1:D5:68:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmZLkk5OoCfBw6B3DfH_gLHVaPo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/e2f846-8582-4093-ae93-04c5397fe5f8/1/rmZLkk5OoCfBw6B3DfH_gLHVaPo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:8f:7c:58:5f:8a:51:16:85:89:67:f5:bd:f6:c3:48:de:d5:
         28:52:e4:3d:23:ff:ce:fa:06:2b:0b:d8:26:c4:37:f7:84:61:
         32:00:8b:34:b2:8c:df:77:82:df:c8:c1:ef:bc:74:92:68:a1:
         cf:bf:9d:31:74:99:9f:f5:60:27:6a:d9:9d:34:80:a0:ba:1b:
         a7:22:49:17:70:c7:33:b1:a8:f8:52:6a:6f:9f:f3:d6:41:28:
         3b:63:e9:ae:38:fe:a3:5c:d6:04:93:6a:60:6a:e2:36:19:45:
         26:33:79:5c:e6:df:f8:df:5c:8e:72:92:69:bf:b5:ab:0e:06:
         f2:1c:1c:47:75:92:c6:21:7e:ae:03:2a:7c:3f:78:39:b4:16:
         78:d3:e5:dd:4f:19:f8:9d:73:06:19:dd:e2:3d:b5:f1:98:e0:
         3e:26:cd:40:1a:65:41:87:99:27:12:ee:e0:92:bf:06:7c:db:
         11:18:a0:ca:7a:f4:fe:38:01:25:06:6b:1b:57:83:3e:9d:c6:
         55:9b:c6:55:f0:12:1f:07:48:f0:84:10:d1:7c:f9:1a:14:ff:
         16:21:8a:3f:f0:f4:dc:25:8b:29:ad:c9:33:5e:a9:6a:3a:90:
         28:76:71:de:12:ab:f4:37:f4:0e:3e:76:6c:69:29:e7:f7:b9:
         f5:ca:8b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----