Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
File:                     5QGBXG-Y86K2GEr-vxjqNBvoguo.mft (raw, json)
Hash identifier:          GprCnexUA5p4orF17ax39uEM6JEbKWDn1F7EuQ3vpKM=
Subject key identifier:   1C:6E:5E:96:DF:F3:47:56:5A:09:B0:A0:0C:3E:26:18:76:A1:7D:A3
Authority key identifier: E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA
Certificate issuer:       /CN=e501815c6f98f3a2b6184afebf18ea341be882ea
Certificate serial:       0194BD85712DC56A529E55ADA2349EF74189
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft
Manifest number:          1469
Signing time:             Fri 31 Jan 2025 18:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:26 +0000
Files and hashes:         1: 43y7EOGBptoEQuKUeXgk6SpCiKM.roa (hash: JqRad2v+qIhbHewbO6BDiGvY7klaYPQyg0QWPHcgDXg=)
                          2: 5QGBXG-Y86K2GEr-vxjqNBvoguo.crl (hash: uzZq31Bbgaoml0pX7+3H+zokVd2XvJC2VyIyneI7Qzw=)
                          3: UJiiBfcLHEDZEiyOH73Tdn_5zCg.roa (hash: GFjT78ofBX5lOWGLmRTkI/0eAg8Ki+DanR9So/XxOLY=)
                          4: UYj7oPNDPmZ92Pti7kDvt77QLoo.roa (hash: 6xSkPzZxwtQTH/NVcZi8cSClbUy2mWDz8JoMRfBIJyE=)
                          5: f8kI2b59PBZRb_sckjtBe463HL0.roa (hash: f8FR8GkiNDWi6iflclZKzM3152IDL3F7lGZsDidin1k=)
                          6: hijMYiQr6vyULb-mnkn1xi1JvNs.roa (hash: dK5CEEe3WQ4TKnmD3J/bUooowbDXJp8gMo/+1WCMR7Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:71:2d:c5:6a:52:9e:55:ad:a2:34:9e:f7:41:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e501815c6f98f3a2b6184afebf18ea341be882ea
        Validity
            Not Before: Jan 31 18:00:26 2025 GMT
            Not After : Feb  1 18:00:26 2025 GMT
        Subject: CN=1c6e5e96dff347565a09b0a00c3e261876a17da3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:31:1c:57:94:0e:2f:21:ab:cc:b5:c7:12:af:
                    a7:92:5a:ac:9c:a7:a2:c4:36:a3:2a:92:ac:2e:16:
                    07:8c:64:d3:27:e2:c0:e9:bf:5e:eb:66:a2:c9:1d:
                    e9:89:bb:0a:60:fe:0f:05:5f:aa:5e:76:fa:08:34:
                    dc:1b:fa:e7:b2:8f:5f:3f:3d:6d:3f:34:fc:6c:e2:
                    c6:ab:69:c7:2d:04:2e:43:89:6e:f0:a5:ea:f0:96:
                    3b:12:60:4a:f4:ed:97:93:51:26:e8:ae:eb:ad:a0:
                    f8:3d:1c:da:21:e2:72:b6:0f:21:eb:01:2e:a2:50:
                    7c:6d:14:b3:ee:cc:b1:ab:10:fd:9a:1f:aa:d1:92:
                    0d:48:0b:4f:46:09:c2:be:80:86:73:e8:74:fd:c6:
                    79:0d:9d:e4:f2:38:b4:a6:65:d9:f5:07:9d:ec:46:
                    38:ab:92:8c:02:e0:e4:f5:8c:a1:01:98:eb:37:f2:
                    da:09:d7:4d:7c:6f:9c:e9:e3:df:fd:74:a0:b2:d6:
                    e0:2c:6a:93:4f:1b:b5:95:18:74:3e:97:41:70:52:
                    15:85:09:d5:14:1e:d2:e3:ba:dd:26:d7:dc:8f:12:
                    af:9c:3f:c9:3f:b7:3e:bd:ad:bf:d8:e5:72:08:72:
                    f6:62:da:8b:9d:72:8a:32:1b:15:f3:4c:92:73:d0:
                    d2:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:6E:5E:96:DF:F3:47:56:5A:09:B0:A0:0C:3E:26:18:76:A1:7D:A3
            X509v3 Authority Key Identifier:
                keyid:E5:01:81:5C:6F:98:F3:A2:B6:18:4A:FE:BF:18:EA:34:1B:E8:82:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5QGBXG-Y86K2GEr-vxjqNBvoguo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5b0222-ed64-4f55-b45b-0059f737ef05/1/5QGBXG-Y86K2GEr-vxjqNBvoguo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:83:c0:b4:6e:b5:6e:eb:41:97:ee:0c:65:0d:a4:1a:2f:f6:
         55:99:3f:bc:8a:2d:4c:07:56:7a:dd:d5:ca:bb:04:c3:8f:a0:
         87:ee:38:e4:a1:de:ab:f5:62:50:24:ab:43:d1:d4:c3:11:45:
         82:46:46:47:a3:66:cd:ac:49:f1:60:e7:8a:74:47:af:ec:61:
         d6:78:87:0b:9b:96:8c:5d:5a:cc:b4:fa:3e:e8:55:87:96:6a:
         a0:84:52:86:3b:3a:0e:02:57:bb:3b:58:ac:a5:41:8f:ab:dd:
         5f:f4:79:5a:ce:ef:d4:61:e1:a2:cf:bf:97:8f:38:6f:d0:0f:
         0b:36:fd:3e:b3:16:8e:ae:26:00:48:c9:ff:0c:e3:65:e7:4c:
         79:55:8c:e2:e3:7e:20:13:1a:54:0c:0f:28:e6:8b:2c:a8:c1:
         29:6c:f4:c3:88:6f:a9:96:e4:c4:03:40:3d:61:a2:c0:2b:b4:
         66:21:97:47:fc:97:15:74:8a:67:fd:df:37:8d:33:d4:17:d1:
         d0:2c:ca:07:46:ff:90:59:98:88:18:df:1c:2f:17:17:10:59:
         18:1b:2d:5c:a6:2f:6b:e0:3d:00:d4:66:51:64:7b:cc:be:68:
         b1:c6:82:2d:6c:90:81:18:be:c0:15:3f:b2:67:d3:56:db:8b:
         ce:40:f9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----