Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
File:                     U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft (raw, json)
Hash identifier:          J6FtbEuv4YmIs98QOlX/zqx6XVIJ8JeLxpjDXMZsQ2g=
Subject key identifier:   39:7E:76:B1:8D:88:7A:01:80:BC:0F:66:39:BB:DF:6E:79:96:0D:77
Authority key identifier: 53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE
Certificate issuer:       /CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
Certificate serial:       0194BCE0CFFD3038648ABB188C060DCE1C73
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft
Manifest number:          0881
Signing time:             Fri 31 Jan 2025 15:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:37 +0000
Files and hashes:         1: 9cjLWcXlWt0bZ9fY9Y3YOLl4hEg.roa (hash: INOcqhYZhDXAbfG8SxlHkwcxMZ9Eu0+HCH/U+rBDJQI=)
                          2: BcSODmIXKVea8iE5zZOp77BPmEc.roa (hash: vVK9eMjco2rn/5nPy9ksOWvGq+8tly70A/WB72MUKg0=)
                          3: U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl (hash: IpNaC76sAMHtAa23MrrKI7uvLDOTUhUHU9srYGDtJn0=)
                          4: YHZXlT3XECUJzw-eVadVmxx7MSw.roa (hash: sOGpM5/yuXY0OyU564TCIjFnpEWvZ7TXDU8k254N34o=)
                          5: _oreZyFVo2jWbHq275iTESw299g.roa (hash: /1GTiop7lCMUo23yTI0jzZ33QWw2mRV58SmHDqIUw7o=)
                          6: b9foO6uShUf_0AicqfzsoLKVyrE.roa (hash: gJ7rZ/YrkzGXNQpDhhZVxr6myTAe9coYmTexinUq7hA=)
                          7: kaIqrvIylKzH38yKAlXttfxPtJc.roa (hash: PlwxrbNQdnXd0tF4s7w1NH4MDh/rQaSBAh1pK6XUPBU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:cf:fd:30:38:64:8a:bb:18:8c:06:0d:ce:1c:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53b46ab79b9fc58f5dc4cf29d72dc5267ec3edde
        Validity
            Not Before: Jan 31 15:00:37 2025 GMT
            Not After : Feb  1 15:00:37 2025 GMT
        Subject: CN=397e76b18d887a0180bc0f6639bbdf6e79960d77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3f:77:e5:8e:25:c4:55:5c:f2:dc:1f:42:4a:
                    80:7b:85:ee:69:4a:da:47:66:65:e1:9d:50:16:e4:
                    02:08:aa:98:81:1c:d4:19:06:81:4a:5d:89:72:96:
                    c7:02:29:77:a9:7f:f0:d1:37:ba:61:98:c8:06:ed:
                    b4:98:ba:5a:27:01:82:99:8e:30:47:67:38:11:dd:
                    3f:63:f3:41:14:b3:3c:3c:3e:81:9c:5b:1b:95:78:
                    ed:cc:a4:e3:e2:4f:95:e7:c3:dc:7f:86:63:96:70:
                    6c:e3:64:2d:06:81:eb:58:be:f6:c8:f5:2b:c0:ae:
                    f1:6b:0e:f7:f0:8a:78:2a:31:70:9e:75:3f:c1:78:
                    09:d0:75:0c:f8:d4:9f:59:2e:6e:cd:a2:59:1a:5f:
                    b0:67:92:2d:81:e9:65:0c:4c:49:d9:ef:f9:17:03:
                    c2:9f:1d:3e:d4:35:4e:fd:c2:1f:cb:3f:4a:bf:7d:
                    1a:4c:cc:6b:21:a8:04:ee:4a:71:a5:a5:d5:48:17:
                    92:3b:13:dc:49:8d:c9:90:0c:30:da:71:8d:57:78:
                    1e:d2:b3:18:2a:ae:af:47:e7:4f:0f:28:0e:58:65:
                    ba:40:36:30:95:97:43:a1:e3:96:94:d5:be:db:b5:
                    4b:32:0b:46:35:f6:eb:4d:02:8c:a3:de:44:15:e9:
                    78:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:7E:76:B1:8D:88:7A:01:80:BC:0F:66:39:BB:DF:6E:79:96:0D:77
            X509v3 Authority Key Identifier:
                keyid:53:B4:6A:B7:9B:9F:C5:8F:5D:C4:CF:29:D7:2D:C5:26:7E:C3:ED:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ac9af6-7fc3-4d13-a594-060a4738091d/1/U7Rqt5ufxY9dxM8p1y3FJn7D7d4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:72:9a:a5:11:5f:dc:fc:ee:86:86:de:9e:0f:ef:7e:02:fa:
         79:65:a3:46:3a:ed:f2:a5:18:33:43:83:56:99:4c:60:1a:40:
         d9:2f:c7:7d:5b:79:d6:e0:68:68:27:51:50:ac:2d:a9:9f:d8:
         91:07:39:09:39:76:b7:12:e2:9b:75:23:98:1f:ac:c8:f6:ba:
         d5:12:74:0b:bb:dc:36:4a:f1:66:d8:d7:88:a0:23:8b:c4:59:
         61:92:80:89:eb:77:f8:1c:b5:ed:0c:52:54:49:13:bc:4a:61:
         bc:c6:41:51:cd:fa:aa:1b:90:f7:78:82:67:c4:b9:38:ed:71:
         c5:30:30:22:0c:47:5d:8d:31:17:93:4c:d6:4e:29:ea:1a:28:
         fd:26:ef:fb:fc:03:0f:8f:27:fb:a5:ed:b6:94:03:ac:02:fb:
         b9:5d:75:79:cf:68:00:a7:2e:9a:f8:46:fa:1e:af:6d:da:5c:
         81:f3:ae:64:4d:8c:c7:ba:d7:9d:b9:b3:59:f0:10:24:94:54:
         dc:66:99:8f:14:5d:fe:00:32:76:25:14:db:03:b4:7e:b8:4f:
         50:68:86:92:af:4e:9e:a7:06:ef:b7:1f:f3:f1:04:72:d4:7a:
         b9:97:fb:98:01:c0:01:bb:db:66:c8:e9:ac:23:f3:47:4d:0b:
         6b:02:c7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----