Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
File:                     yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft (raw, json)
Hash identifier:          /koFcR1B6VN7u4WJ2sd1qUezxBjCtSQOiL6JrbIIIAs=
Subject key identifier:   22:D4:CC:6E:29:69:A5:D8:86:B5:B8:B1:19:9B:7B:8D:64:81:05:0E
Authority key identifier: C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68
Certificate issuer:       /CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
Certificate serial:       0194BBCE9FB471C06777931251260CB63B84
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft
Manifest number:          0883
Signing time:             Fri 31 Jan 2025 10:01:08 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:08 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:08 +0000
Files and hashes:         1: CRyQSBdD5-g9qi5MkhOWhTSWGYw.roa (hash: OdCH0xAebcoZtMG/wZGi9eDKxyAg95m1InonEHGGddU=)
                          2: ZevzjSVvulMbqdJtY8B4bnQMQ18.roa (hash: W1po1ozIsux5yOEXy/FIuleWTHBIh+Vuq+plxlxVu8s=)
                          3: _xVJ1hQmic9FLrcgVmh-KAZfgtA.roa (hash: psme/h2vzp67q25AbH+m68R73Xe8GmTvYaqc5PS4Y/k=)
                          4: yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl (hash: RSF4sKI/uT1Nr/zlMVnJsT54wMGgQvz6pkO2QtEc6kg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:9f:b4:71:c0:67:77:93:12:51:26:0c:b6:3b:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c946c4befe0fbbe3624bd748296b5fe2e7ec2d68
        Validity
            Not Before: Jan 31 10:01:08 2025 GMT
            Not After : Feb  1 10:01:08 2025 GMT
        Subject: CN=22d4cc6e2969a5d886b5b8b1199b7b8d6481050e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:74:40:8b:12:71:20:d6:e2:f5:31:b8:9a:f9:
                    41:35:6b:2c:1c:b2:e2:dc:23:3d:6b:d8:92:22:7c:
                    28:69:8e:ba:0c:84:d3:2d:61:63:2a:e9:8a:9b:1c:
                    22:96:9f:69:1d:2c:14:8b:bb:41:5b:de:7d:c8:e8:
                    02:f0:01:a8:e2:75:f2:83:06:6c:9c:6f:23:f5:2e:
                    d5:7c:99:1a:60:d5:a3:7b:6b:05:a0:87:41:2e:36:
                    26:d4:2e:98:e7:62:bd:21:2b:75:4e:22:6f:f8:f8:
                    d7:33:e3:b3:dd:b7:c7:d1:c2:a7:e5:96:b6:26:02:
                    09:6a:9e:3d:8e:86:28:5d:6d:c7:55:9d:fa:f4:cd:
                    9a:d9:27:1e:16:ca:e6:4e:12:27:b0:bb:ec:21:cc:
                    87:5e:4c:a5:2a:f2:ab:07:d8:84:57:b0:d9:91:16:
                    1e:dd:e7:0f:04:44:bb:5d:de:d2:c6:6d:47:fd:22:
                    e9:59:83:09:97:5f:93:de:84:01:a1:4b:4a:26:18:
                    be:8c:42:c3:ae:68:3c:a0:8d:97:7e:0f:bc:ca:fe:
                    b7:74:e7:27:05:8e:2d:1e:f3:69:58:69:00:58:70:
                    ed:4f:8b:27:20:a0:9d:cf:c4:68:2e:8a:be:42:f4:
                    a1:7c:b6:6c:c2:9f:66:87:1a:d6:2a:7a:a1:96:f5:
                    c2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D4:CC:6E:29:69:A5:D8:86:B5:B8:B1:19:9B:7B:8D:64:81:05:0E
            X509v3 Authority Key Identifier:
                keyid:C9:46:C4:BE:FE:0F:BB:E3:62:4B:D7:48:29:6B:5F:E2:E7:EC:2D:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/f2d9e9-eeff-4633-a189-6bbb27081de2/1/yUbEvv4Pu-NiS9dIKWtf4ufsLWg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a8:71:17:97:ce:12:7c:17:18:44:e0:d1:17:38:0f:ef:0e:
         56:68:ec:6b:78:3e:1e:db:37:68:c4:38:6c:6c:88:12:70:30:
         84:7a:71:e7:42:96:f3:f4:f2:49:ad:cb:07:6e:bb:b4:fb:e6:
         fb:cd:e9:f3:68:97:0d:cf:39:1d:51:d3:e0:6a:0c:75:38:73:
         86:2b:3c:f7:69:82:fe:c7:76:e4:0f:24:6d:b6:37:21:7d:86:
         2e:46:f9:16:71:bc:16:77:7b:e1:aa:c5:8a:67:6c:93:5a:f1:
         53:06:56:34:8e:fa:ec:1e:dc:ce:56:3e:4f:93:c1:a5:43:52:
         dc:cc:2b:cc:2b:68:a5:40:fb:5c:9c:9c:9e:25:c1:6d:02:08:
         0b:24:24:94:ed:fc:ad:c7:35:10:be:44:95:e1:2a:0c:20:86:
         e1:7b:54:4f:60:13:bf:32:2f:fe:31:fa:e1:3b:41:31:c5:a4:
         0a:2b:ef:a2:2b:9e:fe:bc:25:ff:1a:3f:31:be:bc:ad:ab:71:
         a7:51:5c:ba:56:bf:10:5f:c1:73:8a:8a:b5:c1:a5:c8:0d:55:
         bd:67:f3:54:ac:3a:4b:9e:a9:52:93:1b:ef:ef:2c:80:2f:b8:
         76:6d:6c:c5:9e:85:9d:65:02:f4:05:69:47:a4:c0:75:62:bc:
         9d:b7:7f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----