Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
File:                     E_hJa3nRwE0IKvg_G-al6rDGYIk.mft (raw, json)
Hash identifier:          TTHvb0MyHocDKU/1247pSkyW2ruJ9mNXFvU1eEHbaAk=
Subject key identifier:   A6:84:90:56:20:22:A6:DC:8B:C6:53:ED:2B:FB:B9:F5:6B:09:F2:65
Authority key identifier: 13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89
Certificate issuer:       /CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
Certificate serial:       0194BC3C5355C6A2EC90E6B0C2711ABE25CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft
Manifest number:          1430
Signing time:             Fri 31 Jan 2025 12:00:57 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:57 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:57 +0000
Files and hashes:         1: E_hJa3nRwE0IKvg_G-al6rDGYIk.crl (hash: D6q9tYVefKD+m3ezFzu6VgJKWFAZjOL+67CZA+xo1zo=)
                          2: Oi8bBj7abbUUGWgLnipKRlAWhqg.roa (hash: uBPR6lVF7mLe6knRM5SQ0/u91d8nwbpqoLhQPG3UKIM=)
                          3: jbGvVuouVUGuodE3wSjw_6Kl_WQ.roa (hash: 0q3TS/imhDlO4EU7lxVd1fwILuDkXznK6ePE6/PQttU=)
                          4: vyq7frrOZ18P3bS0LsRzkLQVayM.roa (hash: ahnDTdH2Zi2KbYKjlRjjF3km1v/4SmSVHP2tW2n0dn0=)
                          5: xqgSeGIVEF82G1UQzaanBBXZ4j0.roa (hash: DA3L+prbTCIOti4LbG2Ch15XaVBtWVA8dw3jHgvPOJ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:53:55:c6:a2:ec:90:e6:b0:c2:71:1a:be:25:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13f8496b79d1c04d082af83f1be6a5eab0c66089
        Validity
            Not Before: Jan 31 12:00:57 2025 GMT
            Not After : Feb  1 12:00:57 2025 GMT
        Subject: CN=a68490562022a6dc8bc653ed2bfbb9f56b09f265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8b:0e:45:a3:94:00:fe:60:29:32:a1:72:62:
                    c4:11:6a:b6:b9:c8:57:61:5c:50:5a:00:e1:e3:6f:
                    90:af:e3:db:17:36:c2:c5:2a:58:62:08:8f:b5:fc:
                    e6:c8:15:05:34:33:25:e7:92:a8:5e:78:71:a4:a0:
                    40:8c:71:f7:56:47:e8:fe:20:32:52:51:1c:ec:9c:
                    97:be:df:a0:5b:77:d2:fa:f4:d2:94:3f:e4:42:56:
                    6d:ae:24:96:f8:04:8d:c6:d8:bd:28:74:8e:94:04:
                    c0:c4:0a:eb:0f:ff:57:3e:6b:0c:e3:a4:df:8b:8f:
                    42:cc:65:2c:ad:6f:ab:eb:d9:3e:ac:ae:ab:9a:49:
                    5c:fe:2b:de:0e:bc:be:e9:cf:c5:f5:b5:cb:5f:55:
                    68:4e:74:58:8c:08:e6:11:3d:8c:ad:f9:c8:fc:a4:
                    4b:5e:72:d7:e2:2e:83:9c:53:31:79:d0:bc:5c:b5:
                    b2:f8:b1:23:a0:17:a3:c2:58:2d:3d:16:27:bc:06:
                    86:19:53:dd:0a:0b:06:ce:c1:80:51:f4:0d:60:b5:
                    1a:e1:2f:d3:2e:d9:cd:21:41:76:e3:c3:cf:e9:03:
                    e9:2b:c6:c3:63:87:45:25:fb:61:17:28:a0:2f:4b:
                    2e:c5:7e:5c:48:88:2a:de:f6:d3:5e:75:dc:e3:a7:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:84:90:56:20:22:A6:DC:8B:C6:53:ED:2B:FB:B9:F5:6B:09:F2:65
            X509v3 Authority Key Identifier:
                keyid:13:F8:49:6B:79:D1:C0:4D:08:2A:F8:3F:1B:E6:A5:EA:B0:C6:60:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E_hJa3nRwE0IKvg_G-al6rDGYIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/eeb26f-6790-42ce-8ccc-54a25e2cdaa9/1/E_hJa3nRwE0IKvg_G-al6rDGYIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:41:08:a3:8e:8c:e8:95:7e:cc:46:33:15:5d:25:50:1b:79:
         d7:54:72:a1:cc:89:36:94:8e:56:f3:6d:69:c3:fc:97:5a:59:
         be:aa:0a:13:22:da:04:39:89:3b:84:09:00:e0:21:82:87:30:
         00:bd:45:b3:83:fb:00:ae:94:e1:a1:0d:3f:60:e9:ff:c7:96:
         d0:c5:8e:7d:b4:90:c1:7e:3c:7c:ca:59:93:d8:bb:bc:35:f3:
         51:8c:53:5d:1f:03:da:ad:82:95:82:fc:31:e2:ee:be:52:8c:
         58:28:7b:d4:88:0d:18:37:43:10:46:d3:fb:81:ff:c9:65:66:
         46:d4:97:83:44:43:5d:f2:ff:42:b1:44:46:fe:3a:02:df:89:
         19:d2:b2:0e:ea:3b:2a:5c:ac:22:e5:b5:57:c3:44:a3:a7:f8:
         2e:17:fb:86:8c:5e:6b:14:43:c1:9e:17:c0:0f:32:6d:68:22:
         0c:b7:da:32:52:9d:05:5d:d6:b9:5e:1f:32:e6:7e:29:71:4e:
         1f:77:af:ed:8b:ec:17:f1:d9:21:fd:7a:81:af:a6:3a:3a:d8:
         6c:e0:83:09:4a:ca:14:48:35:97:82:b5:1d:99:6f:74:bb:ab:
         a4:ac:86:91:9a:a2:a4:9d:76:e4:4b:bc:0e:73:ce:dd:5e:a9:
         ba:89:41:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----