Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
File:                     iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft (raw, json)
Hash identifier:          eflKkWbh9e/Me14wLSY8BAGjitmq1IWTF/KStzeRnto=
Subject key identifier:   54:E2:54:5E:68:88:75:70:AE:FE:D3:9C:52:97:60:91:26:A5:19:A3
Authority key identifier: 8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00
Certificate issuer:       /CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
Certificate serial:       0194BBCE3827D5FB55AF3B3C4DD9BB75F205
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft
Manifest number:          0789
Signing time:             Fri 31 Jan 2025 10:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:41 +0000
Files and hashes:         1: 2N-Ad_PjuCdbWMhOkKca0e_4aH4.roa (hash: mX5PwA+5z3mRrepVsPYas6Uu6jFtb6sejxlwArRN7qw=)
                          2: 9qSGcGsaAT-Orj-BviLbbFBnobc.roa (hash: KGQdMGZUYXqZM3Cup0R+gwjVZv7t7VL1nDYpfpe2mMo=)
                          3: C6v3z8kGbpGtAYhEGvbIA9POeJ4.roa (hash: dVnxKmSOxpULCnBph8ARAXzts2lzvI7njmrNqMweylU=)
                          4: Q3cz4EEEExax1nv4wtLZZPPEgSk.roa (hash: ML1oxtfPutOEqYHFMGiG3+QvRpl8345MdKNoHGmCBSQ=)
                          5: iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl (hash: 030QiraWnske0srfPWpZRS+g2H1XeiupDmFcLPbshK8=)
                          6: raR6qfZ5L-9hzvpYVK9us-1wIug.roa (hash: ARfa5iwtjYV/gUtHJTALBEg3MfK/IBejlaZvsXofCl8=)
                          7: tBuToTypjDQ6u5RK5DBD-fEJHi4.roa (hash: iFrIeR1iIdBgXE0Q5UKDG34iIF6/jJkNwFYF+l/o72M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:38:27:d5:fb:55:af:3b:3c:4d:d9:bb:75:f2:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aad9c0ce5ba3905b41970a04e51976076c67e00
        Validity
            Not Before: Jan 31 10:00:41 2025 GMT
            Not After : Feb  1 10:00:41 2025 GMT
        Subject: CN=54e2545e68887570aefed39c5297609126a519a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1d:8d:8e:a6:d1:5a:e2:01:f5:e1:83:e7:7a:
                    f2:ba:9b:7b:04:ed:47:63:27:fd:6f:57:57:92:c9:
                    99:0e:88:d7:91:72:91:52:94:63:fa:ba:f1:1c:16:
                    db:6d:b2:c4:32:f7:66:a6:83:b4:7e:35:97:3a:cc:
                    30:60:b7:17:27:3b:8c:d7:8f:90:74:6c:65:00:21:
                    9d:5d:8b:85:a9:4c:06:3a:36:7d:9c:6e:ae:a8:fc:
                    95:9d:bb:a9:8b:d8:7f:22:8c:57:52:50:44:ed:9a:
                    00:77:3c:4a:08:77:37:aa:11:f1:a1:2d:a9:60:e4:
                    35:ee:2e:a0:31:dc:4f:02:e6:ab:3e:c0:49:b5:78:
                    f1:48:cb:2d:fd:5e:c7:4d:ee:56:1a:ce:c3:dc:7a:
                    24:62:e3:2a:4d:ec:4c:cc:0b:f0:7b:d4:0e:c0:51:
                    a1:d8:da:35:30:42:cf:8a:ae:bc:ce:a9:46:cc:b9:
                    f8:c6:aa:49:1b:db:d6:38:38:92:78:16:1b:37:ac:
                    4e:15:27:8c:3e:1e:2c:66:98:14:1d:db:ad:82:3b:
                    f6:19:ba:70:cd:29:c5:94:70:da:99:eb:e8:95:64:
                    ea:d1:25:23:68:cb:81:e0:a2:ae:fd:69:29:5e:9a:
                    54:d0:cd:62:da:55:18:cc:f8:2f:ff:eb:5f:46:0b:
                    54:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:E2:54:5E:68:88:75:70:AE:FE:D3:9C:52:97:60:91:26:A5:19:A3
            X509v3 Authority Key Identifier:
                keyid:8A:AD:9C:0C:E5:BA:39:05:B4:19:70:A0:4E:51:97:60:76:C6:7E:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iq2cDOW6OQW0GXCgTlGXYHbGfgA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e445e4-26bd-48c9-83db-7a0ece9c0af8/1/iq2cDOW6OQW0GXCgTlGXYHbGfgA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:10:0c:18:87:08:72:50:87:97:d9:f2:2d:94:3d:a4:fc:5e:
         88:f9:ad:f2:51:5c:47:99:45:c4:a0:47:f4:9d:12:45:af:00:
         5f:c2:12:96:96:27:80:0e:60:b6:e0:b3:54:d2:28:4e:f6:a6:
         ea:45:87:42:c9:df:b8:32:d8:2b:ba:72:1f:4a:f2:b7:46:00:
         92:ef:83:a9:34:38:f7:8d:51:13:ba:fb:34:74:d4:ee:6f:dd:
         3d:2e:cf:d9:2c:78:97:a4:b3:02:7c:54:d7:c1:8b:9c:6e:b6:
         f1:0c:ed:85:31:58:4a:7d:b3:52:08:d2:4c:a1:3e:30:d7:1e:
         d5:4a:1b:7e:99:65:b4:ac:8c:13:2c:62:4e:f1:70:a7:e2:50:
         3e:6a:e0:64:6b:2d:65:a1:77:51:09:1c:d4:59:2a:b3:2c:b9:
         f2:f2:fe:93:00:24:48:df:a5:27:d1:7e:28:7c:42:e2:1d:8b:
         49:26:81:be:20:33:9f:f3:cd:75:0d:62:ad:3b:e4:e3:2c:5e:
         55:8c:84:49:57:a8:1f:7c:c8:20:04:35:71:41:1c:b4:b4:a4:
         7f:72:40:de:b3:c8:45:09:f7:92:c8:a2:7c:e1:7d:c7:cd:43:
         4d:77:8f:06:1a:f2:c2:69:ae:8b:3d:b6:2f:49:51:ce:08:c7:
         e0:82:27:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----