Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
File:                     IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft (raw, json)
Hash identifier:          hm5AF4KxtVtC0swZzUdKg5gx/nEW5dP52OHHz/LDK4s=
Subject key identifier:   9C:80:62:19:46:55:01:9B:9C:CE:B5:0B:12:00:CE:49:3D:CD:25:D8
Authority key identifier: 23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62
Certificate issuer:       /CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
Certificate serial:       0194BC3BED9DA5BA76D3CD121A8635C2BD23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft
Manifest number:          1430
Signing time:             Fri 31 Jan 2025 12:00:31 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:31 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:31 +0000
Files and hashes:         1: G8CSmYfNYEUpgaZJMXjNKwLCldA.roa (hash: Yuu5hUuvifstfVCRuLWU+r4+/uWTbuYyABHOqGGSlMg=)
                          2: IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl (hash: BZsFtimQuuh3nfNrhp0BttU+brTKNnR7sBvq1wU6T84=)
                          3: JqGjYzJUHlyPRNKT7Gdae1GdJUA.roa (hash: /ZlOeq2y9fIyqYcQI5TRRc+qHPMMjEQDsJbQfMP47Os=)
                          4: KP1-R8Ozo5sN8i5g7eaE07K0eTQ.roa (hash: mLvAtndHxWdPvRVZIiOq/nwf/VdytfBFv0z3meNar9k=)
                          5: W08HMn4p6kVqze5MDixmPqgVV3Q.roa (hash: jlOVPZJCuEAwn3iEzzJNLFkpo/PRQpHf+dW9CA2qsug=)
                          6: ZaM9jNyw62egtMMXYnGxszrNY3k.roa (hash: IjXCT+wQnlaMHMU5neUWgppwJ+IMB7wimw7ZMxVicdg=)
                          7: fuo8dYdaswIRyEIz4oPsApWqGJc.roa (hash: TgHuzsK6LNwJZxHjJiXaEYIfR/pJeI5Px7YOwniHSmE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:ed:9d:a5:ba:76:d3:cd:12:1a:86:35:c2:bd:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23259da3b1b38ca0939f490fb9043fcd89cfd062
        Validity
            Not Before: Jan 31 12:00:31 2025 GMT
            Not After : Feb  1 12:00:31 2025 GMT
        Subject: CN=9c8062194655019b9cceb50b1200ce493dcd25d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c2:23:1b:27:48:a2:d6:48:b4:1e:dc:ff:e7:
                    dc:9f:96:f9:fd:ac:09:fd:cc:b9:db:d6:e7:de:16:
                    a5:7d:ab:e5:df:83:af:38:40:6a:a3:51:79:c7:45:
                    c3:a8:01:b1:3d:e0:e2:40:b7:9d:d7:d5:89:ea:4f:
                    77:95:b1:95:94:04:eb:b4:76:f7:75:3d:0c:79:08:
                    a1:1e:ee:85:6a:7c:8c:f4:a4:ed:c3:35:17:35:b7:
                    7d:8b:ca:6d:8f:2c:2d:59:82:82:68:20:75:f0:4a:
                    71:0a:29:af:a7:d6:7f:0c:92:f3:ba:8b:b9:ef:20:
                    e8:cb:6a:3a:a0:dd:fa:11:c6:1a:87:fc:e1:25:de:
                    86:bd:18:ed:f4:89:cb:fb:d1:df:9a:bd:71:90:f6:
                    51:e0:10:2f:ae:f7:25:5f:3c:30:0a:88:41:d9:90:
                    70:ba:d3:f6:4a:00:93:ec:5f:54:fd:40:b0:21:44:
                    98:c2:53:3c:69:5a:9b:a0:be:16:20:26:94:12:40:
                    ca:50:da:b5:3a:5e:c6:29:d8:48:e4:d1:70:5d:2e:
                    39:d1:7d:f8:5b:56:cb:44:e4:dd:08:55:e4:ec:db:
                    98:80:e0:9c:80:ad:69:ca:db:6c:9d:17:7d:8c:eb:
                    06:4f:54:8c:5c:39:84:6b:b2:50:f9:a3:41:fb:97:
                    55:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:80:62:19:46:55:01:9B:9C:CE:B5:0B:12:00:CE:49:3D:CD:25:D8
            X509v3 Authority Key Identifier:
                keyid:23:25:9D:A3:B1:B3:8C:A0:93:9F:49:0F:B9:04:3F:CD:89:CF:D0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/91a5fd-e56c-4d87-bd75-654dd6442ce4/1/IyWdo7GzjKCTn0kPuQQ_zYnP0GI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:50:aa:3c:63:31:a0:c0:c7:ea:71:92:90:6e:53:3a:12:d7:
         a7:a3:18:70:71:c6:91:78:01:5d:8f:c2:9f:9e:8b:f5:23:d9:
         ca:23:ea:3d:a0:4c:8f:d6:04:1e:2c:fc:2b:86:a4:ea:b8:66:
         9e:c6:53:d4:f6:3f:06:4b:4c:b3:69:b3:a8:28:74:a8:64:9e:
         02:10:b0:ea:c9:2e:cf:3f:fc:cf:da:7a:b2:de:0a:d7:2d:56:
         a5:ce:18:aa:29:83:e3:c0:80:5d:93:87:32:c6:0b:19:f7:27:
         ba:8a:09:79:c0:fe:dc:26:26:1a:2f:d0:94:59:ea:3c:5e:c4:
         14:43:55:10:5e:c7:f8:f4:e7:20:a5:f9:2f:57:f2:4e:94:52:
         e2:10:9f:32:db:e7:18:b7:08:1c:d8:2f:ee:d7:a3:2d:eb:d9:
         7a:fb:09:81:8e:60:0a:f8:be:d8:5e:87:95:08:cf:e0:c9:89:
         2e:14:22:df:be:de:0a:bf:cc:af:2a:40:1e:85:79:3e:b8:38:
         1b:85:9d:2c:c4:70:08:7d:0f:05:e5:75:91:5c:9f:0e:52:80:
         f2:33:d4:92:48:9b:c1:28:aa:93:49:4a:d9:cb:81:0a:b6:cf:
         0b:f4:4b:ea:e3:34:f8:8b:28:69:0a:6e:bf:79:fd:07:0b:05:
         fa:8c:4d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----