Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
File:                     qbdbZNXaF9cLur2BGjmmAt2vljo.mft (raw, json)
Hash identifier:          /9tb7MeFBWRgs+JKVqFkyOMOcBl1uirkQ4C8umdz0qc=
Subject key identifier:   3B:E4:73:57:ED:3A:68:03:09:C0:4F:CF:BF:E2:BD:53:8F:95:98:D9
Authority key identifier: A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A
Certificate issuer:       /CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
Certificate serial:       0194BD1787F8FE031329EC54080CA0C00C1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 16:00:23 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:23 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:23 +0000
Files and hashes:         1: 94Wo12Y1e3j65Bs3qSAzSptfA4E.roa (hash: rENezSOChxMywueLEcdlzFpl7wJd3fzE/bII/1kUK0Q=)
                          2: gLJC-FPMB6JG4uvuoXfj1y1VVB4.roa (hash: bJcY81wfY+5zVAZK4pJVEqgscj1+3rGIYBuBLom9f1Q=)
                          3: iP_pTpbnIdxSAcMSB0J0e2tamr0.roa (hash: 7izeNgiKykUZnZuut4ykOAANnikyEsRFWL6Soo0rwfk=)
                          4: qbdbZNXaF9cLur2BGjmmAt2vljo.crl (hash: mzG+qWOwklxlBcAN5MpUSgtKdPymsk0deQSunJfyZ2A=)
                          5: z5yYOxFSpOQ1zd8dnbyl44cA2Cc.roa (hash: rTNzicdR5UxEu+zSwQpGpaPQg7acnJ6eKVlTT5jJQ8s=)
                          6: zG5x_Fm1P67jb96qcZkE3Ol2eTY.roa (hash: db5+QXNKRG2BQO2CHQMOqU0fUStvszTNPuMXFPPnliI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:87:f8:fe:03:13:29:ec:54:08:0c:a0:c0:0c:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9b75b64d5da17d70bbabd811a39a602ddaf963a
        Validity
            Not Before: Jan 31 16:00:23 2025 GMT
            Not After : Feb  1 16:00:23 2025 GMT
        Subject: CN=3be47357ed3a680309c04fcfbfe2bd538f9598d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:71:bf:a6:14:b7:f1:32:bb:86:9b:d7:94:e1:
                    6b:f6:13:b3:fe:e5:17:2b:9f:03:58:50:52:97:3b:
                    a5:20:7b:8c:e6:ff:6a:72:ca:22:29:ce:d6:0c:dc:
                    98:7a:e9:20:ef:03:86:9a:77:d4:15:ec:f5:c2:b1:
                    af:13:1f:d0:2d:0b:33:3b:ec:18:ae:2b:88:57:25:
                    ab:8f:45:4e:71:df:78:68:02:96:d3:9a:68:b2:82:
                    2c:1c:34:61:eb:48:1f:2e:49:8c:28:66:24:e5:08:
                    27:76:bb:b0:2c:d0:e6:ea:0b:93:35:6f:bf:f1:16:
                    e2:2c:b8:81:d0:21:94:09:65:04:44:9f:d9:56:5b:
                    e4:98:20:66:ec:26:4d:83:b5:c5:0b:ee:1c:a6:0c:
                    71:0e:26:f5:ca:7c:10:d8:fa:e2:e8:64:c5:76:7f:
                    e5:a3:9b:ad:b4:cc:9e:c2:10:03:4e:03:9f:12:ca:
                    71:d0:4b:f4:1e:34:8b:ef:41:cd:3c:87:0c:4f:84:
                    be:2e:9e:b6:6d:9c:94:49:bd:e7:20:61:7a:61:12:
                    a2:96:79:a0:d2:ed:29:f8:f2:d0:1f:cb:20:7d:dc:
                    29:23:53:d3:20:11:cc:62:2b:17:af:a4:11:12:98:
                    cd:64:05:84:85:db:64:fe:e5:5f:0b:6f:1f:1b:72:
                    06:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:E4:73:57:ED:3A:68:03:09:C0:4F:CF:BF:E2:BD:53:8F:95:98:D9
            X509v3 Authority Key Identifier:
                keyid:A9:B7:5B:64:D5:DA:17:D7:0B:BA:BD:81:1A:39:A6:02:DD:AF:96:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qbdbZNXaF9cLur2BGjmmAt2vljo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/da85e7-a452-4b1d-b5ae-9b11804ecd39/1/qbdbZNXaF9cLur2BGjmmAt2vljo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:7a:2b:c0:45:06:61:a3:65:5f:d4:63:90:9a:cf:00:3c:ef:
         19:6a:42:df:b0:e3:42:1c:0c:7e:8d:a9:11:73:be:7c:a4:33:
         4d:e1:84:70:77:04:7d:26:09:8c:2e:5f:52:ec:ff:04:bc:22:
         38:b6:77:5b:3a:75:df:ab:21:8a:ae:e9:09:1d:e7:e0:65:99:
         d7:1e:e7:89:53:f2:79:a9:35:60:87:49:cf:10:03:a6:db:8e:
         e3:15:c4:5a:e7:8f:4d:f8:05:24:ac:d7:ab:22:fa:76:56:56:
         76:e3:57:0f:31:f5:66:c7:fa:e7:24:25:e5:91:ce:a6:7f:9e:
         1a:a3:66:c5:57:8b:fd:44:bf:78:7f:a2:a6:6e:52:b2:14:dc:
         44:60:88:aa:0d:c0:7a:31:19:8f:fb:58:58:f0:9e:57:27:83:
         29:67:bf:32:39:3a:fa:0d:6f:79:47:a7:2c:b4:e1:d8:b8:b9:
         8c:3b:07:de:b0:00:1b:36:91:0c:c0:bf:71:d3:84:c8:1a:64:
         e3:34:94:c3:ad:57:f9:c2:2d:92:4d:dc:07:b6:a7:75:9f:66:
         d4:c4:93:29:77:8e:b4:fe:d1:61:16:a9:93:d1:4b:d5:5b:d1:
         19:0e:a6:63:e6:9b:ea:00:04:a2:76:9d:a8:51:1e:78:9a:09:
         d6:c7:44:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----