Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
File:                     x_BLeLLu35mO3VzB6IZxyNEPGGU.mft (raw, json)
Hash identifier:          HfpWxGYxLhS+7CyIQ18waPCznGDhtg3tkded3ib/ZCI=
Subject key identifier:   60:F1:C6:F2:EB:DC:4D:BA:EC:23:E4:83:24:84:8E:4C:EC:09:64:5E
Authority key identifier: C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65
Certificate issuer:       /CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
Certificate serial:       0194BD4E5B364512A20276C70A95D97286D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft
Manifest number:          0CCB
Signing time:             Fri 31 Jan 2025 17:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:16 +0000
Files and hashes:         1: 1XXADw1Gi3IFHlfT4TGbyZ0Lb48.roa (hash: wqsUGKMXa3a0bqJDEXOb2Eoz6FNnYl15/F+MOCWnVUU=)
                          2: 3G2DA45VM_lDBB71pVstt1nFsgM.roa (hash: XsJ7+cj3m87ow6PegmNGMVEScsq7erviwZWWQiHFJaI=)
                          3: pw4ID0JvUCs01Bso4I7b8aQC3Kk.roa (hash: 4UmrNvYonno/HoHy5PiUXCmAjmZg7PWwKoiEqb2kwD0=)
                          4: x_BLeLLu35mO3VzB6IZxyNEPGGU.crl (hash: 5i6XD9YhUZlmyp5BpVFxY4S97kws5pqXqxO2DiAfggE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:5b:36:45:12:a2:02:76:c7:0a:95:d9:72:86:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7f04b78b2eedf998edd5cc1e88671c8d10f1865
        Validity
            Not Before: Jan 31 17:00:16 2025 GMT
            Not After : Feb  1 17:00:16 2025 GMT
        Subject: CN=60f1c6f2ebdc4dbaec23e48324848e4cec09645e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0c:3d:7f:59:fd:c6:93:30:84:12:a8:69:5c:
                    67:c8:cc:02:80:ae:60:6d:88:dd:65:89:75:b4:37:
                    95:ff:20:21:9d:bd:64:8a:a6:23:d2:55:be:ee:7f:
                    ee:61:09:39:57:42:89:1a:91:81:b4:cc:6a:82:bc:
                    b2:0f:b0:6d:62:22:5b:6a:2a:e7:53:d3:1b:28:8b:
                    5e:e7:6d:ba:69:a4:7a:31:32:97:85:64:7f:35:62:
                    6d:62:c1:2c:8e:33:32:59:c2:9b:57:93:39:fa:bd:
                    39:4c:de:d5:10:62:60:4d:46:80:82:d6:e2:9e:d4:
                    85:4e:6a:9c:0c:9f:37:1e:1a:66:d2:22:a6:64:a0:
                    3a:96:30:d1:f6:ac:88:ca:92:7b:49:fd:76:78:22:
                    bd:a9:45:3d:7c:75:df:fe:ec:7e:05:f9:be:2a:fd:
                    ff:10:29:6b:3e:7b:dc:60:39:76:c2:7b:4d:5f:f2:
                    3a:d8:a5:14:75:c2:82:86:18:3b:af:d0:9c:51:77:
                    9f:89:21:d7:ec:3b:a0:77:38:0e:53:3a:32:cc:9a:
                    6f:00:09:2d:e8:a5:23:a0:96:93:06:68:af:e8:e4:
                    16:58:63:bf:b0:83:9f:5b:8b:09:15:06:e7:18:d6:
                    34:e1:63:11:61:b1:4e:ab:04:b2:5e:d6:f8:84:5a:
                    08:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F1:C6:F2:EB:DC:4D:BA:EC:23:E4:83:24:84:8E:4C:EC:09:64:5E
            X509v3 Authority Key Identifier:
                keyid:C7:F0:4B:78:B2:EE:DF:99:8E:DD:5C:C1:E8:86:71:C8:D1:0F:18:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_BLeLLu35mO3VzB6IZxyNEPGGU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/473924-6f99-473d-a077-f437839095d1/1/x_BLeLLu35mO3VzB6IZxyNEPGGU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:08:19:a6:9a:be:85:d5:eb:bb:71:95:66:b7:19:1d:50:6d:
         bf:b7:02:5b:e6:0e:20:79:1e:80:fb:93:7a:0a:4e:ed:82:99:
         a7:de:15:0c:55:b6:d1:96:04:3f:b2:c6:bd:ba:fe:1f:f2:da:
         b1:4c:70:f4:10:20:9b:1a:e3:d2:cc:8f:3e:b9:a5:aa:6c:45:
         fd:4f:c6:5d:df:95:47:08:ec:61:c6:0c:d4:8c:ed:70:12:11:
         b8:bf:07:84:66:be:0f:76:12:92:56:09:29:17:8e:b2:ad:c4:
         f5:3f:19:44:c8:f8:c1:e1:c3:1e:4b:62:3e:60:31:ac:ba:4a:
         91:ce:7f:6c:0b:8d:4c:dd:83:3c:84:52:f8:53:08:46:fa:cc:
         d1:a4:3c:79:6a:a1:63:af:09:94:8a:7b:53:12:35:41:66:b1:
         65:12:25:be:89:ce:57:db:4a:74:34:10:4e:7b:45:7c:4d:87:
         c3:50:f8:5e:06:aa:15:38:d7:2e:08:c8:a4:e9:56:1b:1d:e7:
         3b:e9:ad:0b:30:fd:82:b0:0c:4a:42:3f:fe:b6:9c:b1:82:1f:
         4a:0d:3c:13:96:6c:99:04:c6:93:d4:b6:c0:29:30:a0:26:da:
         69:82:08:f2:d3:94:9d:0e:5f:00:13:23:39:db:13:2b:04:ec:
         54:b1:38:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----