Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File:                     u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier:          RBSiqHOw34oTioSduGstRuoEKkK7QOf6d2hHF1yczYg=
Subject key identifier:   FF:34:E3:4F:52:88:D0:A1:24:04:27:F7:0A:CA:76:2E:13:A1:F4:18
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer:       /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial:       0194BD17D8908C488E22D3260B8E7016371B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number:          1430
Signing time:             Fri 31 Jan 2025 16:00:44 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:44 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:44 +0000
Files and hashes:         1: 6XCQPd-gBaWI9uUfOl9Oxd_9HlY.roa (hash: rYTYbZJWQOZnH0RagwK8UwoxwTXRP+nIxOLYvS6LJxg=)
                          2: Sz4cgZk58K5KT8c6QEb0Ql3mAiY.roa (hash: XD1k9LSsxBfImI/ORmlcMWAQZfP4H0hZi+Dr1QtMaAI=)
                          3: bvhxhmAqyDusWG8L2BubxFp6Byg.roa (hash: SHS3jK9UFMV78c0xUf6ZLaaMiJ9/VJhwk1oZbalxq7g=)
                          4: q0ZcAaJC0NdgaZbJABmMG3a-wuc.roa (hash: SUYYeTh6yzkAt8ag+Tk4xijbvUF82bkEC5ALi/AihH0=)
                          5: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: wSfYZTY3t0Atoe2AGcCU1hrF4aSoq+ga1R2LyVHP9Jc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:d8:90:8c:48:8e:22:d3:26:0b:8e:70:16:37:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
        Validity
            Not Before: Jan 31 16:00:44 2025 GMT
            Not After : Feb  1 16:00:44 2025 GMT
        Subject: CN=ff34e34f5288d0a1240427f70aca762e13a1f418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5c:25:47:7b:30:8f:9f:f3:20:41:d5:c8:e8:
                    c5:cf:74:37:5b:77:e4:22:a4:8f:ce:e1:01:27:d8:
                    e7:0b:ee:d1:b0:4f:81:f8:b6:fb:70:a8:db:26:22:
                    24:12:41:64:8e:67:65:ac:5b:e9:69:ae:1e:d4:1a:
                    c4:6a:c8:ea:2a:90:83:83:cb:45:1c:7b:f9:0c:38:
                    19:1f:aa:9c:b5:a4:09:71:60:70:64:3b:b9:7c:5f:
                    0d:3b:89:ee:ef:93:00:0d:61:eb:c2:9c:5b:c6:53:
                    1c:9b:c9:03:5b:8f:71:72:31:9b:a4:0c:59:20:e7:
                    89:17:1d:39:a9:df:9c:7f:79:3b:ff:c0:3d:a0:04:
                    d5:ce:11:51:e9:59:ff:2b:43:a2:83:5e:7d:95:98:
                    b9:47:4c:be:49:de:3d:64:e9:21:fe:3e:7f:fc:e6:
                    60:a1:ae:8e:b6:5d:8d:f0:cb:c0:dd:6d:b7:b9:68:
                    5d:4c:77:07:3b:e1:04:ba:c1:2a:64:47:26:24:a0:
                    90:d3:d6:bd:5e:0f:44:4d:08:93:d8:82:df:a1:bb:
                    ba:8d:80:b7:20:2d:4f:a4:3a:e2:2c:05:ea:fe:c5:
                    48:17:10:76:f3:40:53:8f:4c:38:e6:c0:5d:60:2f:
                    15:80:7b:23:14:22:12:72:1a:5e:a3:89:5d:f1:1a:
                    a7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:34:E3:4F:52:88:D0:A1:24:04:27:F7:0A:CA:76:2E:13:A1:F4:18
            X509v3 Authority Key Identifier:
                keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:54:6c:f1:19:33:8f:d9:1b:07:1d:62:3c:28:7c:d1:50:f7:
         9e:7c:35:ca:71:10:f9:85:2f:e4:cb:57:65:1e:97:f9:d9:33:
         a5:6a:02:23:97:24:49:54:98:50:57:d9:e0:cf:1c:9a:60:3a:
         03:0f:57:81:36:1c:15:22:c9:58:88:60:4d:88:09:1e:c6:bc:
         79:70:d7:49:e0:e9:e3:d7:ba:71:25:38:fa:c5:e3:a3:63:66:
         b7:ae:1f:7a:f9:d1:dc:71:a1:bb:64:2c:6a:73:cc:e6:86:cf:
         09:27:13:5a:c4:c1:1a:b7:b5:1a:58:9f:2d:1f:03:dd:28:4b:
         11:1f:b0:db:9b:e4:19:ae:29:bc:36:1c:e9:74:43:b0:6c:62:
         c1:6f:7b:1e:52:6f:89:7c:d8:6e:51:6e:34:f2:94:20:0e:31:
         d9:40:f9:7f:db:da:27:dc:95:09:ac:8c:6e:e3:04:91:43:38:
         2a:cc:41:82:2f:02:47:5b:11:c3:4d:06:92:b6:ee:7f:83:9f:
         3e:fc:17:6c:80:af:8c:0a:de:53:03:81:44:d9:2a:5d:b5:0a:
         1d:63:53:6b:6b:a5:18:1c:c9:4a:39:8e:60:1c:c0:e9:e9:39:
         dd:0c:fb:28:7e:90:91:19:cc:53:bd:c9:4d:02:19:34:59:1a:
         85:a3:ed:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----