Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
File:                     M1ylITYiJtA8GCkAPYHUmKqDjzM.mft (raw, json)
Hash identifier:          TrFPs9L+CbvaUc4ynzs4bNw5umrRTAgJgBIcoUbDuN4=
Subject key identifier:   37:93:B0:D0:A5:77:FD:0A:16:78:D5:2A:4E:12:DE:68:FE:DB:6C:A4
Authority key identifier: 33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33
Certificate issuer:       /CN=335ca521362226d03c1829003d81d498aa838f33
Certificate serial:       0194BD4E383897CBAF6A9C00E71DF949D17C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft
Manifest number:          0DAE
Signing time:             Fri 31 Jan 2025 17:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:07 +0000
Files and hashes:         1: ANOircqzUHBj-ZPpTgeyTKkOD78.roa (hash: fDYWM8HWDpI+reW5CgnVi5v3ZgVo9GQn9YV+A+MUIVU=)
                          2: M1ylITYiJtA8GCkAPYHUmKqDjzM.crl (hash: EZwXal4HtnfFeLayEb7GO8p933w3Tk5vP/6Vso5qpt4=)
                          3: r3I5Ow6u9Tx4IPHbkMt6nWGV3D0.roa (hash: ikwJhjjFkAWraNuqvVNclfgApMdzpBAB8Aiwx4oSnHc=)
                          4: w_txi_uk4mQ_XR8rFJDiL-c0jd0.roa (hash: f+eCAj94qu5fHRtnAwnLgTIixl7vgaNbEIuTMRlOBnI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:38:38:97:cb:af:6a:9c:00:e7:1d:f9:49:d1:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=335ca521362226d03c1829003d81d498aa838f33
        Validity
            Not Before: Jan 31 17:00:07 2025 GMT
            Not After : Feb  1 17:00:07 2025 GMT
        Subject: CN=3793b0d0a577fd0a1678d52a4e12de68fedb6ca4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:69:fa:54:d3:ba:f6:b0:40:a5:cc:4d:b0:
                    2c:d6:05:5e:c7:06:47:10:36:6a:fe:0c:0b:dd:ea:
                    a4:ba:c6:1c:38:0c:76:fc:66:18:3b:e7:55:fb:ec:
                    fc:25:fa:5c:10:87:6b:98:c4:b5:71:70:fd:81:13:
                    68:8b:ad:31:81:30:94:e6:16:68:13:f1:8b:25:37:
                    10:91:3f:54:15:18:ba:92:b5:1f:f3:b8:07:fa:dd:
                    57:7b:69:c3:be:48:66:ac:17:14:64:93:7c:dd:29:
                    32:30:ca:cb:33:3a:76:e7:d7:cd:58:95:88:08:1d:
                    86:c3:a1:7a:b2:e0:52:96:0d:b3:59:0f:3c:e3:4a:
                    23:ae:3b:a5:07:50:91:cd:2f:52:95:a1:22:a5:ce:
                    56:e8:62:bb:c8:81:52:d4:5f:91:cb:c3:fb:e1:20:
                    d4:26:d5:c2:c0:20:c9:34:e8:ee:d0:58:91:ba:80:
                    5e:12:72:b0:98:6b:93:33:a5:a8:ec:68:88:ee:9c:
                    25:0e:03:64:23:1b:f1:a0:3e:7a:0c:d9:79:e0:3e:
                    3d:3f:a7:0b:f8:7f:c1:68:c5:cc:29:60:03:78:68:
                    5a:af:ed:7e:48:4b:d0:5a:9a:1c:d5:7c:13:40:e9:
                    04:a5:60:6c:1a:49:d0:dc:38:59:55:84:93:0c:81:
                    ec:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:93:B0:D0:A5:77:FD:0A:16:78:D5:2A:4E:12:DE:68:FE:DB:6C:A4
            X509v3 Authority Key Identifier:
                keyid:33:5C:A5:21:36:22:26:D0:3C:18:29:00:3D:81:D4:98:AA:83:8F:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M1ylITYiJtA8GCkAPYHUmKqDjzM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/dc608a-175e-42d3-93d8-974c44ab9cfb/1/M1ylITYiJtA8GCkAPYHUmKqDjzM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:e7:55:a7:0d:d0:a2:e9:87:0e:bf:e8:7f:51:cd:03:40:4d:
         16:b8:07:50:f3:92:b7:46:bf:b4:e1:87:61:18:03:0a:b1:e5:
         2a:26:6b:08:ac:69:86:c5:d4:f9:54:73:f6:91:a1:c1:68:bb:
         e3:e4:5e:8c:ea:39:85:a6:5b:b6:7f:c8:86:de:db:f9:da:71:
         df:90:79:5d:e4:f9:49:e4:42:52:60:56:0e:d0:4e:a3:ed:74:
         c0:a1:6b:37:39:5a:45:bb:db:5e:b8:b8:73:5d:39:b9:57:c3:
         46:d6:8b:f2:fe:ed:4d:15:94:17:7c:7f:e4:23:2c:48:41:00:
         b7:5d:42:f6:2a:99:3f:4c:f8:70:de:8f:2e:f3:60:36:4e:11:
         af:36:f9:7a:17:1f:64:b2:79:db:2b:4f:5b:13:64:1b:92:ed:
         2c:2a:02:d5:af:4d:c4:20:55:97:fa:f1:f9:31:6d:2e:a2:2e:
         b5:bd:ee:77:1c:42:60:2d:2f:bd:49:03:97:09:79:98:2d:d7:
         fb:ab:2c:7c:c5:cb:f5:c6:ff:05:9b:3c:e7:d2:63:c9:b0:e7:
         b6:6f:6f:f3:36:6a:b3:38:ed:81:e8:5d:fd:8f:64:18:5a:9f:
         2f:10:61:32:80:af:0a:a0:14:a1:3b:0a:63:19:e6:9a:bb:72:
         88:6f:e0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----