Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
File:                     5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json)
Hash identifier:          C3jIE9UqRUU32MEc2FrM+zCDMeAX3Dyo+HL79YF84p8=
Subject key identifier:   C1:8C:5C:5F:E1:37:00:B0:3E:0F:0C:29:68:40:72:BC:25:33:9F:11
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Certificate issuer:       /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial:       0194BD8574D45D3E41B921965414056824D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft
Manifest number:          13DE
Signing time:             Fri 31 Jan 2025 18:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:27 +0000
Files and hashes:         1: 1-feZXYDiYfHR7e4ZeX8KeYvPoL4.roa (hash: USix1wOZJqwKepxb+dunrLx6XXxYIhAMOujodYRBxR0=)
                          2: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: yXzI0k/Y5uZAVkXZjU0dvYyecfewSDiJHUOTMzxCjh4=)
                          3: 9AJxDtY7P1EIdtRJtlV_POunNNs.roa (hash: KZb05CoUKougLWY9WQNd2WCLqOi1mJz+1xSCfQFl0K0=)
                          4: SNfpSksRdeq_X6alujKtqxhgfmI.roa (hash: Ma1Hn2WiNgfoHoDq7NgShnN2PavA2o6Q6gAsmbAJ6uM=)
                          5: Xxx-aLbVPMFeFACAuRgkyYhKGZ4.roa (hash: Qjsr5YH+eP1GQSztBosIVdbSouCX9Gvl5XQ/f3iIe+4=)
                          6: arM4rSr3_zYWYsvqUqH9LMJxK1c.roa (hash: jH1XC6dsbVtzQ5KTBqEfgNDIc/WzLssGqH+BUquB6w8=)
                          7: bFYSJ_I4YgMVW4I9mBgSvFA_y-8.roa (hash: H2VlaHHW6c4b4Aq4JHISuCEj338oIr6DsQEFdgqSCMc=)
                          8: fUwIM0sp1GFSdwqWjPbX7BRcPzQ.roa (hash: Xh0ESEMvO/UeKqHJNYyYyUnRbpIWXGZSxLiX7rQbHOo=)
                          9: gSkSalLxBBTZ5ze-KWxeB_8DtQg.roa (hash: X8zrqUjiyTt5wAUyN7WfFsY2WeTVhfo2FCeXdvrhuMI=)
                          10: iLA6Ejg-cHr1NFX9Lhx90vZG_PA.roa (hash: V2n/3b9/dkdQaB5XWzFopdFS7m+2q5KJlpANrpk8I4U=)
                          11: z2F52wGzH9BMrpqKt2YykAg8u8Y.roa (hash: bvYJ2BHirZKw/0tfOS28eGnj6Ugji4ZaJ639S6rbz9g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:74:d4:5d:3e:41:b9:21:96:54:14:05:68:24:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
        Validity
            Not Before: Jan 31 18:00:27 2025 GMT
            Not After : Feb  1 18:00:27 2025 GMT
        Subject: CN=c18c5c5fe13700b03e0f0c29684072bc25339f11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a5:82:71:8e:e8:3a:20:df:29:ec:92:59:ed:
                    8f:ed:b3:6a:fd:ea:55:9f:13:f9:8f:0b:d0:8f:b8:
                    d7:56:d7:ad:b7:5a:50:95:aa:e9:c7:c3:82:e1:fa:
                    ea:e2:8c:4e:ab:38:6f:bc:6e:5d:75:c3:44:c0:b6:
                    86:4a:ff:fd:90:7a:69:18:31:f2:25:35:87:21:5c:
                    45:6f:b0:b3:52:e2:8c:e6:6a:e4:ef:9a:23:7f:0e:
                    72:84:9f:6c:0a:41:60:28:cb:f5:4e:68:02:df:b3:
                    99:c5:c5:4a:a2:09:6f:52:9e:6d:f8:41:2e:ab:a8:
                    84:55:cd:08:97:84:ca:54:44:5a:29:9a:55:a5:b1:
                    d3:75:94:c8:46:16:49:40:55:66:a8:a9:ad:5d:35:
                    b5:b8:22:8f:3e:a0:cf:af:bc:ac:3c:60:a6:27:ce:
                    87:33:6c:6c:c1:af:7e:99:da:d2:75:52:03:cd:02:
                    95:60:d8:e4:85:e6:57:ac:0b:35:86:3d:08:96:1d:
                    b4:88:a0:34:ac:74:d4:85:80:3f:de:10:a9:79:36:
                    88:22:24:41:45:fb:3d:64:b3:65:6a:20:cb:45:d4:
                    66:2f:75:91:ef:c9:2e:e5:94:05:df:07:47:11:8d:
                    79:6e:d4:73:df:f0:aa:bf:64:ee:7a:0e:c6:53:ca:
                    d0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8C:5C:5F:E1:37:00:B0:3E:0F:0C:29:68:40:72:BC:25:33:9F:11
            X509v3 Authority Key Identifier:
                keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:24:9a:20:85:f7:1c:37:16:04:d0:fd:2d:eb:b0:34:a4:69:
         93:37:8d:73:e2:e6:7d:08:2b:5b:ec:7e:7f:6e:6b:b0:56:ea:
         01:d5:68:0f:79:7e:94:7f:0b:85:fc:9d:44:60:e2:3d:94:20:
         d7:9b:8c:48:4a:c3:80:d0:b5:c7:f7:d6:c5:e0:eb:20:75:d4:
         f8:d2:e0:b8:e6:ac:ab:59:51:ed:be:5c:07:fa:0a:25:21:07:
         ff:61:de:18:23:c6:8b:17:bd:e2:f9:29:f3:38:9d:5e:28:f7:
         d2:c4:1d:ae:13:34:01:34:8e:04:bf:02:d0:2e:43:d8:c4:31:
         70:a4:07:9e:92:6a:c4:2b:63:88:87:86:04:70:84:7c:e9:bc:
         3f:1e:d9:18:24:72:ce:ae:6c:fe:0a:51:61:d8:8d:d9:fb:06:
         ad:1c:d9:e3:13:7e:77:00:68:c5:30:60:7b:fd:d2:80:7f:94:
         8b:b3:16:84:ed:64:7e:59:56:a5:0d:4b:36:11:ff:1f:5c:44:
         14:88:8d:26:0d:76:e0:da:f9:a8:34:0b:eb:ff:23:2d:5a:ad:
         ff:28:d0:40:ad:83:0c:e7:e6:8c:85:4d:1d:36:ae:50:87:27:
         78:f1:c5:66:3a:47:26:64:f6:14:c6:a9:d4:f7:1c:e5:3e:f2:
         8e:17:54:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----