Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
File:                     kfX87b24TdUvxncNfM_T_GaE-kE.mft (raw, json)
Hash identifier:          8jUGWz0ASrI48SCIZsJ/Zg73cjwLzaj9DRYn1umdws8=
Subject key identifier:   BA:62:CB:7A:5A:68:26:53:A4:26:DC:5F:E7:57:9F:1B:2F:C7:E5:DD
Authority key identifier: 91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41
Certificate issuer:       /CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
Certificate serial:       0194BD85806D966EACE0BD008836594E7D6B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 18:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:30 +0000
Files and hashes:         1: 6UpEJlRsXOn9vaGmBJWrZdfalwA.roa (hash: HSwxSSz5lFpaFRsJuAqgaQ8EsTFkTI/T+FmwfdtjYaA=)
                          2: 9tPvRIgWOFQGF5ALiDiBtpjalf0.roa (hash: CNi9LKlhqfclz9Oir048bs7o3/W9+fUSyftDkxngReE=)
                          3: JvOQdUjkCtx4pMZ63YDUDSKRif8.roa (hash: lpSKgZ5ZudI2jyQ9YWWPgdYiIoklrO/1U/orK0nz9yw=)
                          4: kfX87b24TdUvxncNfM_T_GaE-kE.crl (hash: YFXS0NJJJ/S+zOmPP4Krz4qprY6tJTqDW2vG1CtwyEo=)
                          5: lKDuxfpv6g9ZDhVaa38VKaYZKKg.roa (hash: OVK0az1AcO1NBXsdKgGXvtFiE3weIknB+sCCAuqYuGw=)
                          6: xXN1JERl6SmTU8LGAK6YjCsE_8g.roa (hash: UJ/2eCVna1OAdfj1e6cD3/kAVB2y1kYmD/HxfsrIilw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:80:6d:96:6e:ac:e0:bd:00:88:36:59:4e:7d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91f5fcedbdb84dd52fc6770d7ccfd3fc6684fa41
        Validity
            Not Before: Jan 31 18:00:30 2025 GMT
            Not After : Feb  1 18:00:30 2025 GMT
        Subject: CN=ba62cb7a5a682653a426dc5fe7579f1b2fc7e5dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:19:a1:2a:42:26:63:5e:14:a1:97:54:f3:
                    d8:ee:cf:9c:65:00:e0:b9:6a:9f:39:e7:62:38:98:
                    cc:2f:d2:01:0a:a0:dd:6f:4d:f3:62:b6:3d:68:47:
                    61:c2:cd:8b:c9:f5:7c:29:84:ff:c9:67:f6:b5:d2:
                    30:ce:47:52:2f:ae:37:47:11:99:0d:73:9a:2d:f0:
                    7f:b1:b2:fc:d2:29:e2:69:cf:81:2d:f6:3a:58:61:
                    6d:e6:5b:0f:8f:23:af:df:0b:dc:65:91:2a:b8:2f:
                    4a:bf:1c:5e:9e:3c:2b:8a:75:06:60:0a:bf:63:c0:
                    7f:d7:7c:3a:d9:00:b5:5c:06:40:c2:62:97:dc:25:
                    14:9c:ee:93:e2:6a:31:e5:9f:f0:ba:08:c6:d1:ba:
                    f8:e1:64:ce:18:0f:2f:75:e0:9c:b5:5b:f6:b7:f6:
                    15:2f:27:89:87:01:b7:57:bc:1c:24:33:ae:d3:61:
                    76:6b:6c:bd:ac:9e:b0:ac:06:af:c1:32:64:55:0d:
                    9f:65:d8:93:b8:07:76:7b:b8:5a:ff:db:9b:5a:a5:
                    26:59:7e:9d:1b:02:23:b9:54:32:ae:9e:bc:0d:0c:
                    6c:0f:ba:ba:fc:31:d7:36:34:cb:94:11:7d:4e:2f:
                    7b:01:63:26:40:01:33:5e:c6:a7:c0:f3:a0:d6:b1:
                    3f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:62:CB:7A:5A:68:26:53:A4:26:DC:5F:E7:57:9F:1B:2F:C7:E5:DD
            X509v3 Authority Key Identifier:
                keyid:91:F5:FC:ED:BD:B8:4D:D5:2F:C6:77:0D:7C:CF:D3:FC:66:84:FA:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kfX87b24TdUvxncNfM_T_GaE-kE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/9a0981-0ad8-48a5-bfec-8cc9833611e6/1/kfX87b24TdUvxncNfM_T_GaE-kE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:2c:09:39:e4:32:f4:7d:af:0a:87:b8:78:ac:49:13:ae:9f:
         de:24:e0:93:5d:fd:d1:64:05:86:27:bf:39:8c:bb:4d:a6:46:
         ee:5a:9b:8a:b9:2c:37:27:92:83:8d:a0:2b:d1:ba:90:fc:44:
         b1:0d:97:ef:9c:c4:d9:d7:5c:51:8b:b2:2b:c4:12:94:4a:f1:
         14:af:fa:2d:04:82:0f:c3:f9:62:27:ab:3d:ce:a2:7f:f3:5b:
         63:b7:bf:4d:46:7d:6d:7b:f3:3e:6b:c0:92:90:33:c6:f6:96:
         6b:8a:c8:03:f2:4b:bc:9d:ee:f0:0c:05:a2:fb:cd:39:25:49:
         15:19:1b:58:ad:3b:38:5c:06:1a:07:02:36:5e:2b:01:96:b7:
         c5:0b:5c:7e:10:d8:a6:36:14:21:78:06:7f:fd:a4:58:b2:0a:
         31:60:36:48:aa:af:15:22:95:53:be:5b:b0:18:c0:63:8a:92:
         d9:49:e2:c0:47:98:ba:51:0d:5f:bc:27:8c:f5:ad:b1:e8:9e:
         db:0c:4c:b8:8d:dc:e1:b2:8f:7c:6c:46:64:69:17:71:e0:2e:
         47:3e:4a:59:a3:6a:5a:39:fc:b3:5f:bc:6a:29:cd:5a:45:66:
         a8:ab:ff:8f:3d:86:c8:8e:74:e6:f1:ec:92:37:d1:1d:3a:08:
         5c:d8:bb:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----