Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
File:                     vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft (raw, json)
Hash identifier:          z2vjvMLlexABFciTbG4YSKd+XssGfwYu6i+SB0IAaJg=
Subject key identifier:   95:F8:9F:D2:0C:EC:5A:83:75:42:1B:99:5A:56:4C:00:E8:E2:F1:A8
Authority key identifier: BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C
Certificate issuer:       /CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
Certificate serial:       0194BCAA1185BF297E0E96B7E1D504CDFFC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft
Manifest number:          113A
Signing time:             Fri 31 Jan 2025 14:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:49 +0000
Files and hashes:         1: 8Fk9kDKNu_wHTuVpwQ1FTDYEEUM.roa (hash: R9lk1OKBJor+p6Fk8Cm9760Y52YkNlkiK4HwLBjauEw=)
                          2: LCMzGb8KK1XAn7ueElCREh4ehR0.roa (hash: 9Gw2b+IOeGIlGw5y7XNoxgCnQ7hXETrnIXJowIYGjqA=)
                          3: LShVVLJCwZTpOQVpRu4BHXCMY5o.roa (hash: qOW5Q7zU6W8XRrp7RUj6wZmvzkpmHb4NVAohhcOeaxY=)
                          4: bmuOfACYZiZOnCTz9ES9s06c_ac.roa (hash: kxF+XBYjW7ExfLjJidwuYPma+i/t1erJy7+ooTz+eSY=)
                          5: dqSVfYV4r9M8RMZopTNsSTKHeIY.roa (hash: XrN+1wwdRwyX8n7r+VHCtW4D45jLjIPlWVhNaBZnVwQ=)
                          6: h9mNIwplN3HJblv2au9Os6COmfk.roa (hash: MUN1yxszebSMcti0G9u7TeXrwfcHsFyRaIzpQnCM9XQ=)
                          7: mUZj0w-uWUstpfqo5cH06vK19uA.roa (hash: MzyNzzDoUFyK/QZw2a/+HQPhRLTClRfb/mdHjVRhByQ=)
                          8: r0mTEa6qt-IyELm4t03iQrSQvaU.roa (hash: 5O0ZRSkH9lwLC8LUcZsdLUDFOU7u/lNlnWwcFjFATOs=)
                          9: rHoYFPQ0T9Hef-z6s-pJ7i0yyQo.roa (hash: xQJ9yww4YSKaaEyQBdYXA5up0iEVqjr/At6e2xJMUB8=)
                          10: vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl (hash: 9IovfMwB1GfIekQnjmN+M2ascBvMivzuX5iu1ax3Meo=)
                          11: vfYaTtc4brt0Ov1kx9oCUOHIJXI.roa (hash: eB+hXGbiqW76z1VHwcXpM+YfyI+lZHNYCy9KL7CJ5lM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:11:85:bf:29:7e:0e:96:b7:e1:d5:04:cd:ff:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4703e08ca0d6a310cbc643ffcb307ff6cdc65c
        Validity
            Not Before: Jan 31 14:00:49 2025 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=95f89fd20cec5a8375421b995a564c00e8e2f1a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:47:24:1b:63:db:e5:6e:ce:2f:9b:b3:f6:d1:
                    f0:26:07:a4:fc:e5:bb:b5:4e:97:1a:bc:38:9f:d2:
                    05:81:2f:d8:41:5f:a0:02:bb:ad:cc:de:1d:44:0b:
                    d5:4f:46:02:5f:15:5e:6e:3f:6c:f2:b3:53:5e:9c:
                    6e:b7:e1:e9:da:dd:e6:72:50:c0:b2:e3:28:5d:75:
                    db:d6:10:36:93:e5:53:9e:8c:21:d7:f5:ec:7f:eb:
                    7e:f3:31:66:a1:ae:a1:28:20:33:e3:be:df:ab:bd:
                    32:0d:d8:ca:2f:d3:8d:c7:e1:c5:82:a3:51:b9:82:
                    21:99:14:1b:10:1a:a8:a4:8f:4a:47:12:00:fe:93:
                    1f:e2:b0:f7:b4:8c:8e:69:b0:94:3f:37:a2:59:80:
                    bf:0b:9e:3e:df:6a:d9:a6:3a:7c:09:a6:92:38:56:
                    23:3f:af:63:09:13:7d:7b:a7:be:51:c4:29:50:68:
                    1c:b1:b8:c4:f0:80:1c:f7:29:2b:77:e6:04:f7:6e:
                    13:27:c0:97:ad:15:99:0e:65:b9:56:3d:a1:ab:59:
                    0e:e6:db:a6:e0:9f:83:98:e8:b2:30:7b:4a:89:fe:
                    f8:75:f8:4f:3e:5e:b0:69:09:87:a7:f2:e0:fc:4d:
                    6f:3d:e9:be:cb:99:47:5a:a4:73:b6:c2:f5:72:3f:
                    3f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:F8:9F:D2:0C:EC:5A:83:75:42:1B:99:5A:56:4C:00:E8:E2:F1:A8
            X509v3 Authority Key Identifier:
                keyid:BC:47:03:E0:8C:A0:D6:A3:10:CB:C6:43:FF:CB:30:7F:F6:CD:C6:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/863ba0-0476-43d7-8be7-66eda228fec7/1/vEcD4Iyg1qMQy8ZD_8swf_bNxlw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:cb:0e:38:6e:60:76:42:32:e0:ce:10:57:71:56:76:63:af:
         b0:00:0f:56:87:94:44:3e:cf:2a:8c:e1:78:78:c2:6f:2c:26:
         da:d4:d1:5e:87:a8:22:09:9f:72:14:99:c5:e0:9b:ab:7b:59:
         63:ab:30:76:8c:d4:a1:29:68:60:9c:0f:1c:b3:8a:df:b8:3f:
         be:76:78:b6:80:00:f2:9c:27:65:27:14:1d:30:12:3e:eb:d3:
         a1:d3:c1:81:8e:8f:a2:50:42:ae:cf:40:92:2d:f5:d6:ee:2e:
         b5:9c:4f:bb:ea:5e:2e:8c:e4:9e:71:6b:24:1e:fd:2d:01:3c:
         2b:80:59:96:29:2c:74:67:41:ea:d7:5b:63:e7:20:b0:d5:a5:
         50:d5:a6:19:13:62:73:6d:70:50:48:82:ec:70:fb:f5:e4:f3:
         5f:12:58:51:82:a1:38:b8:f6:b3:80:ae:d7:28:55:81:ef:52:
         d0:f0:75:2a:bf:0d:63:81:7d:4c:3c:00:94:7c:7f:a6:20:a4:
         8c:19:67:96:05:c5:89:34:1b:bf:b9:10:02:a9:c4:6e:e2:13:
         54:b8:b9:16:99:76:01:fd:2c:77:3e:64:fc:7a:05:e2:9c:0d:
         9b:71:bb:f5:85:6a:19:67:48:9a:92:25:5b:32:d4:67:82:40:
         31:59:40:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----