Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft
File:                     1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft (raw, json)
Hash identifier:          wcto0JKb+M8AMYRll+2FC3Y/xOXDK1Z8n9XXhpSvQSk=
Subject key identifier:   CB:F0:D3:AC:BA:39:BD:49:CE:99:92:0A:CB:AF:97:5F:AE:20:3F:6B
Authority key identifier: D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC
Certificate issuer:       /CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
Certificate serial:       0194BBCEBA596A3E9FB106089D9F7089E22B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft
Manifest number:          1148
Signing time:             Fri 31 Jan 2025 10:01:14 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:14 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:14 +0000
Files and hashes:         1: 1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl (hash: MaiW8QYV/ir4aW7lStHzC/J0803usHXspiKoA9bxWTA=)
                          2: 7bkiaxj1mJyn5f4KlBTJLur42vQ.roa (hash: roAqW3cn2LtovgFslg2PIXk4GMEbNrgZKpv5sOiiSXE=)
                          3: ZDtb6VK_z3ewy6AjomuVHbdGB9A.roa (hash: A+fMJqKL65CjFiSFdF9jXOzQklOA0P7AbHo2uxd2CEY=)
                          4: mEGQsBNEE6R4v2nvqd09POEfynA.roa (hash: lk6cIpuyIvmnE5ZP8kUz8Ag2VnywuJlr74x0buev+f8=)
                          5: pbC0h4-ZQBAU6ItrChfkOJ1ZY10.roa (hash: PH8eMe1Sc0Ex/e3D9TFvy3te90ULqyE7p3IjYiFbYKY=)
                          6: rKizpanRwBJzijXvx7bJn1rhw_o.roa (hash: 5muARz3AtNkaEYoR9PPKe6ZNmmAul/betoVV1PW2+3g=)
                          7: s1Pt-54WEyVmli6rDAOg5exksLI.roa (hash: +qBfOcJX2O/bn+twU2P+RzeeUC9ErPq85SULjl0hJS8=)
                          8: tvRSeXQrAZZAT29yjtZ_7KQawB4.roa (hash: hpP1eRenYzQA7QTMLizhwWDHvaoDIHsy9V8YHR+DYto=)
                          9: vTxpWsq09BWKUrPdlE-R7slfYvE.roa (hash: stVMdMmGc0TbKwRIFj7GhH7rI1l5EwcJOw+4r3qAf4I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:ba:59:6a:3e:9f:b1:06:08:9d:9f:70:89:e2:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d49922ca8d139a4d03d6d57cbc8177dc05feb9ec
        Validity
            Not Before: Jan 31 10:01:14 2025 GMT
            Not After : Feb  1 10:01:14 2025 GMT
        Subject: CN=cbf0d3acba39bd49ce99920acbaf975fae203f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:58:bf:08:d1:e9:a5:f4:32:04:c4:d0:f9:37:
                    9e:b9:0c:9a:f9:a0:b4:e0:3c:13:c6:22:85:9a:4d:
                    3f:b8:16:79:0a:1c:55:8f:5b:f3:8b:5d:92:03:33:
                    01:9e:3d:9d:80:fb:95:73:b7:f4:60:05:a3:00:37:
                    4f:df:fc:de:cf:1d:b5:b8:7c:c2:1a:99:d9:e4:a1:
                    a2:b7:df:2e:5b:db:64:05:41:09:5e:02:99:5d:6b:
                    e8:00:b6:80:8a:50:12:4b:07:3a:f6:8f:03:34:ea:
                    6f:44:2d:68:91:f5:35:40:c7:32:9f:91:1f:1c:3f:
                    8d:11:bd:8e:3f:f3:50:39:66:17:21:d0:c3:fe:48:
                    ee:91:54:8b:a1:ef:12:1d:0e:cf:eb:9c:23:75:6e:
                    c1:3f:e9:60:14:23:37:3d:7c:53:fd:3d:9e:f2:f7:
                    0b:cb:96:1d:98:18:39:d6:4a:eb:3d:f9:ce:fa:ff:
                    c9:13:41:8f:45:5c:a1:46:b5:0d:53:6f:f3:fc:3a:
                    e9:f2:0e:32:3c:39:b1:03:b5:b8:dd:b4:e7:05:d9:
                    a0:63:47:61:6e:9b:1c:8e:54:81:b0:bd:1a:0f:a4:
                    c8:2b:b9:53:68:b4:94:0a:77:73:cb:d9:cb:59:ca:
                    17:8f:19:c1:c6:b8:7a:7a:3e:77:6b:60:9c:f9:e6:
                    4d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:F0:D3:AC:BA:39:BD:49:CE:99:92:0A:CB:AF:97:5F:AE:20:3F:6B
            X509v3 Authority Key Identifier:
                keyid:D4:99:22:CA:8D:13:9A:4D:03:D6:D5:7C:BC:81:77:DC:05:FE:B9:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Jkiyo0Tmk0D1tV8vIF33AX-uew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/5cecc0-2a53-4500-85ae-e8b60a2dd6b4/1/1Jkiyo0Tmk0D1tV8vIF33AX-uew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6d:11:c8:c0:82:82:bc:25:b7:5c:20:ee:5a:fe:79:01:ca:
         9e:53:eb:fb:de:54:7d:63:fd:9b:1e:3b:22:2a:c2:ee:21:51:
         5a:33:3e:ec:fd:b2:e7:9f:42:91:a6:1f:7a:20:11:cc:d5:6b:
         f1:d9:80:1b:37:64:df:fd:73:7e:18:b1:9c:8a:8d:ab:e7:ba:
         44:f3:54:78:d6:33:f0:ff:fe:70:cf:d7:71:8f:07:23:34:9b:
         9c:8d:e9:71:b7:9e:d9:79:0b:b4:b1:2d:e6:de:46:f5:4d:22:
         89:dd:6a:2f:5c:31:07:c4:3d:ad:c9:e1:21:2e:d8:46:bc:af:
         99:bf:ae:6c:22:8b:2a:ba:f5:d7:f6:b3:25:0d:af:89:68:5a:
         e3:97:64:5f:00:c7:d6:a4:2a:b7:96:b1:73:c4:a0:24:60:01:
         7c:5a:95:b8:f0:b4:fb:e7:95:9a:cb:63:7a:ff:72:57:20:b0:
         e1:52:e7:10:3d:a2:84:cb:d1:3d:43:05:fe:1c:7c:9a:32:56:
         6b:02:7a:ce:d0:88:2a:11:d8:ed:42:6d:e0:ab:1e:9a:52:33:
         76:d9:03:84:d5:74:e6:75:41:d4:9b:9f:3e:80:92:5a:1e:e9:
         1a:e5:8e:a8:a9:ad:47:31:5a:89:35:39:cf:d5:5c:79:5d:9b:
         00:38:fe:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----