Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
File:                     fDw50YmeaZv1F3QY7jgUie3_Q4A.mft (raw, json)
Hash identifier:          Z29CnzSopDuW6P81BfFxV4URtlt+u4CiB3YxpyHDndM=
Subject key identifier:   46:97:3B:CD:AF:B3:E6:DE:FD:C5:56:54:89:C1:B6:79:E5:2F:FB:B5
Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80
Certificate issuer:       /CN=7c3c39d1899e699bf5177418ee381489edff4380
Certificate serial:       0194BC7297C1AD0BADAF65BF5EEC2C24B65C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft
Manifest number:          1448
Signing time:             Fri 31 Jan 2025 13:00:14 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:14 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:14 +0000
Files and hashes:         1: 3UEtPfriipiMbZa6fhwdY3QYuQU.roa (hash: zafMtM+qwE9a62Lg/QOalLMv3c0V/Ie0I/pDVfmKXPw=)
                          2: AUeNVV_SMqPqEs2O5iHSxh3g7yA.roa (hash: vOpHeopsXYOn149WlJN/AUCpTvQWlIuD3VGR6QfDGQc=)
                          3: acwxUWbdpUsqhVn5F3e7J-KWE_s.roa (hash: k6IT6xJnQ84kL4p0G7+fu3bTiBrlku3nIpx+yEYBw0M=)
                          4: fDw50YmeaZv1F3QY7jgUie3_Q4A.crl (hash: iZaTAePAMpNbVzGsQVGiV6ifP1AtVkSFcJ+WgRM8eew=)
                          5: gz-qnMUscMazyhnaaxMqBrKn5m4.roa (hash: fpQhmRYSa6NMfhZ0IQvQ/7dM75+CyzF1R1dwJsHdzfM=)
                          6: iu7nkMMloLMO4qPNzRbpLkYcyro.roa (hash: 4ANkfNKLh7Z2wCwDamCSoeryHoHgG5FlZVn0i1JfMb0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:97:c1:ad:0b:ad:af:65:bf:5e:ec:2c:24:b6:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380
        Validity
            Not Before: Jan 31 13:00:14 2025 GMT
            Not After : Feb  1 13:00:14 2025 GMT
        Subject: CN=46973bcdafb3e6defdc5565489c1b679e52ffbb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:c6:c9:b6:b8:3a:a1:61:de:96:f8:d9:b6:
                    c1:5e:32:c2:17:4c:61:35:d9:43:04:f8:ac:13:62:
                    e1:f5:99:dd:31:fa:11:c0:e8:31:a3:53:d0:17:c7:
                    00:9e:20:87:22:c2:5a:f7:3b:44:99:d5:8d:0d:de:
                    d3:a5:77:7a:5a:5d:22:1b:c9:ac:fa:6b:ef:ca:8d:
                    f0:3f:79:c8:38:e0:16:87:80:65:3d:9d:4b:5b:42:
                    84:9c:95:f8:ab:81:64:74:2c:58:21:82:cf:d2:a3:
                    28:6e:3e:b2:9f:4b:02:56:12:c3:99:f1:81:7d:34:
                    5d:53:4e:95:5a:90:51:bb:ce:45:91:43:72:2f:51:
                    3a:0f:8a:9c:04:6d:6b:f2:26:a8:14:ef:45:96:9a:
                    31:06:c2:b9:76:c8:8f:f0:25:8d:c9:ce:22:38:78:
                    55:34:c6:7a:08:db:55:18:9c:8e:ef:70:bf:cf:b6:
                    b2:2a:a6:f8:26:4b:38:60:36:cc:14:52:63:af:d1:
                    82:1d:35:8d:e1:3f:4e:10:a0:b9:33:25:11:54:97:
                    f4:c2:39:b4:1c:41:92:00:7c:44:8a:b4:34:10:1a:
                    c9:a4:f7:f1:c1:13:f1:9c:77:09:13:e3:d6:37:d1:
                    26:df:d9:43:44:c7:fb:f5:62:da:51:3c:6e:03:08:
                    99:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:97:3B:CD:AF:B3:E6:DE:FD:C5:56:54:89:C1:B6:79:E5:2F:FB:B5
            X509v3 Authority Key Identifier:
                keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:84:0d:bb:cb:60:7f:de:9a:c4:3c:e3:85:be:56:28:55:fb:
         e6:34:44:a4:ab:73:ae:5b:da:a2:c1:a3:d9:74:79:c8:f0:ab:
         94:80:73:a3:c6:f8:84:92:5a:28:7d:f5:dd:94:8d:71:13:1d:
         ea:85:78:14:4a:87:8a:c9:28:58:9b:8f:94:8f:0d:ed:d5:4f:
         8b:a6:04:13:04:e7:5e:7b:33:71:1b:85:bf:60:de:02:3c:00:
         3b:ce:86:3d:84:70:f0:bb:ca:21:04:ab:74:a0:12:4f:96:53:
         d0:91:56:09:1a:1e:8e:6e:b6:74:d4:ed:8d:eb:62:46:f5:f8:
         61:65:05:f2:39:b0:05:d0:de:79:0b:67:fb:04:a3:1f:1b:d4:
         16:15:f1:2f:38:22:67:41:dc:20:df:64:2e:13:a1:4b:b3:54:
         6b:5a:a6:d0:14:3d:70:c0:09:29:9b:a7:89:3c:f1:b0:0f:86:
         85:97:18:11:f8:f5:26:a8:de:70:28:11:20:bc:53:1e:c6:bd:
         b4:fb:f1:70:38:18:bb:99:c7:6d:25:9e:40:e7:d9:81:e7:46:
         2b:35:11:28:48:6e:08:66:8e:74:8c:0a:c5:15:01:17:14:12:
         96:b6:82:84:6e:a9:68:f5:e8:8c:2a:42:71:b9:9c:2e:de:8f:
         f3:d0:a0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----