Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
File:                     s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft (raw, json)
Hash identifier:          lE/7PoN6//+/viY+fMZgNKEjviolVdSjjvH0QMusk68=
Subject key identifier:   8E:62:F5:5A:7E:D7:03:CA:EF:1E:E3:61:EA:AE:B3:DA:1C:C6:66:42
Authority key identifier: B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA
Certificate issuer:       /CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
Certificate serial:       0194BBCDE0F8BD1093307958F4C4463E24E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 10:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:19 +0000
Files and hashes:         1: 4t1UxScYEc1MQQvb1JnztjogsBk.roa (hash: Dr1ii5dB9TFuR2r1BRNQYvLkf66wHtEAs6oE3mutbkk=)
                          2: XvQSYP0gBwV_2W1TwyZ9q7f08x4.roa (hash: 4KSvLtvpZswpayMP+WjZ+QORjoSpSFJrnConIM4+/0A=)
                          3: l1XZX1b8reS_-7ZSCMj6Ssj_O6w.roa (hash: RmqK144BBUUebNDsDUz/Y3m99tgJ/EBiLtpE9PQVqL0=)
                          4: s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl (hash: ApmDqlDYdwrw5li4qWXkCHDpGreCvXaHfO0twnQy3y0=)
                          5: sKWAbqAA__OjcTRSqYb5uv2iH2g.roa (hash: Qi3g/XMjZpErCZOt692v0V5M83CBTDycMOtYB7JuINo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:e0:f8:bd:10:93:30:79:58:f4:c4:46:3e:24:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3d66297c5cdbd36d86849ddeae7985979f450ca
        Validity
            Not Before: Jan 31 10:00:19 2025 GMT
            Not After : Feb  1 10:00:19 2025 GMT
        Subject: CN=8e62f55a7ed703caef1ee361eaaeb3da1cc66642
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b2:d1:e5:da:49:5b:7c:43:b9:8c:b7:68:ee:
                    e4:d9:2d:bd:c2:51:5a:ac:a8:f9:c0:ee:b4:2d:09:
                    40:61:ac:a4:ab:e7:8f:5a:64:6d:33:7a:b8:02:fe:
                    43:c9:50:a5:79:12:06:ac:74:51:5d:0d:c9:7b:8d:
                    e2:1a:2e:5c:c3:f4:b4:cb:3d:10:9a:3d:89:4c:72:
                    63:25:4d:d6:c5:1a:d3:24:79:ce:87:52:37:2d:4c:
                    fa:d0:de:e2:9a:e4:47:57:56:22:fe:ef:13:3b:ba:
                    ea:ab:19:d7:d5:e2:a3:c1:75:a3:a0:60:1a:21:0f:
                    22:e1:f4:0c:52:fd:d0:32:76:f9:b4:da:be:7e:67:
                    01:91:34:40:79:2c:aa:4e:30:e7:6a:27:0d:42:93:
                    59:b7:e8:05:1f:1d:5c:55:d0:4e:6f:c3:94:52:91:
                    81:83:90:3e:b8:4b:5a:8f:f8:4b:64:05:77:4e:ec:
                    59:ff:42:26:98:4e:d5:c0:3d:20:50:10:a7:fb:75:
                    2a:a4:b4:ee:6f:4f:6c:34:df:e0:bd:12:10:77:3e:
                    be:f5:16:de:d9:2d:3d:a1:c8:ea:da:a4:9b:fa:df:
                    38:69:7b:82:1c:d8:9d:dd:3a:3d:b4:e4:f9:16:dc:
                    3f:06:48:e1:3f:a8:0f:e1:5e:a1:de:1a:57:85:ce:
                    86:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:62:F5:5A:7E:D7:03:CA:EF:1E:E3:61:EA:AE:B3:DA:1C:C6:66:42
            X509v3 Authority Key Identifier:
                keyid:B3:D6:62:97:C5:CD:BD:36:D8:68:49:DD:EA:E7:98:59:79:F4:50:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9Zil8XNvTbYaEnd6ueYWXn0UMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/92c1cf-5a22-453c-907f-eb1f8715eec0/1/s9Zil8XNvTbYaEnd6ueYWXn0UMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:65:21:4d:4d:db:68:0d:40:af:36:ec:a2:67:3b:08:ea:da:
         c9:f7:b3:67:1e:3c:90:e5:7d:3b:49:ce:fb:c3:22:5b:53:40:
         cd:30:26:eb:21:cb:72:a3:d5:02:10:4b:98:90:4f:db:0d:7e:
         bc:9f:a3:08:01:09:20:9b:e6:fc:16:a9:4f:56:8c:de:90:50:
         9a:b1:a6:32:a5:e4:d5:2c:7c:17:fb:9d:34:79:bc:b3:8f:15:
         a8:2f:1e:f7:d5:97:4a:f1:04:4f:a8:6b:a0:e0:d9:dc:e2:06:
         02:9d:0f:db:df:0c:0c:eb:38:e8:ca:f1:9e:44:8f:af:63:78:
         d1:f4:38:0c:33:b1:7c:c5:f6:e2:b5:1f:c6:67:94:ab:43:ac:
         d1:4d:b9:ee:52:5a:e5:3c:8b:f6:73:d2:0a:c7:f2:bd:03:57:
         6d:e9:2b:c6:63:62:dc:dd:ff:39:21:6a:a0:da:a1:04:e3:f2:
         41:c9:da:3e:10:63:7f:8c:d9:e5:42:a1:e6:10:25:17:db:16:
         ce:ec:51:7e:84:a7:23:54:3a:5a:bd:a2:e2:b2:72:32:83:9a:
         76:7d:52:73:2d:95:d9:01:00:36:ac:f7:a8:9f:49:35:3f:4a:
         91:f0:6c:47:55:75:67:af:d6:d1:2c:ee:86:80:b5:fb:1d:d2:
         15:f2:ab:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----