Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
File:                     vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft (raw, json)
Hash identifier:          S8bEZd8m4OKkO7ewXioRtkdN9sChb0qBX6ydHVLmiXI=
Subject key identifier:   3E:11:18:CA:63:DB:FE:02:90:D8:5E:4F:C1:83:5E:9F:07:E2:32:67
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Certificate issuer:       /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial:       0194BCA99D36A406D5D8D5557158DB1528EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
Manifest number:          0A39
Signing time:             Fri 31 Jan 2025 14:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:19 +0000
Files and hashes:         1: MlrZXY467hcKkUIRGGimefuysqw.roa (hash: 8xTFNLaI9ZUN0WOAqjHb1HCh8TndFu6MdTiusUYVPKk=)
                          2: PH8esjlGPr5XZMLNZBxjvSMMmns.roa (hash: SLv7cyYvUTE3oyGowfNA00S/oJCYt4i19Q1cbVhOESM=)
                          3: Yg6DTQFOxUODDTv6-H6dvQEVbTM.roa (hash: PJ7rQ8sF0YgySYec9mOacXXxzI2i0BkcNGpRRCBKL7I=)
                          4: vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl (hash: 6SdUJSwrAcVaHK4R0nTM6jqoq65GXxNYnMlNLFPrtC4=)
                          5: vy4QEQmpfFko8qvKIrvH3kTRn8Q.roa (hash: JR6T1NXgPEvUk1k6IDW5N+7/dwOJQQ0UovxQWbtVdiE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:9d:36:a4:06:d5:d8:d5:55:71:58:db:15:28:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
        Validity
            Not Before: Jan 31 14:00:19 2025 GMT
            Not After : Feb  1 14:00:19 2025 GMT
        Subject: CN=3e1118ca63dbfe0290d85e4fc1835e9f07e23267
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3a:91:9a:19:ae:fd:fa:63:b5:32:24:3e:4d:
                    19:93:21:82:62:1d:92:5f:0f:5c:72:ab:cc:1e:5f:
                    39:39:39:8d:17:67:1d:b0:0d:b0:f0:c3:eb:e6:87:
                    3d:a0:12:07:d5:1c:73:8e:4e:04:90:bc:83:77:ee:
                    4d:fd:4a:56:cb:42:fb:a7:84:61:8d:ba:98:c4:eb:
                    c1:44:89:4d:f0:19:79:f3:74:b1:82:30:2b:46:e5:
                    ab:65:7f:b2:65:87:95:6f:9b:56:b5:c5:9d:fd:8d:
                    07:c9:51:35:08:f4:25:80:75:5a:0d:bb:16:44:cc:
                    9b:a2:0f:12:52:8b:46:3b:30:20:04:8a:7d:57:9a:
                    48:2a:f1:80:e8:87:c8:d7:ee:96:83:cc:9c:a8:4d:
                    55:68:04:f0:a8:65:fd:9b:93:db:41:a4:b5:41:78:
                    76:1f:dc:7a:a1:fd:a1:e1:95:ce:22:cd:e6:c0:28:
                    07:9d:b0:ae:b5:94:7a:ce:53:28:8e:b3:0b:91:c9:
                    4b:cf:11:25:12:02:f5:fb:91:73:c3:b3:6b:92:1c:
                    06:a4:d1:bd:7e:4b:56:e4:1c:7c:89:bb:86:45:f9:
                    df:4e:01:6a:b3:9a:f7:1b:49:80:60:ec:2a:58:34:
                    46:62:4b:a7:a8:6f:1d:02:93:32:83:ec:9b:ea:6a:
                    22:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:11:18:CA:63:DB:FE:02:90:D8:5E:4F:C1:83:5E:9F:07:E2:32:67
            X509v3 Authority Key Identifier:
                keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:1b:d0:f3:b5:91:2c:a1:6f:27:45:ea:02:81:a2:61:fa:f9:
         48:ba:e5:b0:4b:ef:d5:81:e6:76:ab:28:d4:eb:1b:67:c5:17:
         7f:85:cd:ab:dd:d8:a7:43:7c:f3:bc:4c:a7:a8:d2:96:7d:3a:
         84:e0:ec:27:f4:3a:9d:59:27:52:02:ea:c0:8d:6b:92:36:cb:
         72:c0:ed:d8:2c:91:54:b8:49:ec:f9:68:04:dd:f4:f1:03:93:
         0e:55:1b:af:65:7f:e0:14:ba:2d:b2:a5:12:26:8e:bb:f8:8b:
         4d:d7:3c:ae:7c:8a:8e:15:a9:39:d6:fa:12:ea:67:73:38:ae:
         84:98:fe:77:e0:fa:50:55:22:2d:bd:23:c7:d6:41:8c:4d:27:
         39:e9:e5:8f:91:00:70:33:37:a9:3a:48:43:52:70:0a:64:a3:
         24:62:d9:5c:3f:ca:fb:b8:e5:64:a5:08:81:8d:16:bf:53:6f:
         c1:8a:28:0d:c8:92:cb:5a:7c:54:bd:a6:54:45:8a:8d:f8:2c:
         51:cb:db:68:cc:0b:98:67:be:de:cc:8e:bc:e7:90:48:c7:88:
         c0:4e:7d:3d:39:e7:91:6b:82:f9:ef:3c:53:82:51:22:a5:ba:
         3c:17:03:47:7c:c4:1a:3d:0f:db:4a:56:a5:62:7a:fb:4f:cf:
         fd:4b:41:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----