Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
File:                     1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft (raw, json)
Hash identifier:          ywKr5vrl5NMhWX6iv97ON8Lhlrbn8FfWBNupgY/iaTo=
Subject key identifier:   06:7B:C6:DE:D4:1E:48:7E:4A:49:F0:90:17:82:A0:E7:EC:BC:BA:B4
Authority key identifier: FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B
Certificate issuer:       /CN=fad7100e77ed9119d66e2321bb6711d7e760982b
Certificate serial:       0194BCE05A4696344CE5C0DEA14C9D9DF537
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 15:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:07 +0000
Files and hashes:         1: 1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl (hash: ZJ0/LlOzkt93g9O+t3ta1SzsNK6S3wj1+UJRqwcazAQ=)
                          2: 3fenuBwvB7wV3uASD-r_76wX2Qk.roa (hash: a5u8qqHNJ/g2qfpTOvTXK85cODmIHay31MoapuJ0tsI=)
                          3: NeK3VE5xIVumcURQvZORGSezPug.roa (hash: Kyuhso1DU/JY4Cd8KqltzS/UkVVtl7rIX1KuhxLgmkQ=)
                          4: SAShV7Cx-3cRFcPWPoHPU7seh9k.roa (hash: lzRGc/kfVkESt27Rk5Rm2MTThTLX4bNiPJvrX6OzG4s=)
                          5: TWLMxWYadUOjpfWSoRjdz4gkQVQ.roa (hash: eJJWCwgtvt1cLj2rlNHb1YuUwHOAuKtSsp+SGbWPUGI=)
                          6: U2YIuXAyUCZOsR4Cw5PSPdwaU0s.roa (hash: gWdVxjtR19wt31Bo3G5JO46Z63mY8LolhR8kTQQgD5Q=)
                          7: WvZhz4-xli7Jg3AjUEb09s8yIcg.roa (hash: nyDmjCwaWeBGV6O57JlcDsH1rd4TtVrk7nDHN+GYZDc=)
                          8: kSLVwGt_NyDYhkUM69fkyKqLKhE.roa (hash: 4uQpl4b7ipDKF9oMjr4f401/xIMAMkUuha8dHxAMb/k=)
                          9: mDRyfngxgYL9lEVKzyAkCQzkYsA.roa (hash: Md6fZymUQHzfcYJLAnblEk5P1I8XxKhta5Tqwb60pgA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:5a:46:96:34:4c:e5:c0:de:a1:4c:9d:9d:f5:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fad7100e77ed9119d66e2321bb6711d7e760982b
        Validity
            Not Before: Jan 31 15:00:07 2025 GMT
            Not After : Feb  1 15:00:07 2025 GMT
        Subject: CN=067bc6ded41e487e4a49f0901782a0e7ecbcbab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d5:ca:7f:81:ce:1d:34:6c:95:e7:e7:64:83:
                    d3:e8:4e:cd:da:dd:bc:2f:6d:84:8c:e2:90:d0:07:
                    82:ac:66:e9:4d:18:ae:54:5a:42:e9:60:fc:9f:d1:
                    9a:5e:b5:53:c1:a4:cf:06:5f:9b:ea:e8:9e:f5:83:
                    fc:9d:6b:fa:84:e6:87:44:aa:48:51:9a:14:27:96:
                    19:ac:32:7f:8f:c1:51:d1:e0:dc:6b:cc:d7:cb:ad:
                    51:7d:0b:e1:7d:db:76:ab:56:b2:f6:55:87:87:bb:
                    0e:d5:61:3a:80:a3:31:df:6c:b4:3b:e9:52:8f:51:
                    91:fd:04:5e:d8:ef:ec:e7:b9:1d:a7:a7:86:8f:b0:
                    a1:94:6f:02:ae:87:4b:b6:32:7b:75:ba:c2:12:fa:
                    23:17:7f:1b:f0:03:25:25:e1:43:a3:e0:d0:d0:bd:
                    cf:4c:7e:ee:9a:94:0c:4f:ef:59:7d:5b:92:d7:78:
                    f5:d0:b2:ba:68:5d:9f:2c:04:e7:3a:61:0d:97:f4:
                    d8:a2:90:5a:d3:be:f6:17:57:1c:c5:ee:ba:84:46:
                    49:d4:aa:d1:1f:67:bc:36:ff:2f:3f:9e:9d:50:c2:
                    10:c7:68:15:2d:b1:0e:39:9b:1f:17:8e:f1:e3:43:
                    3f:0f:63:a1:a5:44:ca:7d:9b:47:6e:c2:11:ef:b1:
                    54:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7B:C6:DE:D4:1E:48:7E:4A:49:F0:90:17:82:A0:E7:EC:BC:BA:B4
            X509v3 Authority Key Identifier:
                keyid:FA:D7:10:0E:77:ED:91:19:D6:6E:23:21:BB:67:11:D7:E7:60:98:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-tcQDnftkRnWbiMhu2cR1-dgmCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/01d411-d915-4277-8fe2-76b0dda2bf3e/1/1-tcQDnftkRnWbiMhu2cR1-dgmCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:0c:d3:a7:0d:ea:ad:c6:02:4d:26:f1:11:e1:27:18:88:1d:
         29:de:14:1e:f0:76:c2:b2:69:f0:c5:bb:e5:ec:8b:f2:83:02:
         01:77:c3:49:2b:d2:f4:40:fa:fc:2b:4a:c2:1a:9f:aa:30:fa:
         c5:c9:ce:6a:33:3a:28:6e:c2:99:e4:d9:8d:d3:97:94:2e:d0:
         f6:30:97:d5:23:8f:85:dc:17:77:5b:16:ce:d2:0a:79:7d:ab:
         9b:00:ac:f3:e0:0d:db:9a:e7:89:65:62:a1:5e:2c:9e:65:10:
         a9:79:6f:00:70:04:be:93:3f:d8:ea:fa:30:42:0b:fb:ca:2f:
         44:4c:3c:cf:61:e1:71:69:65:10:3b:e2:47:67:f0:c0:07:74:
         65:b2:b4:ad:1c:4a:a3:2c:73:35:65:5f:38:49:45:cd:77:36:
         ca:29:19:eb:14:e8:fc:ae:4c:7b:29:42:05:88:cb:fa:19:92:
         70:af:e0:34:c0:54:ee:89:f3:85:c1:ea:02:38:ab:ed:70:fc:
         f3:e9:61:da:6d:06:0a:29:e3:2d:d8:9b:a5:d1:33:8f:c6:e8:
         74:86:38:50:13:59:d6:53:4d:7b:e7:79:49:07:19:b6:26:3d:
         d1:6c:a2:72:d6:43:bc:78:92:5f:80:b2:11:0a:ad:d3:ae:9f:
         ae:aa:f9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----