Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
File:                     II3jrRjdCuFDYtDoTewEPTecwkI.mft (raw, json)
Hash identifier:          /sZ7EHxoVagutK+885iw/o0feN1KMFBiq3PB97aVDW8=
Subject key identifier:   EA:06:12:90:36:9E:11:03:14:E0:2F:0C:93:B8:52:67:B9:08:6D:91
Authority key identifier: 20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42
Certificate issuer:       /CN=208de3ad18dd0ae14362d0e84dec043d379cc242
Certificate serial:       0194BCA9760A249F820F48A8C206010412F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 14:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:09 +0000
Files and hashes:         1: II3jrRjdCuFDYtDoTewEPTecwkI.crl (hash: GCiOnBqiwK5Idv9MnHoXQOZuYBgR6KenxyOstRhWpUk=)
                          2: Sv8c63xNahZnEUX6sxkZS1Ry2Mw.roa (hash: jrXo/rmKfJlmke1E58p0Fv3ALUTTjd9LLG6tbA+jiaw=)
                          3: V04OCx0o1Bg0TgD8MO6kNsFMhog.roa (hash: 3a02UAIxWYHpz8tUKE7mHvONTRM/Wnqwu/RQszMGhpw=)
                          4: js9oNFtAP6uoXkguET2ifOtGxFk.roa (hash: xlI8bBSGf/iOY2KLlBGfTCvLGclFsfTElrxGe6FfxvM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:76:0a:24:9f:82:0f:48:a8:c2:06:01:04:12:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208de3ad18dd0ae14362d0e84dec043d379cc242
        Validity
            Not Before: Jan 31 14:00:09 2025 GMT
            Not After : Feb  1 14:00:09 2025 GMT
        Subject: CN=ea061290369e110314e02f0c93b85267b9086d91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:80:f7:d2:13:70:e4:0c:05:67:a6:52:4a:dd:
                    8b:cf:73:11:c2:af:17:ef:2c:1b:aa:d4:50:b7:fc:
                    57:75:6d:4e:f4:37:26:9b:f2:d1:65:76:44:76:a3:
                    b6:2a:ad:12:67:36:69:67:ae:71:46:0a:f5:44:e3:
                    2a:db:46:4e:96:b6:32:f8:a0:75:02:08:a3:f0:67:
                    f0:f1:64:01:41:19:74:6f:50:65:a9:a5:31:61:ab:
                    f6:6e:20:a4:87:8b:34:11:f3:36:a1:e9:3d:51:27:
                    b1:6b:a1:94:f4:2a:75:8e:0b:b4:a1:f6:fa:96:a9:
                    6b:6d:d1:b0:44:4f:5e:7b:6f:6b:e5:07:cf:10:00:
                    11:bb:1d:c2:76:e3:24:43:2a:ce:06:34:e2:c6:65:
                    48:af:29:49:92:31:e0:ad:9b:ad:78:83:eb:43:33:
                    e8:b4:2a:32:1e:9c:d3:44:a2:9c:44:ac:96:21:b6:
                    92:8b:94:c5:c6:67:07:86:69:43:2a:c8:5c:10:12:
                    11:c5:fb:fe:82:77:b6:57:c3:0c:b1:55:c3:bc:eb:
                    70:c6:e1:9d:99:a3:40:32:4a:7d:43:15:73:44:c4:
                    c7:5b:cc:f5:ec:bb:f7:12:fa:3a:54:9e:98:33:60:
                    93:36:5e:0b:bf:37:88:b5:3b:fe:b8:51:bb:55:1e:
                    5d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:06:12:90:36:9E:11:03:14:E0:2F:0C:93:B8:52:67:B9:08:6D:91
            X509v3 Authority Key Identifier:
                keyid:20:8D:E3:AD:18:DD:0A:E1:43:62:D0:E8:4D:EC:04:3D:37:9C:C2:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II3jrRjdCuFDYtDoTewEPTecwkI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/61094a-9469-4299-89f2-bdf6e4294c2e/1/II3jrRjdCuFDYtDoTewEPTecwkI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5b:00:40:91:be:1e:c9:cf:88:86:77:fb:88:58:cd:1c:b6:
         7e:9c:9e:4b:1d:c6:62:44:de:f8:17:b6:8b:17:71:1b:23:78:
         42:f3:e9:c8:42:f4:08:2a:6d:be:9b:75:eb:e3:68:3b:af:61:
         71:72:93:e3:3f:7e:07:b8:a9:98:65:66:78:fb:45:11:2a:b3:
         ca:e5:d6:77:e9:e7:b0:de:06:d1:84:8b:39:17:3a:a3:46:a8:
         95:8f:ec:24:05:32:ea:48:5a:7c:6c:fe:05:90:54:58:7d:2f:
         a5:5f:b7:0b:76:1a:03:07:b3:15:70:79:50:a9:a9:f3:72:25:
         a9:e6:6a:ae:1f:25:c4:62:8f:56:1f:6e:e2:65:12:a8:51:75:
         4d:85:17:4d:c3:52:b2:e5:3a:27:8f:a8:fc:8e:86:bc:46:84:
         49:e1:65:f0:6c:55:78:25:63:dc:db:c5:d6:14:0d:45:76:d3:
         84:c5:a8:f8:a2:72:b4:09:8f:b4:78:19:23:4e:48:35:6d:8e:
         d2:18:04:b5:95:34:dd:bc:31:f0:6f:a9:7f:cc:c8:28:28:62:
         8e:e0:b2:d8:36:6f:ae:69:d6:5a:7b:af:20:7f:22:f8:e1:86:
         6e:6a:d6:06:1a:ff:f4:8d:37:c8:95:ff:ef:51:19:14:df:05:
         79:b9:c4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----