Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
File:                     oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft (raw, json)
Hash identifier:          ym8GmQEeW5KQpuhH0FWUFLmQgYinleSTYUJimtL2lf0=
Subject key identifier:   CF:EF:7F:F8:D6:1D:96:7E:C7:EC:59:0E:AF:D1:7E:F4:E8:FC:E3:F0
Authority key identifier: A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5
Certificate issuer:       /CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
Certificate serial:       0194BCA9D7117E27BEA217DC47B6B9A399AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 14:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:34 +0000
Files and hashes:         1: QkZZT0OmyPm1U7sUIDpJIndlAn4.roa (hash: 2DQZexpqRbr1zDWnxxG0byMVlPhiUoCIJC9UgWimgPI=)
                          2: T8KLOt6NPvQjdduRK2LFDHFk-Ow.roa (hash: dmD7G0wa7KStRC2oIGcFu5FuaJHoaquq+ceiOTM5mGE=)
                          3: oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl (hash: 4wwu9j923Oiuk/pBB8Q1+fmNmQRN8yqY7Uw1pI3FzPw=)
                          4: uE6sCBGadbkdNjamuV9CVt7KEu0.roa (hash: 1QH+0Q+M4LSSW1D1mW+DBLCOYwkL6R7teXBJDnbRr5c=)
                          5: yQrnhCAAVRdNwjOPjF1ErzWjUdw.roa (hash: wlIPSP/dxpPek11XcClQXG8X5S1Ifs5kIcm9YTpY8Rk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:d7:11:7e:27:be:a2:17:dc:47:b6:b9:a3:99:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a0afe1fed1f2b7db24a0c2d1f61010684e93cbd5
        Validity
            Not Before: Jan 31 14:00:34 2025 GMT
            Not After : Feb  1 14:00:34 2025 GMT
        Subject: CN=cfef7ff8d61d967ec7ec590eafd17ef4e8fce3f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fc:11:80:86:85:98:30:d5:69:d7:db:96:e9:
                    b2:a9:2f:48:4a:79:1d:d2:64:c8:6f:bb:d6:d6:00:
                    78:06:6b:96:1c:66:6e:9d:ba:01:b1:d0:85:22:3a:
                    a8:10:ca:a2:01:dd:a8:9c:97:54:4c:a2:52:bd:4b:
                    d0:25:f3:30:84:b3:cf:91:2d:b8:48:6b:d7:5c:d3:
                    43:1f:22:21:99:12:10:34:cc:fe:e7:d9:d6:48:29:
                    0d:e6:75:81:e1:c3:bb:ce:fe:03:75:42:93:51:91:
                    04:c5:c8:d9:24:58:54:78:c4:76:c5:68:f2:eb:04:
                    ce:c4:f8:25:fa:90:89:b1:02:a5:3a:fe:5b:93:3e:
                    0a:4e:c1:57:70:73:cd:55:00:6f:79:f2:e4:5e:e7:
                    38:ca:65:bb:3e:5c:78:9d:11:22:4a:34:df:65:ee:
                    94:71:b0:17:57:5b:3f:fe:cc:8e:53:5d:1c:e0:f1:
                    0e:c0:3b:50:b8:c9:df:ee:07:93:94:c1:11:1f:75:
                    58:e6:c7:d3:d9:cb:d6:61:bb:c0:67:c3:9d:fe:4d:
                    f4:85:2b:df:c5:19:ef:28:08:9c:a7:a0:ce:86:b8:
                    c2:b4:8e:82:94:ff:d0:a5:ec:8a:12:40:e9:21:a2:
                    60:3c:bc:20:c9:ff:5a:e6:8b:6b:46:87:52:b9:0a:
                    35:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:EF:7F:F8:D6:1D:96:7E:C7:EC:59:0E:AF:D1:7E:F4:E8:FC:E3:F0
            X509v3 Authority Key Identifier:
                keyid:A0:AF:E1:FE:D1:F2:B7:DB:24:A0:C2:D1:F6:10:10:68:4E:93:CB:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oK_h_tHyt9skoMLR9hAQaE6Ty9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3202ad-7b46-422d-a4d2-eca53a7f7762/1/oK_h_tHyt9skoMLR9hAQaE6Ty9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:72:da:8e:1e:d9:9f:07:79:6b:3a:73:9f:87:16:0a:a3:a8:
         58:9c:b7:35:79:7a:0e:f8:31:f4:f1:b3:b0:4c:03:9d:5a:78:
         d9:4b:7b:7f:2c:af:85:ad:20:bd:97:5f:2e:48:21:81:f1:6e:
         91:5b:ef:a9:e5:f0:7a:e6:cd:89:39:fa:40:67:d3:45:8e:3e:
         f0:44:9f:1f:26:23:d1:9b:c3:c5:14:c3:18:10:c6:98:1f:08:
         ec:d9:c1:4e:33:ef:52:ad:44:18:38:b1:47:d1:dc:b0:15:62:
         9c:79:e9:56:43:88:af:6b:3a:07:91:5e:4e:f9:f8:22:03:c3:
         3c:08:85:4c:cd:ee:5d:df:41:86:a8:c1:f2:1e:63:1d:b5:0c:
         17:75:67:cd:0c:3c:22:69:62:67:35:5e:b3:41:65:22:44:6d:
         d5:fd:41:15:06:29:39:d8:18:95:8e:f7:f9:4f:07:e4:65:5c:
         42:f8:20:17:29:7a:e8:ae:50:22:7b:41:0b:94:a8:85:b5:ed:
         aa:91:b6:9a:16:23:5c:88:fe:cc:10:f1:a1:cd:26:49:28:03:
         b2:62:33:ff:6a:d4:5a:49:f6:ba:79:84:7e:60:37:6a:5c:b4:
         e4:c5:bd:cc:7e:ef:ec:2a:8e:ce:98:1c:8f:c1:63:87:ad:25:
         98:51:59:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----