Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
File:                     DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft (raw, json)
Hash identifier:          pYV9bodkKWpxj2L37m8W+KBWbxpnqqCqpIeT3GtcP08=
Subject key identifier:   F6:54:34:D0:E0:2A:A7:1D:D9:5B:7A:28:6D:32:58:75:6E:AD:1E:31
Authority key identifier: 0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E
Certificate issuer:       /CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
Certificate serial:       0194BD4EA3F9B88F8C1ED2B5D0709D394255
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft
Manifest number:          1437
Signing time:             Fri 31 Jan 2025 17:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:35 +0000
Files and hashes:         1: 2IV1bBm-jP-2jVh24cTBD-F_aCY.roa (hash: LoxyFwAORqX/gMob6dkhVaBmKh5ZSU1hWQKi2nkbQgw=)
                          2: DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl (hash: CNZFVpQnmmS3Z8W0dB3eRbomK2ZmcP9jfdd7tjvl3Pk=)
                          3: _kjDn_DDtqJjlLfr15JCrlUsBs4.roa (hash: jybSc3mz+ll60aex4A0Ja+eXAtAJqeCFAGm8sC/emcE=)
                          4: hJ65MMDojFDsHhCTcDOo1v7Rf3A.roa (hash: dQwJBW4cKzk1hx9pc72XUta4ephdfERO34h+ezvshhM=)
                          5: uqUylZbw2V7XHMMPlt0smOkdOBE.roa (hash: 3G9ODJS5eJVlImugW9SB7DFrUNhhTxGc7u4YCGLBIF4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:a3:f9:b8:8f:8c:1e:d2:b5:d0:70:9d:39:42:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ce1308ead6adb1d085e7e5910a0cb2de56aa32e
        Validity
            Not Before: Jan 31 17:00:35 2025 GMT
            Not After : Feb  1 17:00:35 2025 GMT
        Subject: CN=f65434d0e02aa71dd95b7a286d3258756ead1e31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:2c:d1:09:b2:11:d4:6c:e1:a2:a5:38:9c:18:
                    dd:4b:2f:15:58:43:33:7d:39:07:b5:71:7f:7d:3c:
                    d5:9d:85:77:fa:40:d5:52:1c:ea:c7:ea:dd:bf:20:
                    5c:46:38:fa:25:bf:29:19:43:a7:f0:78:94:3a:55:
                    23:84:4e:3b:bb:bb:a5:24:bd:7d:45:a3:f7:c3:32:
                    b6:95:8d:77:33:26:2a:da:d0:13:93:15:3d:1e:b9:
                    d2:25:0c:bc:f6:84:6c:8a:5c:7d:76:ec:d9:99:a1:
                    98:8f:8d:99:cd:6b:9b:57:7b:9e:3f:7c:78:50:fc:
                    af:82:40:31:86:d0:92:fb:a0:64:cd:ac:49:95:ae:
                    03:f1:27:87:aa:80:7c:99:de:b9:eb:88:c9:61:03:
                    cc:77:d3:41:71:d9:a7:ef:5a:a9:04:da:f6:94:88:
                    ac:e6:15:18:99:ca:e8:71:04:77:5d:12:24:e6:06:
                    1d:9a:43:a5:91:7b:ee:b5:4a:23:18:b8:22:74:26:
                    c1:13:5a:7c:e0:c0:64:e3:83:a7:ad:dd:97:ce:e5:
                    65:ce:f7:a7:47:fe:6c:0e:3c:8d:34:82:ee:46:54:
                    1a:d3:8f:18:1d:0a:bb:21:0f:b6:38:5c:9f:4c:48:
                    b9:aa:5e:b8:ac:9b:2b:71:62:c3:0a:48:00:68:f6:
                    9a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:54:34:D0:E0:2A:A7:1D:D9:5B:7A:28:6D:32:58:75:6E:AD:1E:31
            X509v3 Authority Key Identifier:
                keyid:0C:E1:30:8E:AD:6A:DB:1D:08:5E:7E:59:10:A0:CB:2D:E5:6A:A3:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/899380-ad27-44eb-8c2e-b0bad18f02d0/1/DOEwjq1q2x0IXn5ZEKDLLeVqoy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:19:6f:f0:2f:8b:d0:5e:05:c6:5a:67:17:b6:a6:05:ba:47:
         44:42:a6:a0:68:98:2d:9c:f9:9b:2a:df:ef:a4:fd:6f:08:6a:
         0d:8f:45:0c:c5:1a:a6:4d:f5:ee:f5:cc:2d:2f:41:e7:50:64:
         00:23:6c:f8:83:93:2d:fd:e6:4f:82:a9:01:ec:de:88:c1:cb:
         75:34:42:83:87:c3:38:67:9e:9d:b9:8f:82:e6:64:38:a4:b8:
         f7:94:7f:55:cd:0e:50:c8:d5:73:45:b1:7f:ae:25:18:b3:8e:
         15:e9:eb:60:8a:5d:94:da:c2:54:77:b6:0c:17:d7:77:31:a5:
         30:62:a5:46:0c:9c:10:73:cb:26:fd:d8:81:f1:13:42:b9:7f:
         95:a3:79:1d:54:2e:0f:5d:75:bb:53:f4:b2:f2:4d:47:24:72:
         a6:b3:aa:57:79:80:1a:f9:75:dd:6e:1c:df:09:e3:51:13:36:
         44:e4:31:a4:d7:d2:0d:7e:4a:46:9c:61:36:63:2e:eb:5e:b2:
         d4:a8:5d:2e:d0:00:a0:52:0b:34:17:6e:b7:47:db:9a:5e:a9:
         1c:c4:a8:44:0d:d9:5e:31:81:33:f5:b5:6a:6d:50:49:7e:cf:
         2f:ab:d5:80:84:4e:28:2e:0f:cb:8c:ee:e4:dc:73:dd:93:e3:
         65:81:50:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----