Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
File:                     d2-uQ_c9o1_houQpZirguRdR4_s.mft (raw, json)
Hash identifier:          tt5Q+DelJB16NhzlT4+nK139qPZ9VR8VFVk9W4oB9Ww=
Subject key identifier:   B9:87:D7:F0:AA:CD:47:4E:BA:B1:93:FF:97:C3:78:75:38:BA:B0:4F
Authority key identifier: 77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB
Certificate issuer:       /CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
Certificate serial:       0194BCA99F7181948236C478F0B98AF7BD75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft
Manifest number:          114F
Signing time:             Fri 31 Jan 2025 14:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:20 +0000
Files and hashes:         1: BIbyN6MobH1STyCEPdXKcXxO-0I.roa (hash: Os4l0m9oxr0hmnuszsL7ZwnRaiayTTQWv9r3AFurnXg=)
                          2: Bbz0bBQb7OvBUdzdUU2fR0aTHW0.roa (hash: oXnG95uJE4GWCusPMitN/8TOoOTM8j2qb4pX4QMQ5u0=)
                          3: bdDCotOAfO1kv_FK4imM3A-Vth0.roa (hash: SflKXIddgIp/qAd1Zs2morymiezh6i6wy0uu+gUqlSk=)
                          4: d2-uQ_c9o1_houQpZirguRdR4_s.crl (hash: 9qTVBP5AkwDFhnKDycrGxg/A6o1pxad8KcXyx95ibQo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:9f:71:81:94:82:36:c4:78:f0:b9:8a:f7:bd:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=776fae43f73da35fe1a2e429662ae0b91751e3fb
        Validity
            Not Before: Jan 31 14:00:20 2025 GMT
            Not After : Feb  1 14:00:20 2025 GMT
        Subject: CN=b987d7f0aacd474ebab193ff97c3787538bab04f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b3:01:e4:f0:25:9c:91:dd:2e:99:73:55:9b:
                    4e:05:4e:44:47:e9:c1:46:5f:38:21:a4:c9:f8:83:
                    a4:ca:11:88:5b:88:61:68:1b:e6:c6:53:70:bc:f7:
                    cd:eb:ac:69:b9:0a:5a:92:af:fc:43:e3:ad:d9:ef:
                    f8:a3:3f:49:4f:ad:a5:3a:f3:94:2e:2b:bf:be:bc:
                    16:3c:84:29:c1:20:4b:77:20:4e:dc:d0:48:03:dc:
                    55:76:07:82:38:95:4d:ba:60:13:73:3d:6a:d7:fd:
                    dd:4b:88:01:02:3a:e4:15:3a:4e:97:ac:e5:91:c4:
                    6c:f7:a3:42:a2:ca:c0:80:8e:6e:42:aa:aa:18:9e:
                    ff:dc:05:12:67:a0:1a:bb:65:8f:c7:35:a2:cf:8e:
                    0c:c8:bc:ad:c2:b1:b0:e9:d1:05:60:f3:89:20:b6:
                    c2:00:14:c1:3d:c0:22:42:4a:d4:cf:85:f8:0e:e9:
                    f0:75:9f:3b:29:76:c5:18:83:a0:49:31:88:8a:ee:
                    e4:5d:38:eb:3a:e8:e8:ec:8d:55:6c:8b:e1:a4:21:
                    b9:b7:81:a6:26:cb:df:e7:e4:a4:68:27:27:c7:2f:
                    50:82:98:ce:b2:80:07:cb:9a:76:fa:67:c6:d3:4c:
                    6c:32:9a:26:ca:b5:5b:92:97:b8:f2:a2:8c:fe:17:
                    e8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:87:D7:F0:AA:CD:47:4E:BA:B1:93:FF:97:C3:78:75:38:BA:B0:4F
            X509v3 Authority Key Identifier:
                keyid:77:6F:AE:43:F7:3D:A3:5F:E1:A2:E4:29:66:2A:E0:B9:17:51:E3:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2-uQ_c9o1_houQpZirguRdR4_s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0acf2d-5d62-43f3-8d14-4e0cc58163b0/1/d2-uQ_c9o1_houQpZirguRdR4_s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:b4:52:92:90:93:4d:7b:cf:b7:97:f1:fa:b1:3a:f9:4c:0f:
         c9:a4:f7:85:19:4f:c1:e8:13:b6:40:9a:e0:31:9d:fd:b2:18:
         e9:09:a0:50:f1:86:13:eb:c5:12:2a:46:5c:a6:90:60:c4:0f:
         92:85:ea:e8:ff:da:f1:fe:fc:8b:fc:65:6b:f0:31:bf:36:62:
         db:3f:36:a1:96:c0:ef:62:ff:f9:77:03:b8:df:3a:ec:c2:07:
         fe:25:c5:00:7a:84:50:dd:1e:a6:e6:89:92:7f:17:51:30:16:
         ba:82:c7:8c:9a:14:71:31:d3:03:d6:a3:25:26:0e:2a:1d:9f:
         91:28:12:d6:c2:a2:23:bd:5c:34:b7:53:ce:48:f6:42:25:67:
         b3:97:10:32:32:cd:1c:09:8f:90:fb:2a:35:2b:dd:67:ae:bb:
         4a:1b:1b:44:6c:4b:10:0d:6f:37:86:9c:d2:48:be:1b:47:19:
         6a:35:53:e5:87:d7:ab:59:4b:b7:72:f3:ee:77:42:c3:08:cc:
         9b:ed:97:e0:e9:dd:68:55:57:e2:94:c8:16:0c:2e:f2:02:d1:
         4b:1f:6f:00:c0:bd:87:2e:dd:a5:16:c5:56:5d:e8:ba:1a:56:
         30:0d:db:30:c5:6e:c1:f8:71:6b:cf:61:97:83:09:66:00:49:
         93:65:c6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----