Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
File:                     AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft (raw, json)
Hash identifier:          OTYMJ+mBRBYQ+lVqJolWslzkAZBFSXUUtkD9TbqQ2aA=
Subject key identifier:   99:6B:A4:36:54:EF:6F:E2:F2:25:C4:D3:DC:2F:20:E8:E4:7D:2D:16
Authority key identifier: 01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34
Certificate issuer:       /CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
Certificate serial:       0194BC727E14BD45F4172E5D3B3A495681C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft
Manifest number:          1449
Signing time:             Fri 31 Jan 2025 13:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:07 +0000
Files and hashes:         1: 42hpqWqY72USafsvfiD_518D4aY.roa (hash: XyqSHkNb93lXjMdBQV3tT6d41VyHCZFCyukyVX/G7/A=)
                          2: AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl (hash: 7drYWJIyeJl6lkmWVCcRV25wQ5nMTTQRF58nFT/nU+o=)
                          3: B_3pca4XmmEyoD7_YWQ5xsaTGlA.roa (hash: n5M6+Js+wLuWN3HaqVwvyZeizy4tawLMu5EBkNvd9Nw=)
                          4: GNcGFP48VRO_QOUxz3CvJSh90oA.roa (hash: 9T1HgBLEzXKt2GaC2y8FBctN+punw/ln3V52HLktRUQ=)
                          5: IC2VX1jV_Dwi9TgKflm59IYMQeg.roa (hash: 4Tq4DinpdRGqkwFnGKnQe2ovlPCcyDT8nlsjtJqn5tw=)
                          6: g9Hs1uIFeelsIxcu9-JFATbg5r0.roa (hash: i1uLdd6dy3tsCAr6HgKPaDpJNpr4x+g5kpnEdrNnrzs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:7e:14:bd:45:f4:17:2e:5d:3b:3a:49:56:81:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01f3ef3e0ea95a975537d5c25d93cb76af687234
        Validity
            Not Before: Jan 31 13:00:07 2025 GMT
            Not After : Feb  1 13:00:07 2025 GMT
        Subject: CN=996ba43654ef6fe2f225c4d3dc2f20e8e47d2d16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:20:43:ac:a9:0b:ca:04:33:bd:4b:46:a4:4b:
                    a4:a6:ed:62:65:ad:34:12:ac:bc:a4:c8:4f:fd:ca:
                    83:62:70:96:b2:02:6c:d6:1e:ec:10:9c:04:bc:f1:
                    71:9b:ae:4e:6f:2c:c3:0c:54:29:c5:b7:34:71:dd:
                    ec:c0:fd:de:76:5a:df:31:ae:6e:37:98:d3:e4:62:
                    49:a5:76:fb:dd:86:95:e4:90:b0:07:60:0e:57:32:
                    ba:12:85:7d:89:2b:b0:0c:ac:6a:c8:db:7f:db:37:
                    92:60:d8:e3:ac:40:c6:ec:05:e7:8c:f8:78:18:39:
                    50:f4:d7:63:e0:85:bd:7b:d6:21:4b:75:74:65:4b:
                    e5:52:23:f9:90:6c:ff:14:e9:f4:c0:23:37:0d:99:
                    d8:23:9e:49:f7:c2:aa:6a:e6:f5:4f:b8:aa:0d:a4:
                    d9:cb:b7:41:71:39:cb:cf:b4:59:02:bd:13:c6:de:
                    b5:56:76:93:ee:25:3d:58:5b:cd:52:10:43:f1:cb:
                    28:86:de:c0:78:c9:7b:90:f7:1e:e4:1a:3f:22:89:
                    06:b9:35:61:36:e4:55:a3:a2:36:95:ef:da:68:1d:
                    55:b1:cf:d7:9a:68:cc:15:78:72:3e:ab:65:fa:04:
                    98:5b:75:a9:66:d2:0c:e3:46:1f:1f:20:f5:94:ba:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:6B:A4:36:54:EF:6F:E2:F2:25:C4:D3:DC:2F:20:E8:E4:7D:2D:16
            X509v3 Authority Key Identifier:
                keyid:01:F3:EF:3E:0E:A9:5A:97:55:37:D5:C2:5D:93:CB:76:AF:68:72:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8417a0-0777-446e-97e1-353b3a633ada/1/AfPvPg6pWpdVN9XCXZPLdq9ocjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:4a:54:e6:37:ba:11:38:a7:a9:e1:b5:db:4b:16:bc:e7:54:
         a2:6d:a9:3d:fa:9d:70:7d:96:4c:07:bb:6c:86:c9:46:7c:46:
         91:21:78:07:d0:db:c5:cc:9b:d5:9a:b0:1a:0e:9c:fb:3b:48:
         fe:21:fa:6b:36:61:dc:1f:3c:f2:af:96:b8:e4:cc:33:ff:20:
         1d:90:99:91:26:4e:83:a3:6b:40:e9:58:31:69:42:58:57:18:
         f0:8e:c2:7e:d4:5b:86:82:6f:73:4f:1c:54:87:6f:42:cb:da:
         15:55:a7:ca:d1:a1:9b:71:82:6f:89:42:d3:d9:ad:cf:eb:dc:
         74:0b:d0:76:81:59:55:82:a3:68:dd:f4:a2:6b:e1:49:81:a6:
         b0:08:7a:70:f7:b2:be:6a:71:bf:88:f0:11:91:a0:fe:82:b4:
         79:7e:71:83:2c:9e:90:5e:4f:5a:13:b5:f0:d1:5b:f6:4f:60:
         2b:13:cf:61:55:b9:da:e0:14:bc:e2:7d:38:24:45:b0:ad:ba:
         3f:0b:45:1e:97:5c:48:3a:fa:64:cf:73:96:6c:1e:48:fb:6e:
         25:3b:df:4a:f9:d1:bf:0a:fb:95:da:5d:c8:6c:41:df:24:1f:
         b6:24:4b:d0:6d:51:cd:2c:d9:61:e2:b3:db:62:19:e0:f5:bd:
         71:87:05:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----