Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
File:                     3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft (raw, json)
Hash identifier:          C9yYTf+6Is1WG4PLGf6T9G3bzHJkMKV3joDYd6nFD/o=
Subject key identifier:   23:85:06:B4:BB:8E:DC:8D:2F:73:6E:2F:BE:A7:8C:AB:DD:96:C0:E1
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Certificate issuer:       /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial:       0194BCA9AFF5FB66287F6B51E2E7D822DBDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
Manifest number:          10FE
Signing time:             Fri 31 Jan 2025 14:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:24 +0000
Files and hashes:         1: 2VevK0HBk8qY35gQ5UtjfqrB3nY.roa (hash: AmV1BLqc7vTs/6UGFEgRF0w9AuqYNGKRtxRFQd+4rZ8=)
                          2: 3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl (hash: xSEje5Io2e2MyG+m72mqhcpKiSE2zno6fsglsNmGyjo=)
                          3: 5vHG0OxzvrqhI56hWt2APxlEca8.roa (hash: bzsGlpjOWPgo9xk0iMmmEBroNlHWE3HqNZ6pialCu6g=)
                          4: gr8V9GG2sn3v6HXV22VsNMEvx-4.roa (hash: sigWijBONNzFo5YlkJnYB4sz+kl8GULVAa+gCk4rEkg=)
                          5: v3bh2N4thqCv2jw1YX5PjUcZEd0.roa (hash: nIfMLuntg2xncQRj0ShSY9tFssqvjsfpfyRvdL0VSvM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:af:f5:fb:66:28:7f:6b:51:e2:e7:d8:22:db:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
        Validity
            Not Before: Jan 31 14:00:24 2025 GMT
            Not After : Feb  1 14:00:24 2025 GMT
        Subject: CN=238506b4bb8edc8d2f736e2fbea78cabdd96c0e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:23:f4:30:db:3a:a6:4c:f4:ab:a7:46:c6:2e:
                    7e:71:07:b3:48:95:26:f1:79:35:e8:e9:36:19:29:
                    9a:4c:1a:92:d6:ff:5b:ee:a0:f9:9e:28:fa:6b:48:
                    d0:ab:64:b4:39:27:ca:a4:c0:bf:fb:45:f8:52:13:
                    57:08:96:09:9d:3a:05:bd:c5:46:14:ca:f5:23:ac:
                    86:aa:c2:76:c5:f3:ac:8c:0e:d1:79:be:a3:e3:7f:
                    bb:37:1a:ba:44:6d:ec:a2:f8:70:02:89:97:53:2c:
                    c0:ac:02:ca:c6:18:02:f0:b3:ca:b2:1f:41:e8:77:
                    85:a1:30:7c:9f:7e:9e:b1:62:7d:f9:3c:9f:94:16:
                    50:ca:bf:62:9d:59:db:6f:6a:16:de:92:0f:d9:22:
                    b7:a2:76:1d:d5:8d:c1:02:7f:f5:bf:2e:2a:3e:c8:
                    d1:a5:95:2b:ea:d4:39:ed:08:13:84:ae:7f:57:f1:
                    a9:9a:97:28:8b:46:a8:77:0d:6c:c8:83:dc:ac:1b:
                    53:1a:c0:c3:34:61:07:51:13:c1:97:d4:04:a6:b6:
                    53:f7:f3:84:28:6b:84:25:70:0a:52:69:bc:51:dd:
                    3e:55:e3:d0:aa:33:4e:a7:82:0b:26:e8:e5:d7:65:
                    e2:a5:b5:b6:e1:37:47:60:06:f7:36:14:b2:b6:f3:
                    9d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:85:06:B4:BB:8E:DC:8D:2F:73:6E:2F:BE:A7:8C:AB:DD:96:C0:E1
            X509v3 Authority Key Identifier:
                keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:03:41:5c:f7:e1:43:85:e2:90:2c:63:c6:9a:18:24:d3:11:
         c0:f3:7f:c3:5e:54:c4:77:80:f9:1d:d5:69:28:67:6e:c9:22:
         3c:8e:d0:5d:28:6a:c8:26:a2:72:25:dc:51:3d:c0:bd:91:f3:
         ab:19:ad:5b:11:c1:ac:3b:c5:d0:1f:12:7c:08:92:45:ea:74:
         21:cd:58:e9:92:05:11:7a:18:cf:26:67:5b:41:46:69:f1:2b:
         a5:4f:94:10:47:41:18:46:a9:b9:27:19:dc:85:25:e8:54:ad:
         69:d4:b4:eb:6d:0e:3d:04:58:fe:97:0a:a7:28:0d:75:6c:ad:
         a9:1f:4b:e5:f0:2d:d7:c8:e4:ac:4b:73:b2:f4:c1:30:84:9e:
         4a:47:9c:7b:56:92:81:4b:50:fc:d1:5c:ad:92:97:7c:df:84:
         8e:00:4d:ac:d5:4c:c0:03:b3:ae:24:f6:ec:83:ed:ee:7d:7a:
         3d:ca:a4:4c:c9:c6:b2:d6:55:2c:d0:3a:f3:18:34:99:e0:e2:
         5b:dc:0b:66:64:d2:5b:ca:5c:12:4d:b2:12:fe:68:cb:eb:46:
         0b:6f:39:70:d3:5f:44:22:7f:05:6c:af:21:33:db:80:e6:a4:
         07:1f:64:57:a7:6b:b3:5b:67:ed:45:a4:94:bb:8e:1c:21:7f:
         a5:ef:63:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----