Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft
File:                     93QnJYYrkL2kUQoC6AT-860RQtw.mft (raw, json)
Hash identifier:          z/wbyj3OrchVtJ5NAjbOVX/rPtz6pedpYAmofG1DOds=
Subject key identifier:   EE:F9:DC:A3:BE:EF:5D:B4:B3:70:29:9B:6D:6C:08:8B:14:4A:AE:19
Authority key identifier: F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC
Certificate issuer:       /CN=f7742725862b90bda4510a02e804fef3ad1142dc
Certificate serial:       0194BBCE196C15997F234133B3971ABA82B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 10:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:33 +0000
Files and hashes:         1: 4l2SdYqRsWw1Dk6UbRmpiphQbzs.roa (hash: 7zhBmWshcVx2YPgcfMNIybRxMDlVE/wBUohnRkB+ivQ=)
                          2: 93QnJYYrkL2kUQoC6AT-860RQtw.crl (hash: zVWsqXs4LSH9heL6CWzlrqfSEBhkJfJvc2wOMaUNnQo=)
                          3: MBPuW0pCdoE27mcTarwCxJOcl0Q.roa (hash: YEUs/arUcZV/nic4XPWhvdmwMlBlDW7ohpW4jTH5q/0=)
                          4: dpObP3s4Eqe9wi_vu_EEzcThWpQ.roa (hash: NHvLjXCF4TN/3v6KfZ74ieQjWaZi6N8hN7TgIQgZa00=)
                          5: eWaWhd41MCwWzpBDWAZrpJOP8-Y.roa (hash: LRzDWqlekWiXipOXvEsZHcHb0hr7sMlO30lOBYzQlnA=)
                          6: kNm6ddrvxozowyByoQF78uhJgYE.roa (hash: RwT/hXh1MfTD8gmNW+o+TVC0jUdT6l112GMG0VUSGVA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:19:6c:15:99:7f:23:41:33:b3:97:1a:ba:82:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7742725862b90bda4510a02e804fef3ad1142dc
        Validity
            Not Before: Jan 31 10:00:33 2025 GMT
            Not After : Feb  1 10:00:33 2025 GMT
        Subject: CN=eef9dca3beef5db4b370299b6d6c088b144aae19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b6:91:76:88:c0:a2:5f:be:61:04:b0:4a:fe:
                    28:ca:a9:30:2c:fe:e0:20:79:41:50:db:c6:20:47:
                    5c:19:f9:56:84:7d:6a:de:e6:c6:eb:88:e0:67:4f:
                    8b:17:9c:10:07:b8:a9:1b:ed:89:2a:96:3e:28:8c:
                    ce:50:3a:95:03:29:58:78:bc:9b:de:87:01:37:e8:
                    42:20:79:93:3c:ea:ee:fa:04:b2:98:a2:8e:a0:23:
                    2d:39:cf:ab:7f:42:5b:c3:03:a5:1a:b2:71:fb:4f:
                    ef:66:3f:17:2f:93:94:a1:05:a3:79:ed:95:c4:ce:
                    30:8e:fb:c9:55:07:2f:d1:db:65:6e:3f:72:8a:5f:
                    b9:91:fe:61:a1:7f:8d:7a:23:4c:e1:4c:d5:9c:e9:
                    84:e7:a9:32:19:63:6d:ad:24:c2:88:ea:56:dc:af:
                    d6:d9:71:84:47:9c:b3:aa:3a:f9:c8:7f:05:48:10:
                    ea:e8:88:15:8a:69:d9:8c:69:e9:fb:7d:27:26:d1:
                    3d:e1:17:e8:e3:c4:88:59:e0:74:df:c0:8a:25:eb:
                    65:36:72:2b:7e:e8:d4:48:26:18:68:13:23:03:ee:
                    d9:cf:cf:21:72:8a:84:bf:3e:a5:ab:60:9a:b6:ca:
                    6b:a4:54:62:1c:53:d5:4e:60:af:c1:b8:c3:8a:cc:
                    29:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F9:DC:A3:BE:EF:5D:B4:B3:70:29:9B:6D:6C:08:8B:14:4A:AE:19
            X509v3 Authority Key Identifier:
                keyid:F7:74:27:25:86:2B:90:BD:A4:51:0A:02:E8:04:FE:F3:AD:11:42:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93QnJYYrkL2kUQoC6AT-860RQtw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8e7e30-c2b8-4591-8cfe-7b8e9d335ca8/1/93QnJYYrkL2kUQoC6AT-860RQtw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:3c:79:31:a4:07:50:24:16:3d:66:81:2d:ca:8e:77:72:b0:
         c2:be:b7:b3:91:01:b8:47:73:dc:05:f0:61:ad:63:fc:58:48:
         de:9a:17:96:26:9e:8b:ec:61:89:6c:8d:3c:e7:8e:49:f4:a8:
         2c:de:57:c8:ee:6b:17:8c:6e:0a:01:0c:4c:dc:b2:1a:51:81:
         45:78:27:b9:41:be:00:ad:e9:19:a2:6f:fc:15:db:35:1d:5b:
         f7:f2:ac:9d:09:42:52:38:74:a7:7c:5e:95:db:ff:0f:8d:94:
         9b:dd:ed:a8:08:72:d6:e4:05:38:ad:fa:2b:15:c4:1c:6a:fb:
         f5:99:55:ee:72:ca:1f:1b:34:a4:a6:ef:4a:10:03:52:b8:9a:
         e7:93:cc:79:e5:8a:0c:34:a8:5f:f4:44:b8:d5:93:a7:b6:09:
         bd:5c:48:00:d4:7a:df:0c:0c:e6:24:8b:d4:3c:61:85:a2:8e:
         91:4c:41:cc:0d:40:f5:f0:32:50:65:8b:89:f8:d1:a8:88:fc:
         60:2b:1d:a3:6c:95:45:96:43:ef:35:6a:72:5b:ae:6a:f1:c1:
         25:6e:29:f4:8e:71:8b:ef:be:6a:fb:34:c2:d1:ef:53:81:f8:
         00:17:65:d2:04:49:fe:66:5b:2f:e8:b2:57:2c:17:19:8c:1c:
         65:30:fa:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----