Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
File:                     Glyq86CZO3auE-EZE22_AGlpiRE.mft (raw, json)
Hash identifier:          252eCxui80vnnLhmjV6iS1vNe1Q4+AHSlAH3gX0QoYA=
Subject key identifier:   E9:2C:96:17:20:40:FD:BF:81:7B:5D:D4:35:98:E8:98:95:1E:09:D0
Authority key identifier: 1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11
Certificate issuer:       /CN=1a5caaf3a0993b76ae13e119136dbf0069698911
Certificate serial:       0194BC3C1B6A3A35460377F5F13E397C7C4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft
Manifest number:          056C
Signing time:             Fri 31 Jan 2025 12:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:43 +0000
Files and hashes:         1: 01hxjCh_nvh6suIkW5jDT7FQ5wY.roa (hash: 4bkvBLwedWb76MBEvCC/C6c3YY5NjD8WJrDif149Vao=)
                          2: Glyq86CZO3auE-EZE22_AGlpiRE.crl (hash: QeK/I60+H2TCU4r1JMgsvEJtqXgCXE1D/+qJlGzxaI4=)
                          3: Qy-saNY8_sMM2Rt7ltQaOCM03mI.roa (hash: DmhtR0W/L8xjpyQ+jiNUqtRwA+94a2kvp+LpXXuTce4=)
                          4: vAu0TRUZ6oCOaUrWzBzbupAQywk.roa (hash: eqD14NcTM0qEFrT33cP0ZL7pYdg/PAWVbM43E+i0ncU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:1b:6a:3a:35:46:03:77:f5:f1:3e:39:7c:7c:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a5caaf3a0993b76ae13e119136dbf0069698911
        Validity
            Not Before: Jan 31 12:00:43 2025 GMT
            Not After : Feb  1 12:00:43 2025 GMT
        Subject: CN=e92c96172040fdbf817b5dd43598e898951e09d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:66:66:46:86:9d:b4:2f:cf:ae:71:72:ff:9c:
                    57:a3:18:ea:be:3e:29:b9:33:f7:f5:4a:8a:db:bd:
                    39:4d:39:aa:e0:28:10:2e:47:96:d7:14:6d:25:49:
                    21:e9:8b:95:40:eb:c1:3b:60:fd:d3:b3:ee:ea:f4:
                    1a:f0:c7:15:e2:75:40:ea:28:9d:e4:82:2c:d1:1a:
                    a1:06:10:88:37:b9:1a:39:a1:5e:73:08:2f:bc:fc:
                    1f:52:a5:47:46:75:d5:62:55:ec:01:d7:7e:ee:b0:
                    fe:72:01:eb:34:78:a8:9e:b1:72:ae:23:0e:13:f5:
                    44:40:50:8d:9e:b3:05:39:6d:73:40:3a:ee:53:03:
                    a0:59:e0:9b:92:2d:31:9a:5c:86:df:53:d1:e6:1b:
                    54:12:d0:8c:93:b6:84:88:4c:33:4a:e1:20:b5:91:
                    d6:62:f5:cf:6f:3a:5b:59:7d:66:7c:14:f3:6e:f9:
                    cd:a7:ed:5d:ea:ee:93:02:a4:ff:bb:e2:02:fe:92:
                    c7:37:a6:ab:83:40:89:45:c2:69:ae:3c:1c:7b:61:
                    22:0f:c6:19:3d:38:67:88:af:a0:ba:17:5d:09:04:
                    eb:cc:13:97:36:f8:4f:bf:df:57:5e:89:36:5d:82:
                    b5:6c:93:24:d7:cf:bb:82:3f:08:b9:f5:59:80:79:
                    70:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2C:96:17:20:40:FD:BF:81:7B:5D:D4:35:98:E8:98:95:1E:09:D0
            X509v3 Authority Key Identifier:
                keyid:1A:5C:AA:F3:A0:99:3B:76:AE:13:E1:19:13:6D:BF:00:69:69:89:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Glyq86CZO3auE-EZE22_AGlpiRE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/47/94cdb2-9399-450b-a82e-7c590bcf981a/1/Glyq86CZO3auE-EZE22_AGlpiRE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:17:b3:92:57:0d:c1:f9:ab:ef:81:79:2a:72:62:82:20:2a:
         1f:59:4a:ac:88:6c:93:f9:c1:8a:7d:2e:35:01:e8:e9:29:4f:
         73:b1:00:7b:09:c1:44:8c:62:42:aa:87:f5:8f:3e:a3:c6:e4:
         cb:11:f7:bb:d4:50:a7:e5:38:6e:a8:46:0d:7f:9f:39:a1:d3:
         ac:0c:27:49:87:25:15:b4:c3:c0:42:f4:d4:4e:b9:f2:57:f0:
         c7:a6:f1:37:0b:c8:53:39:0c:66:72:53:54:6e:16:03:cd:c8:
         3e:01:bc:51:b6:5e:f9:be:a1:9a:b4:bb:06:7a:9c:fd:4a:08:
         47:9e:ac:76:5f:a5:3e:c6:40:b0:33:da:86:be:3a:1e:ab:74:
         cb:c8:7c:91:51:4a:8c:05:f9:39:a1:3a:55:c1:d8:8c:c2:68:
         22:11:e7:b4:3b:5b:4b:38:68:43:e7:ea:cf:b4:12:67:94:a6:
         d9:b8:be:11:e0:33:9f:75:03:38:28:da:e8:68:2a:b7:b7:14:
         90:fa:1f:fb:c5:39:bc:d3:f6:2d:43:4b:8f:a3:ab:f9:54:e7:
         79:9e:30:7f:16:2d:0a:03:0f:e9:ac:ee:ea:3e:44:df:f5:8e:
         71:c5:ce:bf:76:e1:da:a8:3a:8f:81:43:92:ea:bf:a7:fb:c9:
         f2:68:6c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----