Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
File:                     XYqf18UZJuIuqKozs7iDjpPovt0.mft (raw, json)
Hash identifier:          zzNuOmvEt5K5aTmDD6WPXdTYMF6313SZ0M2xotScdeI=
Subject key identifier:   36:CE:FB:09:CD:31:B0:1C:30:E9:80:E4:0F:57:8D:DB:8B:75:55:9B
Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
Certificate issuer:       /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Certificate serial:       0194BBCF06D9EA387D16D108EB77C92D4515
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 10:01:34 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:34 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:34 +0000
Files and hashes:         1: 0RjgNRg0mrp-p0sUPcMzw9plAa8.roa (hash: /sIoNqXyJWt95PHx7AGb8pmEwy8qEaDKsd4+c9cdNhU=)
                          2: ByhvC5UK-f2zjyXJoOZ55QYyoFY.roa (hash: 7F3UrolhPGtbR/fySIsaZ7YzGq6FNxf2q9uu01GI6C0=)
                          3: DyR2WdJX7ABSVFzMG--Y2Rw480o.roa (hash: +lC9V9G29eZ0ubABsOu96g/K8AVuHJSib8VHpmomp9Q=)
                          4: HO-WF7oHezpfwwV3wUG7AErtTlE.roa (hash: 8SO7ZYvzAB17ADVUPvCZiM0fv0nIROPrrAJMFayW82A=)
                          5: XYqf18UZJuIuqKozs7iDjpPovt0.crl (hash: g6utlok3G7/AOhgjbxbTVvFOtcV4YBvZbkaWGN5SeLU=)
                          6: xZlrXqE8pd9RbauBbqs28LHvRHA.roa (hash: 2cai0/ZfgqLeuQF0rbi62rT8qPeDCMYpSTam6ord1Vg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cf:06:d9:ea:38:7d:16:d1:08:eb:77:c9:2d:45:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
        Validity
            Not Before: Jan 31 10:01:34 2025 GMT
            Not After : Feb  1 10:01:34 2025 GMT
        Subject: CN=36cefb09cd31b01c30e980e40f578ddb8b75559b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:70:83:02:cd:38:d1:56:21:bd:17:8c:71:
                    5c:7a:3e:93:e5:5e:f8:d9:07:6b:f4:d7:af:18:01:
                    bb:fb:d4:f3:32:7a:05:2b:34:fc:da:e5:1a:47:ad:
                    90:86:b6:a5:f3:24:9d:47:6c:b0:da:0f:3e:3f:57:
                    09:4a:c8:66:82:1e:74:91:a8:1e:a3:3b:e1:df:c1:
                    41:9b:59:d4:2b:90:9a:55:a0:54:0f:9f:48:db:ae:
                    1e:e4:53:36:17:cc:7f:a0:b5:f1:14:3c:2c:0c:c5:
                    1e:26:44:c7:d9:57:82:4a:e2:91:7b:94:37:83:94:
                    65:5e:62:f4:07:5e:4c:b5:fb:d3:b4:63:53:3e:4c:
                    18:3a:11:f7:22:06:4d:d1:63:fe:94:b9:1b:1b:de:
                    17:59:38:4c:ab:9d:4b:aa:21:d7:ee:46:f2:10:48:
                    8f:1e:c0:e2:fc:0a:67:d1:d8:d3:e2:0d:fe:bf:13:
                    12:c5:a0:e4:da:f5:79:72:69:a4:0f:05:7d:04:9f:
                    cc:ed:06:4c:ca:5a:cc:c9:53:cc:51:3c:91:f4:95:
                    97:52:67:ff:4b:ea:dd:8b:1d:3a:2a:cb:33:6c:39:
                    e5:17:42:7c:2d:de:cd:0a:eb:f1:55:34:82:3e:0e:
                    97:92:7b:eb:90:69:c8:b0:d6:d2:19:43:cd:cf:2d:
                    2a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:CE:FB:09:CD:31:B0:1C:30:E9:80:E4:0F:57:8D:DB:8B:75:55:9B
            X509v3 Authority Key Identifier:
                keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:09:2f:d3:d1:26:de:c3:e5:af:6f:9e:a8:d0:0a:68:d0:4a:
         59:78:42:db:c5:45:a1:8e:1f:ae:bb:7b:34:12:71:f3:db:fd:
         c1:e6:4a:61:53:24:1c:91:41:41:57:55:37:ee:ca:e7:fb:c3:
         29:9f:8c:c0:2d:34:8e:79:38:03:25:86:75:14:84:6c:84:16:
         11:52:37:88:c9:0c:a8:a9:bb:02:cc:fb:70:bd:69:3e:58:8d:
         2a:b6:ea:0d:6b:32:92:33:7b:c2:f9:78:50:b7:4f:b5:01:98:
         ce:c3:c1:62:39:64:7f:be:8f:3b:e9:94:a3:ec:1a:c3:ec:db:
         ea:c1:fe:6b:31:21:78:5d:18:4d:d9:56:f7:cb:88:35:64:11:
         86:19:a1:e5:ec:ad:07:0b:d0:95:b1:a1:9e:3d:09:ff:ee:e3:
         d5:6f:8c:e2:cd:34:d1:14:15:26:01:fb:a6:2e:57:69:f4:ad:
         00:96:54:f0:ba:46:56:5c:6d:41:5c:2e:b2:12:43:e2:2f:eb:
         54:b8:34:55:c8:1b:0c:0b:c1:2b:d8:bf:91:e6:30:49:31:6f:
         50:47:ba:8c:de:4a:3e:44:a2:de:09:53:e5:e1:96:24:17:70:
         20:2b:dd:8c:69:9a:95:96:54:32:5a:f7:6f:cc:25:27:5d:d0:
         bf:29:b7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----