Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
File:                     oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft (raw, json)
Hash identifier:          37ESwLkOTZN4PIboUR3/1SjkgX4QFDRQVP8ozFSumn8=
Subject key identifier:   DB:32:0B:06:28:B0:D5:4F:A3:E0:5B:47:4B:DF:AE:91:E6:7D:29:6F
Authority key identifier: A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46
Certificate issuer:       /CN=a122d6d21bd04c46224653a49be029e3c024b846
Certificate serial:       0194BC04DA630A473C8A366C5DC3EED64837
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft
Manifest number:          31
Signing time:             Fri 31 Jan 2025 11:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:22 +0000
Files and hashes:         1: 73l6mao4jRS_RJRUh0ajw125Q_Y.roa (hash: +O0mgrDDfqxs0iz8xR/eYRDp4FK45YfRNKPU5QYOCJM=)
                          2: O7dEuQCjSO8z6ONj5fHjP6nhUXE.roa (hash: uHw+P79UCgqlSxBDAzyTEVikBPvI0LRf7VeAKKpBa/o=)
                          3: nTg06Xuaoov5emPDb5qo0AhHcXI.roa (hash: sxM+tjocIPeu4DOdcT+0o31NCC6XWsc08As8H8WQbTc=)
                          4: oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl (hash: KejAp975H6i7U3AwlhWHBbrgIex56aoa6mbM37Ue2Lk=)
                          5: zx5oIGQrEHv9J1zJn6EJymvmEUg.roa (hash: coYA5lF4ZkHZzi2SpC6YHuzHIjdXi3lTTu4MIli9GNA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:da:63:0a:47:3c:8a:36:6c:5d:c3:ee:d6:48:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a122d6d21bd04c46224653a49be029e3c024b846
        Validity
            Not Before: Jan 31 11:00:22 2025 GMT
            Not After : Feb  1 11:00:22 2025 GMT
        Subject: CN=db320b0628b0d54fa3e05b474bdfae91e67d296f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:03:78:21:b8:e4:16:9c:74:b4:61:27:d2:4a:
                    a1:92:db:94:7e:e1:b7:0f:95:3c:9f:3e:e9:da:08:
                    19:ab:0d:ca:31:3a:3f:c6:e5:8d:b0:4d:ef:19:c6:
                    1e:f8:29:cb:6d:89:75:27:2c:0e:b4:28:70:4e:a0:
                    4e:b1:dc:7d:eb:4c:32:e0:28:c5:1c:92:14:2e:f7:
                    d0:05:39:8b:3d:33:ff:9e:44:22:e9:47:54:95:fa:
                    fb:74:74:d0:35:a8:db:35:5d:7f:db:10:1a:58:0d:
                    65:a8:e8:ce:a2:a4:65:4f:6b:d2:0b:a7:55:e2:04:
                    e2:20:78:4b:44:0b:80:1a:7e:3c:a8:33:8b:87:c1:
                    bc:de:0e:ee:41:dc:80:11:06:8a:7a:f8:4f:7a:f9:
                    3c:01:59:db:74:6b:76:66:5c:30:25:a0:de:77:e3:
                    0f:99:48:99:5a:29:1a:ec:b4:b8:e6:45:a1:89:4a:
                    35:f0:bf:7e:9e:ee:ad:a1:c6:bf:bb:54:29:e3:97:
                    46:e6:e5:eb:14:ef:6c:17:df:52:b7:16:e4:38:46:
                    fa:77:4b:59:ac:d3:0b:a3:5f:e9:69:ef:75:2a:49:
                    52:df:31:84:90:a5:77:ba:4a:c4:5b:8d:a9:ed:3f:
                    e3:5b:28:3d:b5:b6:ba:fc:0d:35:bc:90:a3:67:93:
                    56:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:32:0B:06:28:B0:D5:4F:A3:E0:5B:47:4B:DF:AE:91:E6:7D:29:6F
            X509v3 Authority Key Identifier:
                keyid:A1:22:D6:D2:1B:D0:4C:46:22:46:53:A4:9B:E0:29:E3:C0:24:B8:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oSLW0hvQTEYiRlOkm-Ap48AkuEY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/048afc-d2cc-4e33-8607-5f251a03fa2b/1/oSLW0hvQTEYiRlOkm-Ap48AkuEY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:ad:e2:66:32:e2:d1:45:86:ba:1a:af:aa:b8:7e:9c:83:13:
         8c:bd:a3:26:b5:6b:4c:a3:4d:71:9b:11:5b:62:1f:04:c0:30:
         13:c7:86:eb:16:63:96:40:7a:3b:fd:cf:65:d3:32:30:88:06:
         10:9b:1a:5f:43:38:f1:6d:49:fc:3a:0e:cb:a9:5d:04:76:50:
         23:70:4d:96:15:9f:2a:02:8a:67:3f:80:23:4e:23:1b:4a:53:
         39:db:fc:90:f8:3e:11:05:df:62:4f:b9:f1:a4:b9:da:da:4e:
         b9:7f:d0:68:19:ac:08:38:c8:1e:91:0a:fb:aa:df:e5:67:21:
         fd:07:2f:78:4d:b4:f1:88:f6:63:87:e6:46:c8:1d:ef:9f:74:
         68:5b:61:18:f6:13:5f:0d:59:55:1b:05:21:34:4d:c2:6c:76:
         45:f4:a2:78:f4:67:49:37:10:1c:f2:d0:b2:2a:d0:2f:0d:f9:
         f7:1f:18:51:f8:ba:11:13:1d:78:6e:7a:05:b0:c0:6c:21:7d:
         05:df:21:34:08:d2:81:c4:2e:1e:f1:94:bf:7f:be:62:10:cf:
         71:1e:90:56:91:4f:2b:e4:e0:dd:6a:99:f5:55:6a:e0:ab:70:
         ba:5f:46:62:95:dc:98:02:ae:52:7a:5e:04:13:57:b8:bd:b4:
         fd:ed:05:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----