Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
File:                     gWaEopWOAZDycKgKmHiTGeHO5Ng.mft (raw, json)
Hash identifier:          y9rnHCmIt1KvT10oMD3UdQGD2PJBivsYHhJELV+xf4I=
Subject key identifier:   8A:9A:70:76:AC:1B:50:11:5C:FA:42:27:74:FB:EA:F0:4C:66:53:70
Authority key identifier: 81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8
Certificate issuer:       /CN=816684a2958e0190f270a80a98789319e1cee4d8
Certificate serial:       0194BBCE1D7EF6C53EFB821D96B96A83BC00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 10:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:34 +0000
Files and hashes:         1: OdWvB1tzlHuezmOiK21E-034390.roa (hash: LkUkFhkMgSy8DoAFPtShWqNO2nOGOboJ8BsC8K9ico0=)
                          2: fgZqb1eXsifotU80oWGCNeapyHo.roa (hash: tNyodLqu2MH+TIN/vy+n1/1LvfEmsJX7JG+2Qz7k9Us=)
                          3: gWaEopWOAZDycKgKmHiTGeHO5Ng.crl (hash: xF0lTmwwbKRbh8eFO0A/V9FQj6UBEkYWsNDa7smKQF4=)
                          4: rhWOdvbRW_QkUa1o5T8i6dRU720.roa (hash: v5LlEHGBOX4X3JyqUu8rErhLCU66G7I7hGMGMVexdV4=)
                          5: wF03zlYV8_r_ZZnCmj1tslqE2ZI.roa (hash: EKYSZKyX0wz37/7aJtOTH5iytiN7NBI4neSvEUBFYGY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:1d:7e:f6:c5:3e:fb:82:1d:96:b9:6a:83:bc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=816684a2958e0190f270a80a98789319e1cee4d8
        Validity
            Not Before: Jan 31 10:00:34 2025 GMT
            Not After : Feb  1 10:00:34 2025 GMT
        Subject: CN=8a9a7076ac1b50115cfa422774fbeaf04c665370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c7:b7:dc:78:0a:82:b2:b0:5b:b7:ad:ba:ec:
                    c4:50:52:69:0e:71:f2:a3:56:eb:48:33:bd:b0:af:
                    8a:3d:80:a8:29:5e:83:2b:47:31:90:da:35:45:c4:
                    2b:e7:06:77:4a:38:ae:5f:bd:1b:63:9b:a5:91:6b:
                    79:d6:4a:21:6a:f6:fb:49:93:5c:bd:cb:c0:b4:62:
                    e8:15:3d:0d:bd:7e:b4:aa:bc:6f:80:23:9b:11:cc:
                    e8:77:13:60:e3:6f:ac:3c:ac:2f:4d:35:57:1e:d1:
                    fa:cb:8f:ce:ae:e9:93:00:c3:ca:4b:f1:b2:6b:6e:
                    fd:01:33:4b:bf:6a:14:85:a3:78:11:31:c0:2a:07:
                    5b:ac:2e:59:92:6c:0e:3d:40:90:62:5a:a9:69:aa:
                    6e:dc:19:21:11:3a:75:0c:bb:e5:ad:b4:f9:4c:b2:
                    54:44:78:ba:29:b0:0c:ff:84:d7:c9:33:fb:d2:fb:
                    46:30:b0:2d:3e:2d:db:02:2a:19:67:f1:79:bd:1d:
                    e1:6f:f9:02:9e:d0:76:fc:ff:44:c8:0f:3f:ff:5c:
                    66:98:69:8b:02:c8:67:58:cd:83:f2:81:a9:60:8c:
                    18:70:f6:62:cd:d5:05:86:bf:1e:18:bf:30:56:e4:
                    2e:52:14:5d:b3:35:a5:9a:9e:ad:ca:d4:df:6d:37:
                    0f:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9A:70:76:AC:1B:50:11:5C:FA:42:27:74:FB:EA:F0:4C:66:53:70
            X509v3 Authority Key Identifier:
                keyid:81:66:84:A2:95:8E:01:90:F2:70:A8:0A:98:78:93:19:E1:CE:E4:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gWaEopWOAZDycKgKmHiTGeHO5Ng.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/1349ca-8c3c-4131-9f55-d59030661949/1/gWaEopWOAZDycKgKmHiTGeHO5Ng.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:61:2c:71:8f:44:51:95:1e:28:73:40:80:6b:e9:3c:38:d0:
         85:a2:de:82:40:6b:f2:a4:15:5e:83:08:bf:13:71:35:fe:b5:
         c1:26:3e:d9:56:26:f8:0f:3a:49:53:e9:73:86:e8:43:72:6b:
         21:8c:cc:62:c7:d6:cb:5f:34:91:f0:30:24:a6:a3:5d:af:98:
         e4:3b:1c:44:9c:39:6f:c7:5d:99:f0:6b:c7:63:ed:fd:3f:7f:
         30:4b:83:01:39:f8:9b:e3:04:ad:8a:c5:2e:e1:ab:9e:04:20:
         d6:44:4f:a7:c9:bb:b0:11:c9:d4:c8:8a:5d:67:d6:23:4c:82:
         ca:75:9f:58:b3:c0:a4:95:6a:6b:1c:1f:ef:56:1b:f0:41:00:
         ac:88:7d:4f:cf:ec:b6:bb:f1:40:36:e2:1d:33:4c:21:60:f0:
         aa:b5:12:b9:c1:49:6f:01:14:10:90:93:ac:c2:22:a5:a4:96:
         06:e9:36:60:9d:c1:2c:36:15:70:a4:62:e3:ab:c0:48:92:5a:
         27:00:9b:93:8a:65:c6:b6:27:c2:42:d5:7b:a0:99:98:42:9d:
         dc:98:6b:b8:07:fb:9d:64:dc:91:a1:2f:f6:d7:ae:99:f2:02:
         9f:c9:9b:3b:15:dc:9e:05:0b:6b:a8:a3:71:28:3c:11:32:cd:
         6d:14:39:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----