Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
File:                     Ja5VGvC7XXl36nP2iW8l8eyij50.mft (raw, json)
Hash identifier:          MqOXtNMPEtZtkajE3VHMDlj0wGdTlL0gfWOGMZo8n+4=
Subject key identifier:   E7:D1:98:B8:D1:2F:64:7B:09:97:61:6F:D4:4D:61:24:76:0B:CB:2B
Authority key identifier: 25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D
Certificate issuer:       /CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
Certificate serial:       0194BCA9B97AD3A120C7D262B51A51B5E422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft
Manifest number:          0F58
Signing time:             Fri 31 Jan 2025 14:00:27 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:27 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:27 +0000
Files and hashes:         1: Ja5VGvC7XXl36nP2iW8l8eyij50.crl (hash: zEetdzjO87RGExZBaNYCzWjWtgZtUFkP1Bvbik5t8xc=)
                          2: LK4TWd3KSu93MW0gFtmcBWt8flw.roa (hash: nqDel+YdRE6L57XNCBc1XqYVOxjyDCGN0EdIBVWAyjg=)
                          3: ZGBhJljS8KnY-Xp380jYPgu_YWc.roa (hash: XaigNLjbkBWceAdjZHr6JxQ6JpZUt5een+y961cXdhI=)
                          4: bVgiVwMAsGWMPapJSzgEX6Yv0OY.roa (hash: C9Nnu0E7D7ONKXVHS6awWhiPClqqVq9n0QLmZzo6AXM=)
                          5: eAGz1jdTN5EGzUs3gKQOuDwNUlM.roa (hash: SbV9Jwp6gb0UYygbvF7Pu8rOJFj6ngCnppNVj1jujp0=)
                          6: rcH7olM0Ha_Ukx8hYFCLOD1FC5E.roa (hash: R4Ngvgh5fuVLcZ/zh+Z03ttWp7anw1RKceB2P7tYlDo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:b9:7a:d3:a1:20:c7:d2:62:b5:1a:51:b5:e4:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ae551af0bb5d7977ea73f6896f25f1eca28f9d
        Validity
            Not Before: Jan 31 14:00:27 2025 GMT
            Not After : Feb  1 14:00:27 2025 GMT
        Subject: CN=e7d198b8d12f647b0997616fd44d6124760bcb2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:24:a9:87:52:d0:a1:02:19:98:52:48:e1:9b:
                    d1:94:b2:25:f2:21:78:72:48:23:d9:fc:3a:ce:82:
                    0e:9e:c9:29:1d:66:cf:fd:82:00:60:38:aa:b5:5e:
                    f8:5b:df:9d:33:68:66:30:c9:d6:0b:1d:19:38:2f:
                    02:9e:df:75:b6:dc:d9:ce:14:15:57:e6:f3:a8:5b:
                    49:69:23:d1:f2:21:f1:ea:82:d5:dc:28:9e:fc:aa:
                    3e:6b:27:e2:2e:ee:cd:8e:ab:05:01:4a:f6:f3:01:
                    fd:d9:51:83:b7:cd:74:06:17:86:06:58:22:3b:f9:
                    0c:31:1e:76:aa:9c:ae:ff:ed:cd:34:3b:a2:c0:c6:
                    6a:f7:64:a5:5e:cd:de:91:d5:39:de:0c:e1:a4:72:
                    f6:8b:ac:ef:40:d4:d3:08:4f:a3:90:e9:58:d0:2a:
                    a5:14:f3:b9:cc:a2:bc:df:49:b4:35:ba:1d:e4:d5:
                    ba:ed:2b:1c:94:b8:6e:31:0c:b0:51:00:8c:3b:50:
                    e2:ce:2c:87:cb:91:dd:40:a7:4c:73:6a:d7:2f:0f:
                    92:45:fb:06:ae:62:be:fd:88:ec:e0:eb:99:30:d0:
                    92:6b:30:28:42:d8:bb:c6:72:3a:63:93:d9:bf:c8:
                    27:36:43:8e:1f:1f:6c:1a:f6:72:8d:d8:33:f0:63:
                    cb:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D1:98:B8:D1:2F:64:7B:09:97:61:6F:D4:4D:61:24:76:0B:CB:2B
            X509v3 Authority Key Identifier:
                keyid:25:AE:55:1A:F0:BB:5D:79:77:EA:73:F6:89:6F:25:F1:EC:A2:8F:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ja5VGvC7XXl36nP2iW8l8eyij50.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/42f81b-c42c-4254-abb9-2142f8fb676e/1/Ja5VGvC7XXl36nP2iW8l8eyij50.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:05:37:6b:dc:8c:43:b2:b0:07:3e:ad:ea:69:7e:4d:38:c7:
         8c:61:cd:49:ce:dd:fa:a1:09:d9:79:de:58:47:86:25:c4:16:
         78:e7:9c:0d:56:3a:01:40:01:c3:62:ca:2b:4c:1c:5a:7a:5b:
         26:bc:ac:38:c9:15:01:d6:57:a8:12:3f:5d:39:01:d9:dc:f6:
         41:a7:03:94:74:02:a3:4c:57:0c:4e:1f:b6:a0:ed:ae:40:31:
         e8:c8:65:68:fe:2f:65:bf:14:80:af:44:09:c9:62:88:89:fc:
         0e:d2:84:5e:93:7f:e1:df:1d:d6:bf:f2:f3:c7:4f:12:74:38:
         b4:cb:58:cd:42:4c:42:d7:95:4a:81:4f:e7:73:53:94:03:7e:
         3a:c0:70:7e:f9:28:74:1f:a4:3e:67:1f:40:50:7e:e1:a9:35:
         35:f2:9e:49:ae:7a:ac:aa:e6:eb:35:85:f5:ca:77:3c:1d:74:
         a2:dc:5e:a9:a1:22:13:5a:22:d7:52:94:26:80:33:fa:3c:07:
         f3:a8:7d:d1:8a:65:8b:c1:0d:76:3a:02:99:7d:a7:e1:89:bb:
         31:12:21:3b:ac:57:93:b8:0a:59:c0:4b:45:71:6c:32:c6:45:
         97:db:e8:d9:e3:0c:5f:a1:f0:4f:9b:d1:99:f4:a3:1c:2f:2e:
         b9:1f:9b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----