Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
File:                     hNt0eyiXF6BoTNasgjB6pnuy17s.mft (raw, json)
Hash identifier:          xgR0iyANwYqztYUhn52nonQuMTrDTrgyGXcBtP4vxFE=
Subject key identifier:   95:26:37:39:C9:58:C4:68:BC:E5:D3:EC:E7:03:5A:62:27:43:F6:E9
Authority key identifier: 84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB
Certificate issuer:       /CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
Certificate serial:       0194BC3C56235C116B5D110DD89437AFB849
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft
Manifest number:          116A
Signing time:             Fri 31 Jan 2025 12:00:58 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:58 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:58 +0000
Files and hashes:         1: 09kK1ESpBv8LiYB9wN6M6ItCuW8.roa (hash: knJCckrITclIVMheMGK5cxyj8YBBf+peiHkDGIWIF80=)
                          2: EqTLLrStWQ1_lYgYRBgmgDPtF_4.roa (hash: VTc+tW3JK91nfNjIEDHdLe+grDG6p0570ue39trIFTw=)
                          3: F4E_A-3GsiPbrHv0FpBjWEBAnaw.roa (hash: Ib9TkfBhAWRiVd7E8+OAkowsQ7AwC9M2n6bdugTcuJM=)
                          4: _MYdCgDWaO6XB5gVesQLpQpeOag.roa (hash: nreKDXAy4j3D6W3Lae5rvKwQFMf1x+LsfYxvbzIyjhc=)
                          5: hNt0eyiXF6BoTNasgjB6pnuy17s.crl (hash: 5pCU2LuC0nolGe/7OYjLOnaQaqI67xsYUAHFi8zD+E0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:56:23:5c:11:6b:5d:11:0d:d8:94:37:af:b8:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84db747b289717a0684cd6ac82307aa67bb2d7bb
        Validity
            Not Before: Jan 31 12:00:58 2025 GMT
            Not After : Feb  1 12:00:58 2025 GMT
        Subject: CN=95263739c958c468bce5d3ece7035a622743f6e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:63:62:fe:7e:54:3a:e4:a6:8c:7b:0a:9e:44:
                    5f:30:ca:1d:7f:d1:c9:b3:c0:c2:4e:b0:36:c1:df:
                    fb:47:50:02:8f:6e:d1:10:e3:84:3e:2a:38:93:83:
                    14:c1:a7:c1:f7:40:3b:c8:90:35:81:84:49:50:d3:
                    15:35:61:87:16:0f:68:e6:32:77:25:0e:a2:d9:ef:
                    43:6e:7c:5d:2a:90:fe:aa:22:c9:dd:2a:c1:54:5d:
                    15:3a:18:65:8a:06:26:26:88:57:91:79:c6:3f:4d:
                    d2:84:21:9d:84:c5:08:c2:2c:c7:f5:8c:f2:bf:23:
                    95:38:ee:10:45:27:68:93:53:3d:bc:71:6c:95:53:
                    5c:96:19:76:cb:60:c8:b1:8d:d0:3b:9a:c8:56:c9:
                    ca:7d:cf:54:11:ce:5a:af:b8:17:77:b1:60:92:a3:
                    64:4a:f3:dd:80:f5:fd:57:22:40:91:2d:6e:34:11:
                    d9:ff:4d:77:19:6c:d0:e9:d4:0f:d3:38:af:45:bf:
                    fb:d7:57:1e:a1:c0:3b:a8:93:51:42:7e:e2:69:60:
                    14:d1:7e:1d:ec:8d:ee:78:cd:09:8e:3f:52:6e:16:
                    60:29:03:ae:b1:9a:c0:0f:a3:d3:55:97:5a:75:e5:
                    1b:82:77:61:15:57:68:1e:8b:b3:8c:4a:3b:a3:c9:
                    29:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:26:37:39:C9:58:C4:68:BC:E5:D3:EC:E7:03:5A:62:27:43:F6:E9
            X509v3 Authority Key Identifier:
                keyid:84:DB:74:7B:28:97:17:A0:68:4C:D6:AC:82:30:7A:A6:7B:B2:D7:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hNt0eyiXF6BoTNasgjB6pnuy17s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7142b1-7091-4d3a-bd6d-9fe7ee9c0368/1/hNt0eyiXF6BoTNasgjB6pnuy17s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:39:59:3e:65:f7:11:a3:87:21:6f:92:fe:12:f5:14:cc:6e:
         c4:0e:f4:fe:be:d6:dc:ee:64:de:76:44:3c:d5:9e:a7:4f:e8:
         c2:4b:e3:1a:bb:e0:8d:e7:ab:d7:a6:54:38:09:c5:be:c5:4d:
         85:d8:55:d6:4d:2d:45:52:d1:cd:72:70:6f:ba:6c:73:ce:99:
         28:d8:37:0b:da:a4:20:f5:d4:ab:73:e1:77:33:b0:34:e0:7a:
         f7:2a:04:75:7e:5d:c0:03:46:f0:be:f1:92:93:a5:f7:22:a0:
         63:74:8c:6c:50:f1:f1:cd:f0:4e:f2:31:d2:b2:b6:03:2b:93:
         92:2d:6e:65:53:8a:62:fe:d9:b5:80:d7:f6:82:6d:b5:9a:d1:
         c0:a1:04:c3:cc:af:51:07:45:aa:58:d0:ff:24:08:ac:ae:c1:
         6b:b7:12:3b:02:42:d1:0f:f5:60:24:30:99:37:2d:7b:bc:f3:
         5c:48:60:a1:64:37:7e:d3:66:88:a3:24:42:47:0f:10:35:69:
         cb:01:6a:16:19:ca:14:d9:6d:64:e3:77:b0:3d:28:63:8c:db:
         dc:a2:f9:3d:86:de:1e:35:b2:b6:0e:b7:bb:ea:44:00:33:18:
         07:9f:75:ea:e0:b3:dc:bf:70:88:cd:5b:ca:57:e7:92:04:21:
         d0:cf:e7:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----