Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
File:                     xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json)
Hash identifier:          1ZpkoHoTZ9QdmbmYuk1u3brywdUK80Slfb5bo3xGGQA=
Subject key identifier:   D5:46:C1:ED:9B:7A:06:2A:F8:79:3E:AF:13:7B:9B:16:17:32:1C:7F
Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8
Certificate issuer:       /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
Certificate serial:       0194BBCEDC6E10428515885825BE95B5B7C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft
Manifest number:          1439
Signing time:             Fri 31 Jan 2025 10:01:23 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:23 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:23 +0000
Files and hashes:         1: 1d9PCrI-4OIWZHlndWAF-BFZeRg.roa (hash: Iw4tosd5c4tKjF6tKkdj+Nm6L4yubj6pDN7RhIdr5OM=)
                          2: 9irhpoo7t3RuQsofnh453Wz9yzc.roa (hash: PhvRYsh7H1rsPmbcRRJi8HgMHZoVZsvvG8rw54V1xv8=)
                          3: QlG1TVRz55diqUdGl7g_uO4xh_Q.roa (hash: fgvqjVsU5zRnz0bSGyWJaFmUvSDnHcvgLRxyVqmSVT4=)
                          4: ZyvSvqBO_CRtrjVV5g_m38QqdF0.roa (hash: EMjT9dIsrbauUL5Ml+fcJBjE3Hsiqb5K2tYe1FIy+Zk=)
                          5: nnciRjVheF08s398UKSonGItpsk.roa (hash: R1OwPDHsbFUiJTJpwPW1Uer2AhB7tNd3rerNZf5joWI=)
                          6: pzeazRaM8Z6SjrjO6Q79mNPUlRs.roa (hash: /9lKkXVgAMejZaK+X1dNcf57k6lh360Swbxh+XCM3Ik=)
                          7: shBa9JrmFrbHIJ50XFqnyAIX03Q.roa (hash: ZX0cowj/X8/UKH2s85v3mEfUGDpRbJzNCB3///lxrIs=)
                          8: tJb8Ts4XgvLq7IFd612PdAoSex8.roa (hash: /2oqwW8TIewEulnC/YwP+6MDX06JT0RuhBb946Sy6pg=)
                          9: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: x0EjsPBeWP6c+bpvMi6zz2laS7zg+kQLi2m+EdJsqZo=)
                          10: zag9EMVMQmmPCVwwU3_0aOJuzic.roa (hash: ffeNrZA6EtrT2ro+QuAB6ElVQs7TfooiMECDOqyyyqs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:dc:6e:10:42:85:15:88:58:25:be:95:b5:b7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8
        Validity
            Not Before: Jan 31 10:01:23 2025 GMT
            Not After : Feb  1 10:01:23 2025 GMT
        Subject: CN=d546c1ed9b7a062af8793eaf137b9b1617321c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:61:0f:87:df:5b:66:16:fd:9c:cf:54:dd:0c:
                    11:4c:7a:7a:4c:03:2e:2b:57:9f:32:aa:98:ce:c9:
                    d6:73:3e:cd:b6:46:52:cf:a9:65:e6:a5:69:f8:81:
                    2e:e3:d5:70:3a:4b:fb:d2:4d:b2:d3:4e:4b:24:44:
                    a6:a6:d9:2a:78:fc:d0:1e:5b:b7:4a:16:14:45:cf:
                    fc:31:e4:e9:40:aa:64:3a:31:a1:6d:98:81:b6:66:
                    e2:bc:ff:c6:1b:cc:b2:01:72:eb:90:97:8f:e8:84:
                    95:fc:d2:8a:ff:6e:ff:10:9d:c1:7e:c7:4b:94:68:
                    48:88:33:af:25:a4:d2:d4:a8:4d:0d:e0:00:3f:5f:
                    b1:64:bb:92:27:78:81:ff:fa:e4:19:d2:25:3c:29:
                    52:28:e9:e9:1d:85:e7:92:88:25:17:22:bc:bf:51:
                    c1:cc:b5:91:aa:65:b2:ee:15:5b:e1:63:8e:34:f0:
                    5f:cc:05:8d:be:4c:70:27:20:8f:45:dc:26:6c:9f:
                    a9:53:56:c7:19:69:cf:b7:b3:ee:52:8e:eb:3c:74:
                    aa:94:b9:1d:e3:2d:1c:87:fa:64:49:14:7a:17:6c:
                    59:90:e5:41:c0:13:92:b5:81:2d:6c:5f:ff:26:fe:
                    24:1a:4b:28:0c:bd:da:41:a7:29:57:2c:bc:68:9b:
                    0b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:46:C1:ED:9B:7A:06:2A:F8:79:3E:AF:13:7B:9B:16:17:32:1C:7F
            X509v3 Authority Key Identifier:
                keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d4:0e:52:61:8e:9e:a3:fa:39:27:19:5a:78:a1:48:da:1e:
         91:a7:a9:57:f9:3e:18:7e:95:ca:0a:c9:0a:ce:9f:58:d5:a1:
         97:84:58:15:af:b8:bf:98:eb:50:b2:80:91:e6:b2:06:94:7f:
         99:66:7c:1a:fc:b0:53:d1:df:37:83:9d:11:71:ca:a8:2e:f9:
         54:e6:6a:a4:e6:40:39:31:85:18:16:31:43:f6:fe:fb:3e:dc:
         8e:e1:92:33:ed:f1:17:7f:6c:e2:b5:24:54:d2:89:2f:eb:16:
         ff:3a:f4:0b:1e:01:4e:1f:c6:c5:40:2c:1a:a0:50:5e:46:50:
         a4:52:41:9e:f9:6d:26:97:f8:03:63:1d:e0:6b:b0:f1:dd:d9:
         32:ba:c3:8f:be:e6:67:89:9a:28:05:7a:48:8b:73:c4:e9:ea:
         68:22:b0:12:85:59:c4:ae:01:42:32:3f:93:7d:1d:d0:7b:32:
         fd:34:63:2c:b9:1c:85:2a:79:77:0c:dd:51:a4:f8:f4:cc:3a:
         eb:2d:73:ec:30:f8:78:32:12:d7:58:7e:a1:1e:18:9f:bf:e5:
         60:d5:8f:0d:af:22:ed:1d:27:d4:4d:dc:ba:7d:57:26:76:aa:
         87:5e:c8:fc:64:a7:d3:bf:19:a1:86:48:4d:a6:c1:2a:83:06:
         69:41:48:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----