Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft
File:                     h3e1s29m4TxDiMmTTaUHhWUV0HM.mft (raw, json)
Hash identifier:          zg9KT71LqRSHSjUHSNzh9ytjN68jom4LZNDCzqpGGlw=
Subject key identifier:   A7:2B:07:01:84:C9:65:5E:86:50:82:F6:79:DF:1A:59:B4:EC:C9:7E
Authority key identifier: 87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73
Certificate issuer:       /CN=8777b5b36f66e13c4388c9934da507856515d073
Certificate serial:       0194BBCDC37B443BF7F6F3798AC8EED31606
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft
Manifest number:          1437
Signing time:             Fri 31 Jan 2025 10:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:11 +0000
Files and hashes:         1: A6JGXr1SyvHwPS6KzQQ8jkJldSU.roa (hash: VUYWyhNS6ep9E7uE71FApUlIqX9LiZIrh4n1ahAsDso=)
                          2: TWqw0MHPHKoktRTg5xIAtx78yEM.roa (hash: PUFyi4vEY3nAKmSSQP1jmjE/95RjFLcOq0y69mlpJOM=)
                          3: V8TNai625jKsZmcQ_WZGrCSKrE4.roa (hash: vysxGoIRN63RAVmh7o1GuXI9idOSf2H3bNvDZcwjEdY=)
                          4: e6_LhXTjf-f7BeHN6H1yNQzFGts.roa (hash: li+C+e/TyH8gT/zIILB28hzFIhULplGnnZiYiHV9ZRc=)
                          5: gSW8bbfsJ2jQqNlN9dZhEGJFXP8.roa (hash: vU4Z2mH5UQmCsli4v0J2JenJSa7jKRcKq2cUWRszffQ=)
                          6: h3e1s29m4TxDiMmTTaUHhWUV0HM.crl (hash: OoOb2S3yGCQEmmd1/OPqnaPqKSgCUY8SB4JnOiFwWQU=)
                          7: i0jLZUHWlEbTjItngq0hMz6l6J0.roa (hash: +fs8xaq1rUOg67Y/1DC1FdTxOQepuB3UaDQqJ+epLzo=)
                          8: mYsvImsoUU3Ub9pNivjve1CZzdk.roa (hash: 6hty2hcbqDF/bBkU2gmepu7xCrLxFUdqyzgzAZcFQt8=)
                          9: mcMvNLDOLrmNQ78kKv9_JRA7DZE.roa (hash: VPPZszck1h4O1z0bSD4PbxyUsa9F/mGv1ZkFIvAMZag=)
                          10: rIHZb_5Mc64A87xwROb5WoKPTaQ.roa (hash: h28IpYVJGdPeChoNExuao8goV9hXIxbKmOle/GHbji8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:c3:7b:44:3b:f7:f6:f3:79:8a:c8:ee:d3:16:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8777b5b36f66e13c4388c9934da507856515d073
        Validity
            Not Before: Jan 31 10:00:11 2025 GMT
            Not After : Feb  1 10:00:11 2025 GMT
        Subject: CN=a72b070184c9655e865082f679df1a59b4ecc97e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:e8:9a:85:70:f7:e2:1e:81:5b:27:38:0d:9d:
                    54:8b:6a:54:81:2b:76:5a:da:a8:59:87:b5:c2:ea:
                    d2:f8:b2:2c:66:12:a1:b9:5b:18:99:35:1f:d6:53:
                    a3:d9:84:27:f8:07:57:76:c5:d4:bd:b6:5b:c7:d8:
                    7b:26:2d:81:34:30:fd:5b:d0:cf:95:02:3f:e6:fd:
                    8e:ab:3e:73:33:11:29:fc:7e:16:e1:87:75:66:ac:
                    f3:6e:32:98:35:e9:81:8b:14:f3:73:2d:7b:1d:2a:
                    00:35:c5:c9:ab:e1:9d:55:25:30:c4:b3:ca:b8:24:
                    a6:64:18:60:bf:31:e0:67:b4:75:9f:39:48:57:23:
                    b9:68:65:cd:27:03:a7:41:16:80:a9:1b:71:9a:58:
                    33:c5:1d:61:0d:34:9e:7f:aa:f2:0c:64:e9:aa:cc:
                    ed:4e:27:d6:8f:69:a9:26:bd:26:9c:98:2c:6d:d3:
                    d9:91:9f:1e:4e:46:7d:df:d9:06:71:8b:f0:80:a9:
                    0a:51:e7:9e:9c:9b:f4:a0:03:bf:f7:d5:d6:36:bb:
                    45:8f:9c:d9:6a:04:d9:a3:48:76:bb:71:95:fb:d0:
                    f8:df:db:10:70:af:15:23:19:a4:ce:e0:e7:0c:4c:
                    6a:58:a9:3c:f5:ed:62:6f:12:3e:d3:f2:df:b6:2b:
                    e1:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2B:07:01:84:C9:65:5E:86:50:82:F6:79:DF:1A:59:B4:EC:C9:7E
            X509v3 Authority Key Identifier:
                keyid:87:77:B5:B3:6F:66:E1:3C:43:88:C9:93:4D:A5:07:85:65:15:D0:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3e1s29m4TxDiMmTTaUHhWUV0HM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/f92e2a-e1e4-487d-9acc-ed1f30cc1c57/1/h3e1s29m4TxDiMmTTaUHhWUV0HM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:a9:d4:42:30:9b:73:6b:c4:63:79:34:66:66:29:59:8f:a2:
         40:8a:6c:34:99:c2:90:36:81:98:b0:37:2b:8c:bd:5c:c6:80:
         53:bb:dd:3d:4c:c0:0e:91:0c:3b:1d:18:66:60:d0:dd:b9:ef:
         7e:ff:ef:a4:cf:36:d4:2d:9e:4d:ae:07:a8:01:d5:99:93:7d:
         88:04:6a:79:7c:43:d7:53:71:df:25:c4:1c:6f:d5:1c:4f:d6:
         1e:fd:78:6e:f4:e2:ce:87:12:44:27:75:48:be:e8:cb:3e:66:
         d3:83:3d:49:94:f2:d3:b2:e7:9b:8a:3b:01:01:33:33:56:38:
         3f:f0:c2:82:2e:60:67:60:23:77:2f:a7:f1:2c:0b:ab:62:07:
         ad:e8:ea:0e:5e:5d:b0:ae:36:72:ca:04:1b:a3:b9:dd:f5:f2:
         9c:31:2f:0c:f0:dc:c8:a0:b5:0c:f0:36:82:ea:78:df:7e:38:
         b4:ea:14:04:50:a5:fe:6e:02:7f:13:10:25:0e:bf:eb:5e:ba:
         ac:c0:fb:ec:9a:d2:d2:05:7a:db:04:c2:bc:fc:01:a9:c5:5d:
         86:2a:75:48:1d:0b:8d:24:a6:a2:bb:52:75:6a:b8:11:1c:fc:
         8c:f4:09:5b:64:9e:34:57:10:ef:a2:4b:1d:9b:a2:9b:2f:2d:
         84:bc:34:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----