Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
File:                     4FWc6ImuQkESH-ChZT5LlV8-30s.mft (raw, json)
Hash identifier:          RY8llhD4c/23Hai/vMCpmg6jITxqpseChIpudphTW5A=
Subject key identifier:   B9:24:D2:3C:91:4B:52:DE:2C:7B:BF:F5:55:03:99:B5:7D:02:F2:42
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Certificate issuer:       /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial:       0194BCE07F897D8C633F9EF5EB660CB086F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
Manifest number:          1460
Signing time:             Fri 31 Jan 2025 15:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:16 +0000
Files and hashes:         1: 1BHVcdS3kmkGH_bI9qfHON5UHfk.roa (hash: AuazvzToypQPnv8ss86Zt+CVshNBwKgwrntRNHToSZU=)
                          2: 4FWc6ImuQkESH-ChZT5LlV8-30s.crl (hash: tyZIDfJq33o+kVFgxVUBLlsharF7Y9JJx06IsDCxj/s=)
                          3: FVLtIsqua-IT5C7jqdKyQxwZexo.roa (hash: sxz7S6SjKXYtaxcweUHyF0IlLwPJ7i9ZkpCkV4uLA70=)
                          4: KjKCe6ofT1MaWcqvEHzd3y83DsE.roa (hash: fYONeSb8sEFnngSaKpwSRO2ffbgtr5Gv/r9LK52dcNs=)
                          5: NL8SNBB94yJmXSfvbxE2eNZEJ9E.roa (hash: hntcYSaFq4mi3qm3JSJYPveUcJTtgjJgSNTQAbA1kv0=)
                          6: RC5uhA6WGVsvpjEvAVmO6ZfP5eQ.roa (hash: XvDX7LcX3/WifVZTeLWoV2EFbtLIdXWkwlPH2WiMttY=)
                          7: xaw7_AWp5fvjyiLfDVkl5sMLUww.roa (hash: x2q8zKtjBM4XTrORasnw2jZEAVVSnrekJsHpbCcw560=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:7f:89:7d:8c:63:3f:9e:f5:eb:66:0c:b0:86:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
        Validity
            Not Before: Jan 31 15:00:16 2025 GMT
            Not After : Feb  1 15:00:16 2025 GMT
        Subject: CN=b924d23c914b52de2c7bbff5550399b57d02f242
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0f:9e:1f:0c:ca:20:c7:0b:a9:bc:a9:8c:d1:
                    54:7b:34:95:fa:24:a8:ab:a2:d0:0c:d0:c8:b8:79:
                    4a:df:e7:91:fc:31:72:7a:ce:ac:f2:27:f7:04:14:
                    84:df:7b:32:5f:43:c8:84:96:58:34:da:d1:26:b7:
                    73:da:22:26:dd:05:d6:c5:c9:34:0b:fd:69:14:a5:
                    f8:63:54:fc:ba:e1:27:c6:43:31:63:0f:05:95:03:
                    17:2a:85:0f:40:58:f8:0d:ab:57:22:1b:6f:9e:fa:
                    15:65:bf:7d:71:59:90:10:74:9c:f7:7f:92:1a:13:
                    5c:c0:49:f0:0c:0e:9e:d9:72:8a:70:82:de:f9:e3:
                    f4:ff:79:95:5a:fc:48:6f:1d:46:28:2d:ec:97:c4:
                    13:36:88:b1:dc:b5:89:4b:4e:6a:44:66:50:5d:b3:
                    fb:e4:b0:46:76:37:17:26:5c:68:c8:37:2a:32:68:
                    d4:56:ba:3f:3a:36:19:6f:28:c3:fa:c3:cb:8c:9b:
                    60:9f:33:29:0b:d4:bb:61:8f:56:2b:5a:a6:31:d9:
                    96:45:5d:09:ca:1e:d3:35:4b:8a:d8:e5:0f:8f:05:
                    07:e4:bd:b4:d3:cc:06:44:af:e4:d5:66:e1:5e:d1:
                    e4:ef:3a:df:44:75:76:11:1b:16:7a:77:bf:73:ec:
                    8d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:24:D2:3C:91:4B:52:DE:2C:7B:BF:F5:55:03:99:B5:7D:02:F2:42
            X509v3 Authority Key Identifier:
                keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:43:fc:62:69:30:66:1f:b8:2c:3d:2a:91:d5:69:eb:e7:d4:
         d4:cc:ff:8d:99:6e:fe:47:fd:e6:bc:47:da:c1:5c:ce:86:60:
         89:0a:98:1b:91:da:6e:c1:fd:b7:bb:f4:e7:21:59:32:de:d0:
         49:10:6b:26:ff:3f:2f:82:f5:37:0c:63:bb:c2:e1:58:b9:b0:
         78:03:6c:2f:8e:e7:a8:a0:03:cc:2c:bd:dd:56:6f:01:4e:49:
         52:f7:70:f2:8e:82:cf:0d:2e:e3:ee:f7:6b:2d:a3:d3:f6:d2:
         ce:d0:9c:36:77:83:93:2f:d3:b3:48:4c:4e:c7:c8:d4:85:e7:
         92:28:ea:82:51:4e:c4:c4:ee:72:d0:5b:f8:07:6f:ec:ae:5a:
         e8:ec:34:9c:85:67:14:0b:4a:7f:16:03:27:99:08:a8:88:1a:
         35:e9:0a:85:04:01:92:3d:0b:b0:28:7e:0a:2a:f5:f9:42:f9:
         c8:3e:87:82:c1:ed:6f:18:dd:f9:ff:b3:41:8c:fe:df:0b:ae:
         b0:54:45:0b:bb:05:8c:80:3e:5e:75:b9:4b:c1:4a:27:a2:a7:
         53:97:59:d1:e1:67:63:cc:5a:54:3f:e5:1b:8e:05:48:c4:59:
         ec:08:bf:c7:e6:d6:b0:7b:bc:06:28:a3:04:df:7b:4e:0b:08:
         04:55:32:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----