Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
File:                     yteUrGAc4lBbZfl1p9UWovAKWzE.mft (raw, json)
Hash identifier:          jVXqi9jAe6ndG+t5wkBgwg2kDMxYv2NP0hj/jZ2hK3U=
Subject key identifier:   48:96:59:9B:39:33:80:DA:1B:EF:C0:04:C6:66:FA:36:3A:C9:0A:47
Authority key identifier: CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31
Certificate issuer:       /CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
Certificate serial:       0194BC04B5619E67CF95348280866FF0294B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 11:00:12 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:12 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:12 +0000
Files and hashes:         1: 2E9kWgPtYN0WAc6RCe6lEkD5GGc.roa (hash: WZKZ1nRj/095D4tmKUIjIrN2QssyrW7JaucRn5aUuQo=)
                          2: AkxBzFahq-o6wjZntexC75GkoQc.roa (hash: XI+dcnOKPlHyd45iksd8y1QhwpvH96atl8vNKM9DQ9c=)
                          3: XBS2bilHl7hAUnhaEuY8p5cjE4c.roa (hash: GRT8VC70aJ9wVqj8F9C5XozSwpU4dQPqDcpv9YGwfrE=)
                          4: e8UexKJSMZ7skwYQtvgWIbq4MXE.roa (hash: z8UU85PauzAWCWu0c4/whBUMLEZehA442FaYRyi9WiQ=)
                          5: yteUrGAc4lBbZfl1p9UWovAKWzE.crl (hash: vbSuecVfWbD5++2OxbJjv1+thZuPfAdKwAiCiCNNWiM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:b5:61:9e:67:cf:95:34:82:80:86:6f:f0:29:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cad794ac601ce2505b65f975a7d516a2f00a5b31
        Validity
            Not Before: Jan 31 11:00:12 2025 GMT
            Not After : Feb  1 11:00:12 2025 GMT
        Subject: CN=4896599b393380da1befc004c666fa363ac90a47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8a:7e:75:71:79:c8:24:ee:9c:ec:9a:d3:ec:
                    53:86:db:26:cc:af:19:e8:06:cb:35:0e:1b:9a:42:
                    a4:b8:05:79:58:d4:1a:54:90:5a:44:d7:18:3f:c1:
                    da:ba:5c:9a:ae:02:a3:4d:42:27:c0:62:ff:3c:9f:
                    d7:cf:97:dc:be:64:2a:a6:23:5a:f8:4e:59:59:c5:
                    5f:aa:98:48:ad:14:81:1b:05:11:4d:79:c9:6c:5e:
                    6b:ab:6f:6b:da:0b:36:6d:2f:73:fc:d9:f3:41:2d:
                    89:73:db:9a:79:ba:2a:f3:9d:ea:3c:d0:be:42:cc:
                    ae:e7:ee:ba:f4:10:65:c5:94:9c:21:e7:fb:17:e8:
                    f1:35:42:9f:e6:19:32:2c:6c:a6:c5:80:77:a7:ea:
                    cd:af:20:44:c2:26:d9:db:0f:77:64:38:40:e4:22:
                    00:6b:b3:ba:16:2c:65:63:29:85:e5:f2:4a:70:4c:
                    1a:36:b6:1e:e3:1a:9c:20:0a:a4:f0:b5:4e:cf:6e:
                    8b:15:34:ec:b2:b6:3a:da:e4:88:04:0c:c1:b6:a2:
                    78:76:07:77:d9:be:76:15:5e:4d:aa:51:c8:dc:2c:
                    0b:2f:d5:b3:a6:5b:30:30:a3:27:64:6b:fd:d6:cd:
                    9b:46:8e:b0:6a:ff:94:85:26:b2:d3:d9:d3:12:3d:
                    d2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:96:59:9B:39:33:80:DA:1B:EF:C0:04:C6:66:FA:36:3A:C9:0A:47
            X509v3 Authority Key Identifier:
                keyid:CA:D7:94:AC:60:1C:E2:50:5B:65:F9:75:A7:D5:16:A2:F0:0A:5B:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yteUrGAc4lBbZfl1p9UWovAKWzE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f9a4be-d79c-4192-a6b3-3b988f188d91/1/yteUrGAc4lBbZfl1p9UWovAKWzE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:8c:11:39:90:51:63:44:c0:88:ee:59:73:32:6e:32:37:68:
         45:ab:6a:e3:c9:3f:a8:b6:20:b8:43:89:ad:86:1f:f5:60:f1:
         27:9b:0c:14:1f:62:8f:01:a6:00:3d:ff:73:19:a8:ff:d3:b1:
         d1:fb:be:45:e1:34:81:68:eb:b7:bc:4e:9a:c6:77:42:34:7b:
         c9:cb:1f:56:2d:f3:8c:fb:a9:65:d2:a8:22:42:a3:d2:b2:81:
         f9:5d:96:a5:1a:cc:7b:1f:f9:df:43:55:96:f5:3e:42:d8:bb:
         85:d3:3f:b3:ad:01:a7:ab:57:fb:21:e8:53:44:66:03:ad:0c:
         11:98:70:9e:51:f6:17:b9:f5:0c:28:b3:0a:2a:2a:67:57:24:
         ed:f0:92:80:3f:99:49:ce:67:58:16:44:4b:7a:42:25:21:20:
         e3:e7:3a:a1:41:cc:55:cd:eb:fb:d7:dd:7d:13:df:cb:61:fa:
         ad:16:f1:c5:93:55:db:3e:9f:2d:d7:4c:81:aa:b5:0f:b6:96:
         4a:35:b5:32:38:ff:db:85:fd:e8:ea:35:8a:b0:35:f8:f3:0f:
         ab:f0:8e:0c:3d:a5:14:5b:70:c1:4b:55:cc:ba:cf:fe:f7:69:
         d3:25:c6:19:79:e7:1e:6f:17:57:25:61:fa:43:d5:e3:fa:70:
         96:ee:bc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----