Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
File:                     9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft (raw, json)
Hash identifier:          kZgdvNQfAEApAOGPgdhtuRibM4ILewZXwSa+chLxZwk=
Subject key identifier:   50:4D:3A:D4:9E:D0:BA:E5:19:0D:D6:BD:FA:10:DF:EB:82:53:29:DC
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Certificate issuer:       /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial:       0194BBCE53476904C471BB5877E18EDFF642
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
Manifest number:          1447
Signing time:             Fri 31 Jan 2025 10:00:48 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:48 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:48 +0000
Files and hashes:         1: 1-bDKpqd9IKO5rqqIeQW8oQ51t34.roa (hash: 9sRAYb2cLVUUELUPyHX1OFnXLEKmKwd0nv4wx8tY0+U=)
                          2: 9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl (hash: h3EgWEQjJKkCxlsrlVa80zH9tgiHLP2YG6LXSyZTSGI=)
                          3: BqT_zHeeWQLEscmXDYSo2bW_5hY.roa (hash: DjY7R/bkgsCT9jACm60nVer0BD9WjC1RQXTotru/rr8=)
                          4: Dsz5uvaCfsaiJBGzDzecMewv-Ug.roa (hash: MeEoWIXoG3LOHfXQOIQXyy5qgG/yZoQCFPvU7WaAQZk=)
                          5: GOVDOPz4Ey4aJOQYnZSfbM77b2Y.roa (hash: Tb323u5y8X/hUWvmAhaCMbIdIMzM33n+P05lv44LlyY=)
                          6: IZHMmqPmt3UlljgeogJmO322ssc.roa (hash: PycVs9gX0pMXEW+1UcglBSJJRtamvhRH7S93lKKOQPE=)
                          7: MXaN9ynuTzCz5I3XeArng1Txuxc.roa (hash: Cdg3iBSuAVJDj2wnydmyG0jU78/z4Seqn38MNANYyjA=)
                          8: Y4GVnljDwyWTOfTGee3OzDonhig.roa (hash: ySFB8PlG1u+FbnjOQ2dXurRiUOKMmJGUoxmhKEyRUKg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:53:47:69:04:c4:71:bb:58:77:e1:8e:df:f6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
        Validity
            Not Before: Jan 31 10:00:48 2025 GMT
            Not After : Feb  1 10:00:48 2025 GMT
        Subject: CN=504d3ad49ed0bae5190dd6bdfa10dfeb825329dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:cc:d2:6d:ac:cd:2c:57:8e:39:81:fe:a6:aa:
                    5c:87:6e:4f:f9:31:7e:2d:8a:3a:de:85:6d:da:cf:
                    71:37:7d:17:a2:19:de:25:40:c4:ab:e5:a2:24:8c:
                    7a:f0:ff:cd:e0:87:e7:4d:9b:30:bd:ff:e1:d6:9b:
                    d1:79:c2:c0:82:ed:22:1e:f4:2a:b9:a3:b0:06:b2:
                    12:2c:fd:a7:76:1b:c4:3b:4e:f6:f2:db:96:15:13:
                    9f:65:a8:f9:56:fe:11:0c:4a:74:39:a6:0e:4e:8f:
                    61:a2:cc:ed:5e:40:49:5a:7d:c7:42:e2:83:03:9b:
                    f9:ce:8a:64:b4:c9:c4:c4:55:e1:dc:6c:db:25:4f:
                    c7:b2:77:04:67:13:cd:59:54:85:19:01:e2:6c:4d:
                    11:e0:af:1d:ac:74:83:62:d3:a8:5b:fb:6e:b6:ee:
                    e9:22:70:22:ce:14:99:b7:aa:fb:42:3c:30:aa:70:
                    87:60:2c:b2:b7:7d:ba:61:7a:24:e2:02:79:b5:b6:
                    35:fa:6e:fe:9d:82:e1:fb:3b:bc:42:4d:45:a4:ef:
                    ef:54:67:ec:2d:6b:d0:bb:44:e3:86:a6:f1:8b:f9:
                    02:7d:97:14:90:b2:d6:d0:35:09:d9:18:bc:73:5a:
                    ed:70:1a:e2:38:84:78:0c:55:a1:06:ec:6b:29:a5:
                    75:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:4D:3A:D4:9E:D0:BA:E5:19:0D:D6:BD:FA:10:DF:EB:82:53:29:DC
            X509v3 Authority Key Identifier:
                keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:0c:02:74:b5:c4:1c:2b:7a:f7:3d:2b:72:76:55:c8:8e:ac:
         91:c8:ee:d8:1c:69:82:4c:69:20:ba:f7:be:15:e6:59:7a:95:
         7a:35:cb:c9:26:e8:96:b2:86:bf:6b:18:e3:29:f3:2d:a0:80:
         f0:eb:87:31:66:81:45:a4:de:63:2b:a2:0c:ee:dc:6b:8c:77:
         ed:ce:a7:1e:c6:f9:c5:e2:65:59:e3:65:42:39:df:51:40:7a:
         f1:79:fd:ff:2b:7d:72:4c:e6:3b:f5:59:2f:de:20:23:27:ab:
         10:6b:5c:58:f6:e7:89:21:b1:78:96:cd:6f:3f:49:2e:15:b1:
         08:3b:0a:9b:4a:d0:c6:fa:56:0d:c3:80:d4:d2:db:9a:30:d0:
         a6:13:c8:11:19:54:8c:82:54:84:54:d6:ab:47:eb:0b:b9:a0:
         92:fe:c2:fc:cc:6b:d6:45:3a:12:9a:6f:95:fd:b9:c9:62:26:
         04:45:b3:d2:38:90:12:ab:8e:87:aa:e5:79:ee:c4:a1:3c:9c:
         36:3f:ac:a3:ba:6a:b2:9e:d7:b3:59:19:36:9e:55:d5:6d:1f:
         39:70:09:0f:4e:61:b1:4e:d2:8f:50:ea:46:1b:00:fb:91:56:
         8b:67:88:6d:b0:bb:28:e7:02:f5:95:6e:85:91:51:82:b7:0d:
         89:88:1e:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----