Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
File:                     b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft (raw, json)
Hash identifier:          kbolfeRdVyvJT0OM2uS+TD7GbIh4AOx3EI2xrP/d0dw=
Subject key identifier:   77:40:26:F8:D9:6A:F9:60:D7:2E:08:D5:25:0C:EE:40:A7:7F:3A:66
Authority key identifier: 6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB
Certificate issuer:       /CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
Certificate serial:       0194BC3C011D2190183074C19F880D857F61
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft
Manifest number:          A0
Signing time:             Fri 31 Jan 2025 12:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:36 +0000
Files and hashes:         1: G-IyOfxP0oIKcgqsyvK7PQysJI4.roa (hash: J12Xsn1iPdPrEhwd+oE2AQU+Dv20weYAXKmMI/VZwUY=)
                          2: XayvmfzLwFIrnB6YR1N8a3QlP3g.roa (hash: yW+e4Wc1yic51HqaRnNHy8V0Min8R+kpxRu8CLP1al8=)
                          3: b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl (hash: cKZybYO3AH1/ya+3vMrYiXCg31p+6zc7NCqH+QunuUY=)
                          4: y_rN8oL-RF7aZSsz7rxD37SpvBo.roa (hash: yyU/YNo1lmYSBaoqFl+UlGtfTAugNwlOOszdcCNx0xI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:01:1d:21:90:18:30:74:c1:9f:88:0d:85:7f:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fa64a647bd2a5557f70f676adcc76904fb872ab
        Validity
            Not Before: Jan 31 12:00:36 2025 GMT
            Not After : Feb  1 12:00:36 2025 GMT
        Subject: CN=774026f8d96af960d72e08d5250cee40a77f3a66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ac:34:0c:d9:f3:a9:1a:3a:5c:c4:ac:ff:cb:
                    3e:28:6e:16:4d:1b:e2:21:aa:c6:ab:21:4c:48:46:
                    08:3e:1e:18:2c:22:26:63:c2:f3:cf:8c:f0:3e:bb:
                    12:5d:86:e0:2c:a7:e8:fa:6d:da:cb:6d:7e:60:ce:
                    89:e9:f9:86:81:50:a6:bf:6b:36:ab:04:c4:4c:15:
                    91:56:02:d9:86:72:8e:d8:c9:02:3f:19:0d:8d:ea:
                    d9:27:a7:5a:66:53:ab:fd:a8:fd:86:19:a1:1f:59:
                    cf:36:08:50:17:ef:3a:52:ef:4b:3a:59:1f:c1:cf:
                    d7:85:de:1d:94:01:ad:a9:c6:9d:1c:73:0e:91:56:
                    23:de:8f:9a:82:ff:5a:8e:55:9e:73:b8:ae:00:c3:
                    93:6a:5e:b6:1d:84:ef:69:62:2f:7f:4b:bc:6f:ff:
                    81:44:3a:bf:9e:86:e0:17:3a:48:8f:05:98:09:3d:
                    45:58:ff:fb:de:58:c2:6c:23:22:17:80:3e:24:3d:
                    da:5d:8a:e5:29:11:3e:ba:de:82:d9:0d:fd:60:b8:
                    fb:79:2e:06:e4:aa:a8:ff:16:74:a7:29:5f:63:95:
                    5a:d0:d0:99:73:8e:2c:93:70:83:01:91:88:70:dd:
                    fe:0c:8c:9d:7c:a8:bd:3f:89:f7:4f:da:de:89:90:
                    cf:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:40:26:F8:D9:6A:F9:60:D7:2E:08:D5:25:0C:EE:40:A7:7F:3A:66
            X509v3 Authority Key Identifier:
                keyid:6F:A6:4A:64:7B:D2:A5:55:7F:70:F6:76:AD:CC:76:90:4F:B8:72:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/258dae-54fa-4a33-a19d-e91b3abd1fe8/1/b6ZKZHvSpVV_cPZ2rcx2kE-4cqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:90:b3:36:d4:4a:fe:a2:ae:1a:13:69:0d:66:da:03:4b:8f:
         42:f9:6b:40:09:0e:43:df:2e:1c:06:e0:70:c5:7b:6e:18:53:
         54:4c:01:73:21:b2:f6:15:12:f0:67:ad:ec:c8:31:60:e1:9c:
         4c:c0:00:e9:7d:e5:4c:77:a1:4c:83:cd:b7:23:f8:db:a6:57:
         16:66:b3:12:71:42:57:8d:19:fe:c4:ad:de:15:f9:ef:79:bb:
         26:84:cb:ed:b3:fe:30:6a:19:1a:5d:f7:51:2d:91:69:43:6d:
         81:51:a4:ac:2e:18:e2:01:1a:4e:24:4d:8d:3b:0a:d2:d0:a7:
         f0:20:01:16:3e:24:a1:54:86:7a:84:66:70:76:4c:83:31:4b:
         26:74:b5:80:e4:08:4e:59:83:68:0b:40:54:3a:5c:d5:69:78:
         6d:99:fd:70:b3:69:f0:6b:83:fb:4d:1f:5a:e8:0f:ef:cb:0c:
         a1:24:eb:c0:c8:25:d7:67:93:88:6c:08:5f:41:8c:03:f4:b1:
         03:41:ad:35:15:84:b2:73:08:b9:ef:a4:02:42:a6:21:b5:14:
         a2:ed:81:41:72:1c:43:46:bc:86:87:6b:97:12:06:76:c8:80:
         18:af:cf:18:4f:59:81:46:de:91:46:13:5d:f3:e9:ea:30:8c:
         1a:d2:66:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----