Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
File:                     egvN7ozoOcTSBBPIYkI8ygT9xgo.mft (raw, json)
Hash identifier:          L4A2Dw/bkySsXW99W5O652C1u30ejncclLpzdndA3Ss=
Subject key identifier:   D6:9B:51:95:66:84:06:AE:56:50:3A:3F:FD:69:C0:EF:C0:F4:92:36
Authority key identifier: 7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A
Certificate issuer:       /CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
Certificate serial:       0194BC72AE8B565708F27094C691F16F26A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft
Manifest number:          0D89
Signing time:             Fri 31 Jan 2025 13:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:19 +0000
Files and hashes:         1: BkC382kbRID_J9MdHf3y_ZWlEf8.roa (hash: ts/8AAif8Jl4mhcHO6WxEGvpSqp2TwktqqlEa+sbGTU=)
                          2: ONKHpYimKuwzn77m9LydYFbzpRY.roa (hash: 8J246+Nt2Y+QpfgD1sKVEVeqnWKlH8aPvihNQisvlT8=)
                          3: egvN7ozoOcTSBBPIYkI8ygT9xgo.crl (hash: fEuG0gbL7pkluGLlp89uI3VYwdi4NT6PT7j2ObGRSQg=)
                          4: k2qVus75QweqwVLaTzgWKFt2l2k.roa (hash: FHRO2hiAAv4cLirtut9emqOb7BfOEUoCLYXrQqlQbt0=)
                          5: kBFDTimH0wXzN6bZHwFh18BZ9YQ.roa (hash: gXdNyTqShsEpC9gTq8XtRziYkmToBDMK/+q0FeGIxLk=)
                          6: utnanlwrMPvqo9oUFO7C-isrnws.roa (hash: hoqvLMB2exZaW3zQIo0VGKfu9n9CN2+OhypTj5cWUUQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:ae:8b:56:57:08:f2:70:94:c6:91:f1:6f:26:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0bcdee8ce839c4d20413c862423cca04fdc60a
        Validity
            Not Before: Jan 31 13:00:19 2025 GMT
            Not After : Feb  1 13:00:19 2025 GMT
        Subject: CN=d69b5195668406ae56503a3ffd69c0efc0f49236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:04:62:46:ff:80:54:79:c2:1e:0e:2f:56:1d:
                    d7:07:20:67:72:b1:cf:7d:30:2c:b4:cd:76:24:68:
                    11:fe:bc:12:b2:89:c7:72:db:9d:6b:cd:90:d1:28:
                    7b:8c:32:2c:21:f2:05:eb:20:f6:14:c5:dc:ba:5d:
                    67:ba:17:43:bb:81:b3:71:fb:ea:cb:d3:83:59:fd:
                    18:cf:94:41:3c:c7:eb:f3:a6:9d:09:0d:69:7d:f8:
                    3f:5d:a3:5e:84:c5:5a:54:d1:95:43:e0:92:d0:81:
                    15:13:5a:69:30:48:ca:10:6b:a2:87:32:60:90:63:
                    f1:b6:47:4c:59:cc:7a:2d:1a:3a:a5:5a:bb:1d:d8:
                    d6:06:02:ab:95:92:0d:7f:11:d9:ba:a4:7d:7a:09:
                    2a:00:5c:60:54:d3:5d:d1:64:0d:44:cb:36:92:bc:
                    97:64:51:93:d2:36:e9:db:62:86:be:13:27:67:bf:
                    6c:e4:05:f1:a6:92:a5:d6:ad:83:4b:25:33:3a:95:
                    6e:2e:c8:a0:fb:98:61:d9:3f:6f:52:5c:57:07:94:
                    5c:da:2a:aa:23:33:f7:79:25:9d:7a:d1:4c:bf:76:
                    8f:b1:da:97:4b:53:3c:fa:b1:3b:e0:4f:c4:bd:a4:
                    f5:b5:85:16:07:64:56:f9:ed:17:0a:42:f6:0a:d8:
                    3f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:9B:51:95:66:84:06:AE:56:50:3A:3F:FD:69:C0:EF:C0:F4:92:36
            X509v3 Authority Key Identifier:
                keyid:7A:0B:CD:EE:8C:E8:39:C4:D2:04:13:C8:62:42:3C:CA:04:FD:C6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/egvN7ozoOcTSBBPIYkI8ygT9xgo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/54e912-b503-454c-a433-4def57365169/1/egvN7ozoOcTSBBPIYkI8ygT9xgo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:db:55:08:9f:af:2a:b4:15:fd:35:e0:de:49:36:8b:fb:b7:
         8d:01:8f:d4:ec:60:44:01:0f:a5:6c:02:d9:43:46:c2:30:29:
         a5:98:4f:0c:4a:79:49:ea:95:f7:9f:3f:ae:ee:a4:8a:02:c4:
         8d:f1:49:0e:9f:27:28:a6:9e:55:8a:28:04:f6:5b:53:ef:12:
         82:51:3a:7e:65:94:37:0f:31:cb:13:7c:3f:b1:39:92:89:f2:
         86:3b:65:be:92:08:01:b5:ea:bf:69:a6:cb:e0:eb:d8:c9:03:
         f1:22:08:b5:90:94:9a:c0:fe:09:3b:75:21:d5:4f:d8:fa:4a:
         93:08:d6:02:cb:5e:3c:64:d3:ac:d9:10:3a:72:5e:1a:7a:44:
         0d:49:af:81:f6:6b:7d:36:7c:a0:b9:a6:3d:aa:d8:0d:86:8d:
         d9:4a:0f:4d:8e:12:0c:98:59:4b:f9:f3:1b:95:98:6a:7f:6a:
         d8:6a:2f:2e:28:5c:69:50:66:2f:ac:a3:e2:9f:9e:3e:d2:c0:
         35:da:49:59:e3:6f:92:11:f8:9c:38:17:a2:64:1d:0e:a3:b4:
         02:73:e0:93:c1:45:f3:f8:e6:99:1e:bf:9b:d2:1c:7e:d8:fa:
         5b:fe:69:9a:3c:20:36:1d:92:33:b7:ef:6e:b1:f7:97:f4:29:
         18:a5:40:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----