Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
File:                     ThXfaIw66uP2he1Es5bCGYOVhh0.mft (raw, json)
Hash identifier:          F7EcSi6SMBUaJ3/I0ZBO6TlntiqE3VHkrXPU7eNVJ8Q=
Subject key identifier:   BD:74:98:93:41:87:4E:01:03:EE:0B:2C:F5:98:E4:43:9E:BA:47:AF
Authority key identifier: 4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D
Certificate issuer:       /CN=4e15df688c3aeae3f685ed44b396c2198395861d
Certificate serial:       0194BC3C8C2ACA9CA8FAC9C380E3046CC313
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft
Manifest number:          09D2
Signing time:             Fri 31 Jan 2025 12:01:12 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:12 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:12 +0000
Files and hashes:         1: GTFBgv2tNjcuxAQIe01brH4jwTk.roa (hash: Mc8ui7CXRHASlbfIuKweFLL2cR+DG52g7wgx3xsTD/U=)
                          2: MVWQHZ7poQZSNaxcXHSkE1cM3ac.roa (hash: tbC0zEQlc9n1vwOMWAcwfJO+Pz8J+NOLSdpR6f+1vt4=)
                          3: SeVKeWDlifWewWLGV-ux3X3eP-U.roa (hash: iAr3BiSouxw0/1U0gfsb+0eTpsmeqPEqcNVOd7duq/I=)
                          4: ThXfaIw66uP2he1Es5bCGYOVhh0.crl (hash: +tY++Bsltsg5VVyAYEP+FJZk/s8E8GC+bVRluoRfFag=)
                          5: VQHe2S-7j8SMoLbiYSjz9IrWVbc.roa (hash: 4EmRDMW6ZpVFVYfLs3GRzG+ePL4wqHpJMD783K3OCFc=)
                          6: j5nYf12qE5CfbgsAVy8qNXHXbNM.roa (hash: HTjM3or3TJ0Q74+ID5aPefChtbKzUVgijSm8ozVS3uU=)
                          7: r34i9MogSBxeDWHyGIhH_hkNvH0.roa (hash: /LsOtQwuG5S1pPv/GDxv95WqbubjE7D9iX5jL74tvxg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:8c:2a:ca:9c:a8:fa:c9:c3:80:e3:04:6c:c3:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e15df688c3aeae3f685ed44b396c2198395861d
        Validity
            Not Before: Jan 31 12:01:12 2025 GMT
            Not After : Feb  1 12:01:12 2025 GMT
        Subject: CN=bd74989341874e0103ee0b2cf598e4439eba47af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c3:62:53:e8:76:a0:dd:68:ce:12:db:41:af:
                    0c:43:06:03:53:6e:47:b0:f9:31:4b:a0:c3:8c:67:
                    ca:a8:23:d7:b4:f9:c6:78:41:03:9e:03:33:a0:11:
                    4a:c5:73:40:2b:8a:37:c9:d8:95:cc:52:d9:e5:55:
                    fd:e1:76:82:78:84:b9:57:a5:7f:53:6a:a7:5d:9d:
                    fc:6b:9d:41:af:0e:ef:13:75:4c:b0:b1:fc:5d:5a:
                    fa:39:d2:96:7b:4a:17:89:2c:3f:f5:ed:a0:c5:2a:
                    d5:da:4f:a4:5b:92:64:87:5a:44:a6:73:e6:12:17:
                    25:b6:bc:b9:af:2e:5b:86:71:6c:e7:ff:b8:81:cb:
                    3e:85:cb:0b:da:33:23:60:30:28:2d:70:58:d7:84:
                    ae:89:f0:57:37:45:ce:34:35:03:25:c8:86:87:7d:
                    94:68:28:15:5c:f6:e0:83:df:3e:22:f0:67:fc:67:
                    28:7c:bb:f3:7a:9e:03:a6:00:2b:f9:54:59:fc:a0:
                    ca:43:c2:c8:f5:f3:fb:ec:35:ce:ee:45:35:7f:eb:
                    b4:3b:40:bb:65:ed:f0:af:2d:b9:6d:45:07:40:fe:
                    81:34:aa:0c:bb:22:5b:f0:16:e7:1c:a0:a4:b8:ee:
                    a5:c2:4c:26:00:9e:06:e1:2f:6f:cd:8f:1d:30:c2:
                    0f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:74:98:93:41:87:4E:01:03:EE:0B:2C:F5:98:E4:43:9E:BA:47:AF
            X509v3 Authority Key Identifier:
                keyid:4E:15:DF:68:8C:3A:EA:E3:F6:85:ED:44:B3:96:C2:19:83:95:86:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThXfaIw66uP2he1Es5bCGYOVhh0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0bf7ab-5aab-4337-a02a-8a6e554196bb/1/ThXfaIw66uP2he1Es5bCGYOVhh0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:8e:8c:ad:81:14:94:4f:0d:bb:1a:1b:df:47:d8:30:c5:22:
         2d:de:98:85:16:a7:c0:27:10:b4:e1:92:c3:a8:46:b2:5f:56:
         6a:a8:4e:ee:44:9d:d7:81:b2:8e:d1:5d:ef:fc:4b:7f:6a:1e:
         77:ea:84:e6:ca:a5:4b:df:9b:6c:72:d0:75:f8:ae:84:4a:7a:
         82:dd:e7:90:f7:b6:13:b2:c1:f9:6c:cf:3c:53:4a:e0:a8:6b:
         05:52:fe:f9:ff:0f:e3:93:14:fc:9f:e5:5f:3a:17:1b:8a:90:
         db:bf:6b:bf:73:e3:6e:ff:3e:c2:61:21:8b:94:97:11:6f:fc:
         63:1c:9a:81:c4:57:de:00:f7:06:1c:28:5f:54:e3:ad:d4:17:
         0c:dc:3c:8e:9c:a7:29:3a:77:bd:f8:5b:b9:64:e3:b9:1d:b2:
         ed:25:11:79:a6:4e:0a:83:a0:c5:61:fb:65:df:8b:f0:16:2f:
         17:3b:6c:4b:ea:0f:68:df:81:f3:7a:06:f7:eb:6b:d1:59:c1:
         48:b7:6c:a2:fd:f8:b6:1c:ea:50:a3:b1:aa:80:16:d9:cc:bc:
         a6:14:e0:91:02:ee:9b:85:1a:15:63:01:59:a4:0d:0b:a6:e3:
         13:92:ef:a6:e4:43:52:83:fd:76:b2:71:37:4b:84:ed:23:eb:
         dd:51:7e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----