Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
File:                     csZGC0-x70a8dFf_DPRjvcTgP6k.mft (raw, json)
Hash identifier:          0iQFn1FK9fQs5KoCTtRePipJl1p/p0hefdDCivJ8yR4=
Subject key identifier:   41:C7:66:CD:D8:BB:E1:DF:DB:16:0E:7E:E2:43:ED:E1:43:2D:75:F2
Authority key identifier: 72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9
Certificate issuer:       /CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
Certificate serial:       0194BBCE46C885593022630555AD415705F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft
Manifest number:          0797
Signing time:             Fri 31 Jan 2025 10:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:45 +0000
Files and hashes:         1: 8FajeVqA6rp1U8VNJu9yQBP6r54.roa (hash: UxuQ4k50fW+4+o9lGY7FVNHYu3QDBc/d+VkzXgLQ8PU=)
                          2: HHgODZNYaWmnAzu5Y5NNc-vPrnI.roa (hash: 7yz6aWHri/zQdagup6M2sNC0XfiDvGTcFvrpM1dBPtk=)
                          3: LTAgEPcIg7XQBzK3Cj9I5PVLMk0.roa (hash: eGy7JgSFjwLiCaGzQfjzKTQz7d3s5HQiA3TVI/81xK0=)
                          4: csZGC0-x70a8dFf_DPRjvcTgP6k.crl (hash: 2O9GZeAEcscGGz9RWtS2chhy2I363SuY4i3p3U8ZBq0=)
                          5: ho0kqJfEMlf2sbVibqdADBrNulw.roa (hash: 5FbaBKa2Ni/RgBsUj459P0dwR0J+n0l8NmhVw0Fcivw=)
                          6: knF6nEQYYWVpL3rBGNBc8_KXbEw.roa (hash: mTLWLsXkA+rHwy07iVSYRIKt6HL9jKzw2c+wO1sgCtg=)
                          7: spZ3gq52Rs1Brqgro5g4rfptHLc.roa (hash: JmluqSt/yaPZfKeNSsXMXym5ysVFHQT+kOW0mDU1DxQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:46:c8:85:59:30:22:63:05:55:ad:41:57:05:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72c6460b4fb1ef46bc7457ff0cf463bdc4e03fa9
        Validity
            Not Before: Jan 31 10:00:45 2025 GMT
            Not After : Feb  1 10:00:45 2025 GMT
        Subject: CN=41c766cdd8bbe1dfdb160e7ee243ede1432d75f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:91:59:78:0e:0f:17:c2:1d:dd:54:0b:b1:f9:
                    bd:63:42:bd:f0:90:fb:14:43:2d:79:51:be:32:50:
                    2f:53:86:e6:18:af:7c:70:cd:8e:e0:5a:8b:07:e1:
                    35:39:44:d2:05:8f:05:2e:bf:fb:59:dc:75:96:4c:
                    78:e6:b5:99:88:ec:4f:06:c9:97:b7:97:a3:07:96:
                    fc:47:e9:8b:bb:d1:b6:c0:d6:b8:dc:c8:8f:34:16:
                    a2:4e:af:dd:36:d6:51:f4:7c:fb:b7:2b:23:9d:f8:
                    b3:88:3a:ae:8a:eb:69:1a:08:3b:e0:3d:ab:8d:d5:
                    78:9c:c6:57:fa:f3:23:29:e3:e1:80:ca:95:6a:1c:
                    58:ee:b0:7f:b0:0b:c6:24:55:8b:95:db:88:aa:81:
                    cc:80:5f:05:15:b7:54:e7:7e:cc:73:d5:81:8a:f1:
                    fc:ca:ca:e0:ec:55:4a:64:fa:02:ee:2b:f4:41:0d:
                    cd:ab:cd:a2:92:4c:39:96:30:ab:e6:fd:f1:ba:37:
                    97:b7:73:03:ae:71:e5:55:e3:78:56:28:bc:70:93:
                    ec:92:96:c8:14:fd:ee:6e:c0:e8:93:a6:80:d7:85:
                    ca:81:06:9a:14:05:89:cc:26:c5:97:47:f7:f2:b3:
                    f3:8b:08:27:04:4d:3d:b0:9f:64:ba:6a:93:81:db:
                    47:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C7:66:CD:D8:BB:E1:DF:DB:16:0E:7E:E2:43:ED:E1:43:2D:75:F2
            X509v3 Authority Key Identifier:
                keyid:72:C6:46:0B:4F:B1:EF:46:BC:74:57:FF:0C:F4:63:BD:C4:E0:3F:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/csZGC0-x70a8dFf_DPRjvcTgP6k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a5ce7e-7d1d-48ef-8f36-0b740a36a8ee/1/csZGC0-x70a8dFf_DPRjvcTgP6k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:93:d2:03:87:87:f3:85:7b:fc:78:01:a5:66:fc:56:86:af:
         a2:b3:39:51:86:13:06:1d:5c:80:99:32:7d:9f:3f:70:44:c5:
         66:1e:cc:f8:90:4f:56:06:75:d7:77:12:d7:e7:9d:e2:cd:cb:
         a8:40:1a:9b:c2:e6:40:ab:27:c4:0f:8b:c5:e8:f5:26:d8:96:
         dd:1a:a5:49:dd:f9:e8:7a:4a:65:b3:36:67:92:3e:83:9c:a4:
         d4:23:4a:30:d1:f3:28:81:9e:db:f7:1e:56:d9:d7:90:0d:23:
         48:c1:79:0e:f3:bb:c0:19:d2:d4:f9:0f:4f:ee:99:c2:20:f7:
         88:38:f4:6c:08:48:42:bb:3b:2a:f6:1e:4d:e4:7a:25:9e:4e:
         5c:6c:e5:22:5f:3f:ae:c8:62:e6:44:40:34:ef:2f:1b:3d:17:
         01:cb:bb:7f:1b:ae:63:45:7a:74:e9:a2:f0:f7:a6:68:12:0c:
         a1:32:af:77:e9:ef:37:49:6b:87:e9:ac:0f:b3:c6:3e:60:2c:
         cc:5c:21:b6:59:4e:b2:2e:e0:de:ba:3b:15:e2:99:84:af:4f:
         cc:85:28:99:62:59:83:f5:6d:42:da:b4:4c:da:20:eb:20:bb:
         54:f8:4a:9c:9d:86:5e:56:dd:7b:8f:fa:4e:5b:d4:46:3b:30:
         c1:da:6f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----