Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
File:                     OACZqBs0b5q8ryYFb1t3CU0c8RM.mft (raw, json)
Hash identifier:          UMj+zu65Gj4MBRgwDQLDuAM9RMkOGcL6oM+WgyhJ9UE=
Subject key identifier:   19:2B:EF:B6:3F:EB:CE:3B:7C:63:FB:CB:38:F6:76:53:7A:3F:26:8E
Authority key identifier: 38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13
Certificate issuer:       /CN=380099a81b346f9abcaf26056f5b77094d1cf113
Certificate serial:       0194BD4EC32520033BBE61745664FE5F4D69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 17:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:43 +0000
Files and hashes:         1: 8uKSKM8TVx970yK_aHmjajWuHlo.roa (hash: Kv8ysTx9zq+WIfK6VNPlttN4b3mr4mqd5LylYbnznig=)
                          2: 9pCmbwuWDKFww6JalPNjMXiQ2uc.roa (hash: crRW/IaBwcSVgY89PTYbAz61UCGYjtm5jlog0eAP9F0=)
                          3: DfJAzf9Q3L4tEmWPS7qqKDmlgK0.roa (hash: fuVQXP2ZqWav/yCgsPsm3fiqqB9eYt0wXu73N33zIys=)
                          4: F-WM6V0pDS_ngxIgpNgM_SOKzXs.roa (hash: YycRdDyGTbaVD3BQBXWfEPp9cD6S80QfheVTwZQO9zE=)
                          5: OACZqBs0b5q8ryYFb1t3CU0c8RM.crl (hash: R/5Oj1Qu+XLz0BRd8eHgxiWWrVDR6xwqSvTeULggF4w=)
                          6: Ox8NDyO7Lu2pVppSpwPpBrklgoc.roa (hash: cdngPKwKptE72CQ/axAKXaUmzgT1mhIjk6pmelzFUgg=)
                          7: drQvOj9TpOHRytlyOo6kxATgZOw.roa (hash: 4wVUz15BtyiS24LCP9jZgWAlCIUKAL3+afNKe8X1w18=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:c3:25:20:03:3b:be:61:74:56:64:fe:5f:4d:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=380099a81b346f9abcaf26056f5b77094d1cf113
        Validity
            Not Before: Jan 31 17:00:43 2025 GMT
            Not After : Feb  1 17:00:43 2025 GMT
        Subject: CN=192befb63febce3b7c63fbcb38f676537a3f268e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:ff:fc:f9:d9:8c:70:40:49:d8:58:b0:aa:
                    70:a9:76:c1:9a:03:27:3c:6a:07:27:f3:f7:cd:49:
                    a8:6d:5d:68:68:d9:bd:41:cc:dc:48:e0:47:48:52:
                    cc:43:06:50:ad:1a:24:cd:62:82:8a:41:ce:c3:43:
                    a9:3e:f1:a8:85:09:3c:53:e8:0d:c0:66:50:60:08:
                    8a:3e:ca:2c:89:42:b7:0f:0d:bb:70:bc:45:82:eb:
                    b7:09:ff:c8:42:8e:3d:78:25:fa:cf:e6:e0:76:de:
                    7f:d5:09:dc:7e:e9:dc:8d:df:26:23:d4:a3:05:f1:
                    0a:78:11:90:34:3a:4b:68:d0:55:db:6b:22:e4:c7:
                    20:01:fd:f8:16:aa:a5:44:99:e3:7c:9b:60:3a:3c:
                    b8:f6:19:85:2f:ad:65:f8:35:46:1b:51:56:ed:6a:
                    66:85:e2:66:99:00:8b:ad:04:0e:dc:c4:5d:dc:f8:
                    c0:86:45:e9:38:29:71:bc:f7:85:7a:23:52:d3:d4:
                    0e:29:06:4b:46:78:8e:6d:26:1b:fe:28:2a:c3:16:
                    83:b7:0a:6b:26:58:21:d9:a7:81:bb:f7:41:53:05:
                    9f:b6:08:75:b9:6e:f6:17:33:68:80:4c:81:dd:ab:
                    04:5a:2d:1d:a2:ba:24:42:f3:0b:1a:72:c7:c1:4e:
                    59:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:2B:EF:B6:3F:EB:CE:3B:7C:63:FB:CB:38:F6:76:53:7A:3F:26:8E
            X509v3 Authority Key Identifier:
                keyid:38:00:99:A8:1B:34:6F:9A:BC:AF:26:05:6F:5B:77:09:4D:1C:F1:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OACZqBs0b5q8ryYFb1t3CU0c8RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/8e501d-c088-4895-aee3-450fe33595d1/1/OACZqBs0b5q8ryYFb1t3CU0c8RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:13:9f:bb:de:ed:cc:95:ae:a3:3e:a3:90:9e:7a:91:95:f0:
         9f:f2:91:06:6d:72:58:d3:18:99:32:38:a2:56:22:08:ae:99:
         64:c2:16:0e:75:58:1a:67:11:d4:c8:66:d1:fc:f4:a2:0c:83:
         20:7c:1a:57:d7:12:1c:27:d5:f9:d2:f0:8b:50:71:66:1b:3a:
         9c:2e:e2:10:3f:02:d1:7c:45:24:de:6c:13:8d:21:2e:3f:6b:
         9c:ad:c8:95:09:01:be:24:3b:96:82:87:76:66:7c:5a:65:f9:
         f2:ea:b2:08:71:d4:9c:5c:f2:7a:a8:4d:8c:0e:9d:16:de:bd:
         73:eb:14:ea:4e:9d:27:12:93:6a:74:5c:2d:9d:3e:d9:5c:31:
         66:55:19:0f:60:bb:f3:e3:62:83:4e:d8:70:18:82:4f:e7:f5:
         7a:e1:d0:96:31:b4:90:2b:86:a1:16:97:0c:b4:df:c2:32:cb:
         33:df:8b:16:f6:0c:96:ec:7f:e0:da:2f:80:92:ca:94:77:1a:
         63:27:86:08:b7:45:b8:b6:3d:5e:ba:d9:11:86:ad:59:22:71:
         51:83:d3:56:b6:de:8a:f2:01:0e:f3:64:e5:0d:bd:a4:19:51:
         4e:ee:9c:fa:d4:ac:02:03:99:d9:d0:bf:b7:e0:de:b8:b2:50:
         f0:8d:3f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----