Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
File:                     nM47EZfQz5URVAVypY_TctzAdIk.mft (raw, json)
Hash identifier:          bqn87Ft7Zpb4BdtuSAscSgEOOdVdS8gMXjEqi2XxN24=
Subject key identifier:   A4:D5:0D:5E:A7:97:FE:43:DF:00:ED:48:19:0C:16:FB:21:91:BB:2C
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Certificate issuer:       /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial:       0194BC3C589C83681258B01A8E07F03BF2B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft
Manifest number:          0F25
Signing time:             Fri 31 Jan 2025 12:00:58 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:58 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:58 +0000
Files and hashes:         1: B5L5vO55nBhfniljBpOUow8aXpw.roa (hash: DIMd34dyf8uJUIUl3TvafcV9IS2e08ZcTMFZLeGk8KM=)
                          2: JafDMsZo_2WlBv1_b3upjycXmLU.roa (hash: cGcJ9xKOVuAlrxxUBxsd3T744wFpR+9phZElM6fNzW0=)
                          3: SHsQx5nLK3je9BRJdGpJA5FmBJw.roa (hash: w1LS0Na0/a/or8fsG3pHVRaGF64EW4fSRED25Ol57DY=)
                          4: bVTa17baMARG71NZ_lURgWWh_4Y.roa (hash: A1ALFNaBHdD7deqRm4EdGoE1FRnMJSkvg8oyd+Kqmgc=)
                          5: lkc-0MlfE6wjagT9foeguXGZhBk.roa (hash: Dk9iF0id/HpCNZDFa+BXpH9AMMGx3UOmasYJ8e7rqkM=)
                          6: nM47EZfQz5URVAVypY_TctzAdIk.crl (hash: SE6iI99UfBNAO0imvQG8BzVgd3kHhZWk15ymYLp4fcw=)
                          7: rfouL44lCXKFlJx3f-T9zbjuGS4.roa (hash: tCYRZzQeGaABrV6yDW5xOTTpQ0NtqSv/VFgzFAs4QHg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:58:9c:83:68:12:58:b0:1a:8e:07:f0:3b:f2:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
        Validity
            Not Before: Jan 31 12:00:58 2025 GMT
            Not After : Feb  1 12:00:58 2025 GMT
        Subject: CN=a4d50d5ea797fe43df00ed48190c16fb2191bb2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ac:87:00:30:dd:1a:63:b8:4f:47:c5:6d:07:
                    a0:fb:dc:1a:17:f9:e4:0c:e2:d2:86:09:be:d5:f9:
                    85:7d:4e:dd:2b:a7:d5:bd:8b:ed:40:3b:5a:4b:93:
                    f8:58:29:2f:dc:9a:87:44:42:1c:9e:e3:f4:05:23:
                    d1:1f:b3:b3:8f:c0:a0:7f:67:c3:48:26:c2:a4:70:
                    aa:89:4a:3c:22:a7:86:b2:8f:9f:61:fb:53:05:d0:
                    2a:78:0c:e9:42:9a:f7:b8:e3:67:74:2c:22:b9:7c:
                    a5:79:ca:a6:2a:23:3b:3e:e1:36:ad:1f:58:08:e1:
                    cb:9c:52:8d:b9:87:04:79:16:97:08:87:34:3c:3b:
                    71:9b:cf:d5:5e:ff:af:9d:fb:10:c6:33:2f:8c:3a:
                    f8:c4:81:94:9e:29:79:a9:2b:d5:7b:fb:6c:e7:f7:
                    46:9e:df:75:1b:b0:e9:c0:29:79:5f:cf:0b:8a:07:
                    89:5a:19:92:38:e3:6e:86:61:f8:d2:38:1f:ec:78:
                    17:5a:e5:22:5e:aa:12:1a:c5:46:12:73:1a:a0:2a:
                    92:c3:0d:14:3c:90:f2:4e:98:d6:8f:00:3a:65:62:
                    0d:cc:98:4a:5a:4d:34:de:43:2d:b9:14:42:06:29:
                    14:50:5d:91:6a:d9:cc:60:df:d8:d8:e4:ad:48:19:
                    18:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:D5:0D:5E:A7:97:FE:43:DF:00:ED:48:19:0C:16:FB:21:91:BB:2C
            X509v3 Authority Key Identifier:
                keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:a8:55:01:b8:e9:f7:14:ca:8c:f7:9d:1c:a9:7b:58:43:e6:
         96:ca:20:d5:14:34:f6:e3:67:fb:12:ac:71:ba:fa:f4:43:9a:
         db:aa:6b:10:d0:ec:07:fd:5c:cc:97:00:47:70:1a:61:6c:92:
         39:1a:4e:d0:39:93:04:53:0f:b6:4a:7b:10:14:22:bf:1b:8c:
         81:56:34:34:7b:38:bc:2b:47:ba:b8:5f:d3:7b:51:de:38:4c:
         be:a9:a6:0d:c2:8e:70:27:3f:f2:a4:63:42:a0:b1:2c:92:e4:
         52:fd:d3:94:c4:79:39:74:44:00:4b:ee:c4:c6:b9:7a:36:19:
         16:19:2c:30:9d:67:15:fb:a1:60:74:4f:5f:39:c0:f4:bd:ee:
         29:d3:b2:74:92:60:bf:8d:8d:ea:51:09:18:82:f7:ac:e9:47:
         9d:1a:c7:cf:be:9c:33:8b:71:cf:67:3d:ab:b8:79:3e:7d:59:
         9a:d0:b2:56:ce:cb:a4:7f:ed:52:3f:fd:92:7b:52:19:56:ff:
         79:89:db:75:9f:0f:22:a0:d0:01:5f:8b:18:29:e3:01:ab:6d:
         d2:2a:fa:55:99:75:ea:10:84:8f:5b:b1:dd:26:58:5e:93:af:
         58:90:6a:31:aa:75:d9:e9:94:a7:e1:ce:4b:96:1d:a0:af:a5:
         1d:53:11:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----