Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft
File:                     GtoiXLfylBbnU0aV-_shdi_uk8g.mft (raw, json)
Hash identifier:          P1/wT+5mW2dXWHJzrytuJ65C/FEjInfB8IgBUPaLtLQ=
Subject key identifier:   CE:7E:95:41:34:03:06:07:7E:57:F2:C1:50:3E:A9:B1:53:A7:46:87
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Certificate issuer:       /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial:       0194BC732896621901E3ECD4DD1BA88A93A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft
Manifest number:          132C
Signing time:             Fri 31 Jan 2025 13:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:51 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:51 +0000
Files and hashes:         1: BbcQvGU97KlhIMtU8cc3f40HL4o.roa (hash: YFs+AANlafd4hYz7NEsI69q2UZVrrdrqMmHZEi1e/6E=)
                          2: GtoiXLfylBbnU0aV-_shdi_uk8g.crl (hash: 20q573RgHtHz2wqf8X0ibePsYDfmYQCI3z/C023rABA=)
                          3: H2zFxLl2vd3jDHZ3ywYA0G2xNqg.roa (hash: BqYmH/iAX0kcbukEf4yVg0L7f2FSyF2VTeMlZRZQfsw=)
                          4: OVN1KA3X2-427Ts0pRfktqRjpAo.roa (hash: UH/528Nv0M/lj/aSssxhWkEuiRAEztROXljsntpm8LE=)
                          5: YA6ReAbhWQSyR_vf6Zg5g4dooUc.roa (hash: YT0NaWujuK6WDixqbB1Sy+28TuDP8p9GMfj4mjicvuw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:28:96:62:19:01:e3:ec:d4:dd:1b:a8:8a:93:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
        Validity
            Not Before: Jan 31 13:00:51 2025 GMT
            Not After : Feb  1 13:00:51 2025 GMT
        Subject: CN=ce7e9541340306077e57f2c1503ea9b153a74687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:78:86:6d:2e:0d:b5:5b:64:12:71:0f:a7:18:
                    62:d2:90:bc:b1:1d:b3:85:42:4e:51:98:e7:61:eb:
                    88:9d:c3:a0:3e:5e:66:ab:cc:34:9a:ac:f4:12:77:
                    3d:5c:b4:56:53:07:1d:dc:ed:34:11:eb:32:11:8a:
                    66:55:93:8c:57:83:df:2d:73:c7:b0:49:8a:c4:1e:
                    ed:5e:dc:5d:6b:87:5e:32:b5:5f:bf:15:42:5a:4c:
                    08:28:3a:0d:b6:3d:75:85:bc:13:d7:2f:dc:e4:42:
                    f6:56:3d:fb:34:af:b6:b3:41:e7:40:7f:63:b7:70:
                    9f:3f:16:bd:ce:33:69:75:b7:51:c5:73:05:45:09:
                    e9:27:c2:4e:8e:3a:21:00:ae:28:2a:11:c9:a0:ca:
                    3d:fa:48:12:7a:98:2b:2c:6f:8a:36:53:d1:ee:1d:
                    b8:c7:44:a1:de:b1:ff:27:14:ee:d4:02:ec:1b:7d:
                    e0:e4:f6:b0:84:31:db:a5:6a:c4:cb:0d:2e:05:12:
                    9f:7f:c9:c6:d6:2f:38:83:72:ce:32:70:1f:72:90:
                    46:e6:f5:00:a4:bd:30:f0:0b:71:57:f6:32:c2:b6:
                    9e:77:6d:55:14:3d:bb:fd:d4:64:81:a1:4d:e0:ce:
                    6f:07:e8:48:00:00:05:92:0e:af:ed:8b:07:65:a2:
                    42:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:7E:95:41:34:03:06:07:7E:57:F2:C1:50:3E:A9:B1:53:A7:46:87
            X509v3 Authority Key Identifier:
                keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:bf:c6:40:32:cb:46:b6:72:0c:e8:82:74:fa:74:44:f6:e4:
         f9:84:22:65:45:e1:76:9a:fe:30:05:cc:32:b4:5d:d2:05:07:
         e4:9d:d0:2e:df:cf:14:06:4a:00:d9:0b:fa:c5:73:42:88:9d:
         d4:cb:5b:58:c3:23:18:a1:55:3d:93:e3:d6:73:60:7a:94:c0:
         fb:a7:67:58:62:94:fa:db:ca:fb:6b:2d:45:4b:a6:c5:3f:e0:
         a5:88:db:9b:06:d1:fb:09:eb:86:38:84:4f:ae:a2:c8:c4:70:
         fc:fc:01:aa:d5:98:62:c6:2b:1f:d7:e7:92:ce:cc:ca:7b:93:
         ee:4b:c5:47:74:d7:48:ca:ee:6e:75:36:38:d7:f0:de:db:a3:
         df:65:e7:c5:56:d1:fa:57:2d:29:14:b3:ad:3b:ec:c4:9d:3c:
         38:5f:ae:12:fa:83:71:30:b9:ec:95:8a:bf:ca:28:f3:06:78:
         29:a1:9e:9d:60:91:57:87:5d:b8:3a:0a:8f:5b:ff:d9:2a:43:
         d7:ec:27:9f:29:ec:b0:f1:1c:4d:1d:9e:cb:37:ea:41:10:6c:
         0e:a7:1c:bd:83:24:0d:9a:25:fc:a2:2e:a9:51:b5:67:14:8b:
         96:c0:80:24:f7:ac:05:74:bc:f8:b1:61:db:a8:e3:30:05:68:
         f3:1a:33:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----