Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft
File:                     cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft (raw, json)
Hash identifier:          0oD1timAb6D/XY0Iz9BYPQdkRpKg0QBCIAtor1yjyGI=
Subject key identifier:   98:22:71:40:05:B4:ED:55:62:F3:8E:F2:F5:3E:94:8C:62:BA:B2:94
Authority key identifier: 70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1
Certificate issuer:       /CN=70fee176f51ce8fd81424ff73a5417341279c0f1
Certificate serial:       0194BD4422F44E2CC1125F72C0FDE9A07B05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft
Manifest number:          1435
Signing time:             Fri 31 Jan 2025 16:49:06 +0000
Manifest this update:     Fri 31 Jan 2025 16:49:06 +0000
Manifest next update:     Sat 01 Feb 2025 16:49:06 +0000
Files and hashes:         1: 0A3eCrBh6zPFdv4NnTG-Oyjc7lI.roa (hash: Hpqtml2zx5yO1KtzPny+alx7D2TcQ3WX0ZxI8Mvqcow=)
                          2: 1-JbKVgC2zlrxckVHgIVlicdCoxQ.roa (hash: 3pR+BLofcLce+i07bAe+gODFuY9E/BGeWToEN758yac=)
                          3: AIDt6CWoVr9jIIt_ujc62HoYRJ4.roa (hash: A+hTsbyaE6tTKJYIPPdu0Kx30wfj2E6e3KM/UOa3qeI=)
                          4: cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl (hash: lSAEwLHNlexWGvQFA8nSCh+curX8eoHIkpQAU97HAFA=)
                          5: pYMEzjMmoF7fFNP0-wloJu6W4vc.roa (hash: IL07ig7Bpq656fWNgVYspfIH+B2/5c+7wcjKfg/Ljo0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:44:22:f4:4e:2c:c1:12:5f:72:c0:fd:e9:a0:7b:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70fee176f51ce8fd81424ff73a5417341279c0f1
        Validity
            Not Before: Jan 31 16:49:06 2025 GMT
            Not After : Feb  1 16:49:06 2025 GMT
        Subject: CN=9822714005b4ed5562f38ef2f53e948c62bab294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:46:c3:09:b4:21:4d:99:e6:8b:cf:0a:41:5f:
                    10:6b:60:32:d2:6a:31:25:59:71:6d:d7:ca:a9:c0:
                    f4:3a:de:7e:cd:b0:0d:9e:10:c5:1d:4d:19:e3:8c:
                    45:f4:80:88:d2:e6:8a:b3:5f:bb:c1:40:07:9d:db:
                    41:1c:6c:0b:ff:a6:13:b0:7d:c7:51:cc:dd:f6:c7:
                    33:96:90:fc:d5:8f:25:03:f9:58:af:9f:8f:c1:61:
                    c4:e3:06:b9:f0:63:4a:a9:25:cd:28:30:39:01:64:
                    2d:fb:07:d5:e8:af:3f:45:b9:93:48:f2:51:f9:97:
                    4f:dc:01:ca:b2:d3:7e:ed:ef:0b:86:15:1c:93:85:
                    78:88:13:fc:5b:df:55:74:d1:b6:93:05:61:73:d5:
                    a7:4b:15:d1:d8:73:a1:f9:c9:22:33:41:d9:67:ac:
                    e4:e3:b9:93:98:36:a4:39:28:92:4a:fd:33:5b:fb:
                    e6:47:e9:d0:2d:c9:a9:44:60:4d:11:76:0a:77:12:
                    a7:d4:09:70:cb:5e:01:e5:bf:ea:e7:80:be:fe:63:
                    92:b2:51:31:b6:21:51:8f:82:75:8f:eb:db:ea:9f:
                    16:78:f4:7a:45:78:67:27:ad:d0:f5:08:b7:48:4b:
                    68:24:05:ef:b7:1f:61:df:50:c0:7f:8e:3a:6f:81:
                    d4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:22:71:40:05:B4:ED:55:62:F3:8E:F2:F5:3E:94:8C:62:BA:B2:94
            X509v3 Authority Key Identifier:
                keyid:70:FE:E1:76:F5:1C:E8:FD:81:42:4F:F7:3A:54:17:34:12:79:C0:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/4be222-6482-4db9-9a5f-752e9b8b0756/1/cP7hdvUc6P2BQk_3OlQXNBJ5wPE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:a7:ac:3e:36:34:30:3c:e7:7a:3d:77:1e:0b:d1:81:10:b4:
         3d:6c:2d:23:46:ed:3b:2a:7d:59:16:cc:e1:67:e8:1f:37:c5:
         e2:96:4d:fa:bf:3a:c0:51:b7:9c:8e:b0:2c:10:d8:0b:7b:0c:
         00:4b:37:20:e3:63:7d:f4:16:62:c9:02:1f:4d:27:86:fb:19:
         38:7b:ac:f6:be:83:6b:9b:14:27:5e:11:98:fe:61:bf:dd:71:
         26:70:d8:56:27:d2:e6:22:11:6a:bb:ca:5f:94:ac:5e:99:96:
         7c:8b:01:41:59:a8:b8:44:76:89:03:be:e2:36:82:41:cd:8e:
         51:58:89:8a:85:de:e2:a5:92:74:6e:53:32:d7:1e:4a:bf:84:
         c2:1f:a9:63:b5:32:c3:83:75:90:79:99:af:6e:af:8a:ff:a0:
         27:8d:be:8b:b9:14:9f:0c:b4:78:c7:b6:c7:c0:5f:00:ad:61:
         2f:50:40:3e:d5:8d:4c:6b:61:33:f3:a4:73:48:f0:f2:b0:c1:
         aa:d4:b1:e7:fa:e4:de:7c:85:70:5e:c6:47:0f:61:56:1f:4f:
         05:b2:b1:58:e2:3a:32:be:66:84:4a:f9:ac:2c:11:c3:e5:d3:
         95:7e:01:e1:68:4c:37:20:4e:29:75:61:97:06:e3:48:bc:a8:
         9f:a2:88:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----