Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft
File:                     8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft (raw, json)
Hash identifier:          gBoOuqV98BkrbMyizTLBKwK8keu0B4ASexJiIwgw/eg=
Subject key identifier:   BA:A1:4D:F7:DA:9C:7B:CB:42:14:65:B2:3B:BC:7A:EC:26:2D:88:EA
Authority key identifier: F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7
Certificate issuer:       /CN=f219383a3e3f116a9bcc4769c8517cdce40765c7
Certificate serial:       0194BCAA174E1C23B1B08B8525600584DDD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft
Manifest number:          10
Signing time:             Fri 31 Jan 2025 14:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:51 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:51 +0000
Files and hashes:         1: 0c_l4ysRLhoLyNhVK3O7GIWEcSo.roa (hash: wCgtD5GTaTUHzlGOdOblih6qPlBPABAlJQ113X+Jw+c=)
                          2: 8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl (hash: ps1fRNq6L6DxPEsSD60+5h5Di0V73VQYlon4MMmo2mw=)
                          3: 97Bdc61qbgqdAvjBmYkfFO0y1Ww.roa (hash: oUOsuSRnUrU8knVeKfFc9QKPrgL79MjXgwUrkum1/pg=)
                          4: L4cYTmcMFfvtup8EOVfWGJu2vX8.roa (hash: erMMZD+S+Fs2aYT1Dy3VVlR447qTafNqOv1NGE4DFgI=)
                          5: Z29YwFdCw8mb-MR3SYDyBs3lmMg.roa (hash: J+lE3dbsGRla43+sCei9+kYRVYFXdgjow6d3cOzy75c=)
                          6: bFysswJxqvMNZTsaf64flp1ZIQc.roa (hash: uwCDzi7rd+IXP1Mw2HNimdPO1YXu5Quq3N1iTcDCSa4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:17:4e:1c:23:b1:b0:8b:85:25:60:05:84:dd:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f219383a3e3f116a9bcc4769c8517cdce40765c7
        Validity
            Not Before: Jan 31 14:00:51 2025 GMT
            Not After : Feb  1 14:00:51 2025 GMT
        Subject: CN=baa14df7da9c7bcb421465b23bbc7aec262d88ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:88:61:c5:4c:e3:40:a8:18:ff:30:54:b5:e2:
                    02:3c:20:70:0b:d6:77:c1:c7:f3:35:ae:21:2c:30:
                    e7:07:d4:ca:d8:01:b0:7a:1f:2f:ec:c0:21:9f:9b:
                    01:3f:73:35:65:19:e6:0d:09:e8:09:1a:f2:28:84:
                    cf:3f:31:e1:86:d0:fa:47:5f:96:2b:f6:ea:5a:85:
                    c2:1d:0b:70:74:d4:eb:48:fc:e9:a8:6a:41:5a:8f:
                    25:d7:55:f8:42:7a:8d:14:e8:a9:e6:77:87:cd:0f:
                    d9:53:c5:f7:49:31:e9:6d:63:5e:c4:dc:8d:94:eb:
                    fd:97:60:f1:ee:2e:38:85:4d:47:17:5c:4e:b8:5b:
                    3d:75:2a:11:37:0b:64:18:c6:b7:5d:8b:46:91:d8:
                    db:81:a5:eb:1e:42:50:6b:f2:fd:88:6b:21:a8:6c:
                    e5:b0:89:36:c2:48:ce:30:ff:53:91:8b:5e:ea:1e:
                    78:a5:e6:73:7a:05:c7:93:0c:ba:d3:f6:c6:26:64:
                    3a:08:7b:98:41:6c:9f:57:32:9d:33:89:c3:71:a4:
                    0b:40:80:3c:9d:cc:6b:aa:56:c5:33:ff:4b:45:c1:
                    9e:64:b6:6a:db:25:e7:22:1a:4b:df:38:83:af:48:
                    5d:0c:1a:84:67:34:c9:fc:52:e3:d1:9a:c1:84:99:
                    fa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A1:4D:F7:DA:9C:7B:CB:42:14:65:B2:3B:BC:7A:EC:26:2D:88:EA
            X509v3 Authority Key Identifier:
                keyid:F2:19:38:3A:3E:3F:11:6A:9B:CC:47:69:C8:51:7C:DC:E4:07:65:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hk4Oj4_EWqbzEdpyFF83OQHZcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/7cf0b1-2298-4484-bd80-6cc9f6cbaac4/1/8hk4Oj4_EWqbzEdpyFF83OQHZcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:f2:c8:31:f8:d6:be:05:c7:a6:4d:ea:9d:1c:95:5a:da:b2:
         52:e5:bf:0b:9d:b1:82:45:ff:2d:7e:5d:ec:9b:a9:c7:49:d6:
         24:88:9d:66:46:54:a5:71:a3:ec:bc:10:7f:57:6b:df:5b:86:
         9d:11:16:2c:26:6a:fb:10:96:91:27:b6:82:18:ff:ed:59:16:
         99:04:0f:de:de:c3:55:56:3b:81:e7:2c:69:87:f9:ff:4a:97:
         56:c5:2f:25:8c:8e:b4:ad:e3:d0:01:a8:e4:86:41:0f:b8:76:
         3d:ce:74:c6:33:45:45:99:4e:5f:2a:97:3c:87:e0:a3:69:02:
         5f:d3:d9:dc:e2:1f:80:af:51:90:0c:b0:a1:f5:b2:c9:cb:b6:
         7f:8f:9c:f1:d1:b6:a6:ad:bf:bb:58:ac:26:6a:c4:cb:c8:72:
         27:ee:e7:ce:0c:ad:7b:05:9d:7f:9e:b2:36:49:55:ee:dd:0b:
         4b:9b:24:14:c5:4a:8f:db:72:77:b9:f0:51:89:fe:d0:27:a0:
         aa:c9:e1:91:89:7c:a0:a2:b4:af:11:da:4e:2e:d6:73:66:6e:
         d6:f2:4b:83:6b:cb:94:ae:c9:83:6d:cb:04:12:18:1c:21:72:
         90:73:5d:9f:49:e5:13:b0:48:c7:bb:26:1d:6b:99:7c:29:4c:
         2a:38:01:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----