Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
File:                     pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft (raw, json)
Hash identifier:          sXDs6oBjIMXQ1gO7+E00fxFUBdrsNCWyOv+dvZHR+w8=
Subject key identifier:   18:6E:CB:ED:86:D6:19:25:00:26:A7:4A:21:64:01:0C:9C:C8:BA:FA
Authority key identifier: A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0
Certificate issuer:       /CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
Certificate serial:       0194BD854B3A8EBBBB163D47B1255D5E8C2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 18:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:16 +0000
Files and hashes:         1: 1-vk3La2yyZFnILeGGhJFe58kLvs.roa (hash: RGkYbhYFu12+UlOAOHZuU+R1lpv4+udmzfRD0bN3gMw=)
                          2: DDotDGxvVqfHzQUKIdqNZjL6I0Q.roa (hash: sMg43UN/gdg+NoR/7BTQI+4KqXRII5o94BppxKuF23U=)
                          3: SlaU9HSyWOLbPlhtr9erox7ST1o.roa (hash: iCddRZIQh0GzddiojJsCNP64OOzV5SHbTR0s3vNWL+A=)
                          4: Vs8JrhOp8doi0Pejo3pFyxkxSF8.roa (hash: v1TXYBsbMNvSJhKVhhxeD9z0NXgTARHKv2tqAe3hsUE=)
                          5: pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl (hash: mklD7sLsukfVZVO+IHQX+htjIWvW02Zm6qMkCKXSeXg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:4b:3a:8e:bb:bb:16:3d:47:b1:25:5d:5e:8c:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4767bc5fbcbcefb1c1c747bb0eb5337dab691c0
        Validity
            Not Before: Jan 31 18:00:16 2025 GMT
            Not After : Feb  1 18:00:16 2025 GMT
        Subject: CN=186ecbed86d619250026a74a2164010c9cc8bafa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:a6:30:73:1c:b7:52:90:7b:e8:f8:ab:83:4b:
                    50:2e:86:e5:43:3d:6e:3c:f7:1f:77:07:06:92:79:
                    ae:85:75:fb:8c:ad:b3:d4:14:fb:82:04:f3:ae:21:
                    33:fd:6d:8c:87:0b:5d:55:28:1f:c7:fc:ee:d8:75:
                    32:d9:42:22:ee:ce:1f:02:01:23:9b:79:b2:8d:ae:
                    7a:69:a6:d4:a2:c6:fa:1a:27:b8:13:63:b7:26:23:
                    0f:85:67:d1:25:ae:78:21:cc:0f:24:aa:26:67:e4:
                    2d:7e:fe:70:94:a0:e1:eb:b9:05:35:06:35:aa:b0:
                    3f:a3:7c:f1:06:b7:3f:3a:f4:77:6c:57:c4:76:28:
                    48:cb:29:1c:7d:bf:ec:3b:39:7a:c7:b9:8a:56:4f:
                    1e:0a:20:fa:ad:3b:e8:46:7b:a6:2a:fc:24:a3:28:
                    eb:35:9a:e3:92:28:7e:5d:6e:98:71:65:56:50:c4:
                    f9:86:fa:82:86:a5:65:58:ec:b3:85:92:d3:43:04:
                    69:59:0a:92:c4:cb:01:3a:2a:13:1c:89:9b:21:67:
                    d0:eb:01:7e:f4:1c:2f:2f:37:23:99:96:24:f8:e4:
                    c1:6d:f7:3f:bb:0b:6a:70:5b:2a:4c:d9:04:3a:eb:
                    b6:a2:b7:92:ae:85:72:60:4a:1d:27:a5:1f:2a:a5:
                    a7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6E:CB:ED:86:D6:19:25:00:26:A7:4A:21:64:01:0C:9C:C8:BA:FA
            X509v3 Authority Key Identifier:
                keyid:A4:76:7B:C5:FB:CB:CE:FB:1C:1C:74:7B:B0:EB:53:37:DA:B6:91:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pHZ7xfvLzvscHHR7sOtTN9q2kcA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/8065d5-04d0-43e5-a2f4-041a48d2123f/1/pHZ7xfvLzvscHHR7sOtTN9q2kcA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:24:ce:a2:cd:b0:de:84:cb:38:aa:eb:86:62:a3:ea:c7:07:
         7c:77:50:ab:9e:7e:bc:0f:7b:58:c2:57:7c:d3:21:5d:9f:bf:
         82:da:23:92:9e:a5:44:30:f4:e4:c4:cb:66:a8:53:31:2e:0b:
         61:0c:dc:db:c4:7d:e9:b4:c5:b3:95:94:71:ca:bb:01:7e:57:
         fa:74:92:56:e1:04:fb:78:96:04:a5:7e:80:a4:b3:18:6b:9b:
         48:8e:b8:45:58:1e:39:cb:18:35:74:e4:6a:a7:7b:39:e5:c5:
         79:5f:ae:ba:95:75:01:4f:23:11:91:5d:03:35:35:2f:17:c5:
         82:6d:d0:51:10:61:00:98:12:cd:7c:29:a7:db:c0:31:77:fb:
         df:3a:4a:8d:c3:0a:2a:d4:06:76:54:77:fa:dc:c3:30:50:11:
         68:9f:05:8c:2e:20:9a:d5:cc:0a:5c:a3:f7:2a:2a:4e:2c:ba:
         27:1b:14:3e:41:cd:5e:6b:cc:28:f1:ec:15:09:62:55:15:10:
         9f:84:93:fe:60:8b:33:fc:8a:fe:f4:86:e3:0a:25:48:b1:5a:
         ff:81:b1:3b:7b:0f:9f:a9:8a:35:1c:8c:ce:8b:02:35:6c:eb:
         a6:ee:af:0c:cf:8b:54:24:7a:5b:17:91:27:e1:d9:a1:18:ca:
         9f:78:e1:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----