Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
File:                     F92cI69p7Czbb-K5k260lM_RYh8.mft (raw, json)
Hash identifier:          LJGNEYncUssgE6/eyJdiP/JbHb+2Qy5ABEttbqjFd/I=
Subject key identifier:   C8:3F:8F:34:26:B6:8A:A4:75:4B:85:92:D1:E5:AD:6E:01:58:A9:E0
Authority key identifier: 17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F
Certificate issuer:       /CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
Certificate serial:       0194BC3C8F78CF4DCD7C7D272956784D343F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft
Manifest number:          1438
Signing time:             Fri 31 Jan 2025 12:01:12 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:12 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:12 +0000
Files and hashes:         1: F92cI69p7Czbb-K5k260lM_RYh8.crl (hash: e9w/WZWD/tdVMvvv++wIqp/JDdr1zCLQiLG3flsFhzg=)
                          2: Kj5ZZT_QMGV8ggXHA75R7vnwc-Y.roa (hash: p+eVg1Sb75Egr4y3obi4lrz5P3sy7D8NwnWNwRsHb70=)
                          3: NIDKHm7_cZUNMihpKQDzfd-ZjRA.roa (hash: kaf5wyEDhcWh11clAHcF36F7W+dfPnAjUXKofTGxPck=)
                          4: PGLRT7UqxBVt5ZGCBsJhv8rP6qQ.roa (hash: RTH/rFrhQw74U5knflYk2x+P7ymGF/LwjJP/pIPOpvM=)
                          5: amXihoIti_1rSNyGXmBzzCK307E.roa (hash: nLmxvSWML2dah+dCWe4SPAyANy3yKBIMLrJwHa4DIEM=)
                          6: cmnKESnx3pYzc_9zB3Nnd1QMDJ8.roa (hash: yO89D9gVpePds41T+w6tzQYVY3S3xzIRop0YPL+B3+8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:8f:78:cf:4d:cd:7c:7d:27:29:56:78:4d:34:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17dd9c23af69ec2cdb6fe2b9936eb494cfd1621f
        Validity
            Not Before: Jan 31 12:01:12 2025 GMT
            Not After : Feb  1 12:01:12 2025 GMT
        Subject: CN=c83f8f3426b68aa4754b8592d1e5ad6e0158a9e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4e:3b:dd:de:10:47:b2:35:a2:dc:6c:47:2b:
                    26:b3:19:70:9e:13:82:33:58:6e:23:d4:ce:c1:dd:
                    da:55:8b:ab:fe:6d:7a:35:d2:d0:f4:b8:67:93:b7:
                    55:93:0b:62:43:c9:cb:71:54:ef:e6:5e:f2:c0:a7:
                    1a:88:04:27:04:33:b5:8d:37:31:93:d4:cf:29:36:
                    fe:7e:82:68:9c:ee:6d:17:9f:90:aa:00:e1:00:10:
                    d7:83:db:87:3c:9e:b5:a9:59:b3:d2:e6:3b:52:7b:
                    89:dd:97:2f:5c:c5:04:86:1b:66:37:88:6e:a9:93:
                    19:b5:e5:e6:5b:01:c7:25:d1:f0:62:0a:dc:00:9a:
                    d8:47:73:cb:e1:ff:b0:08:46:89:ef:29:af:55:f1:
                    0a:5b:2f:36:b6:1b:55:18:10:fc:7c:3a:a0:60:9e:
                    52:db:84:b8:11:e3:cf:7e:54:a6:90:04:4f:e3:83:
                    62:c3:4f:21:38:db:b5:59:8d:b8:e3:94:60:ef:34:
                    07:4f:1f:18:f4:1e:88:ae:82:66:6f:fe:fe:bf:8c:
                    a6:b5:df:bb:b1:90:c6:2e:e5:57:54:f8:9f:df:5e:
                    c1:f9:48:26:a5:05:0a:be:bb:f5:b8:fe:7c:d4:5c:
                    cb:e7:3f:c7:7d:ca:c3:c1:9e:3b:2c:db:55:73:6a:
                    f7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3F:8F:34:26:B6:8A:A4:75:4B:85:92:D1:E5:AD:6E:01:58:A9:E0
            X509v3 Authority Key Identifier:
                keyid:17:DD:9C:23:AF:69:EC:2C:DB:6F:E2:B9:93:6E:B4:94:CF:D1:62:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F92cI69p7Czbb-K5k260lM_RYh8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/76/8357e2-a106-44ae-b866-8fa7b4c53073/1/F92cI69p7Czbb-K5k260lM_RYh8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:99:9f:da:b1:aa:a6:c3:62:9e:8d:db:c4:c0:6f:42:bd:7e:
         0d:2d:2c:32:e6:33:f3:45:75:f1:fb:c8:d5:49:e9:f4:f9:d7:
         8d:fe:1b:58:c2:48:6e:8a:97:0a:58:94:8c:15:e3:5b:63:55:
         e6:f4:a1:45:96:ef:0c:9b:01:66:ba:7e:50:81:05:1b:10:cd:
         55:44:7b:c2:b1:aa:dd:b8:6e:d3:a4:f0:69:4d:98:e5:c2:3b:
         d8:f2:09:8f:96:30:d9:cb:f6:e3:0f:b3:04:ac:76:6c:f5:e2:
         a5:bb:82:3b:f9:e6:c8:ab:6b:cf:75:db:ab:cf:ee:87:26:a7:
         0b:77:31:90:cf:14:a4:56:d3:02:52:fc:d0:0f:db:fd:77:aa:
         f4:b2:a4:7d:22:42:41:55:84:43:58:e0:ed:63:72:10:df:77:
         cc:c5:27:92:18:ad:f0:e4:ef:03:2f:c5:1a:11:7b:c6:00:56:
         3f:d7:60:c3:d5:77:fd:b5:18:80:f6:9d:be:10:1b:59:31:04:
         ef:d2:66:12:aa:8c:bd:22:4c:ef:e3:91:f0:1d:d8:e8:ea:52:
         44:d1:6f:dd:a2:c8:1b:06:c6:04:4a:c1:8e:9b:fd:74:82:7f:
         1b:2d:fa:64:63:8d:7d:3f:0f:43:4d:4f:57:3f:02:2e:15:f5:
         29:49:e5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----