Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
File:                     8mag-YbyGUXIDYMVZ7ryliAQetw.mft (raw, json)
Hash identifier:          6bMzbBYCuJSbVdjpU8Jo+GlfC2a1vGHaXQoltSTqq2M=
Subject key identifier:   FB:E0:05:A4:FD:33:81:56:3F:9C:49:C0:B3:16:81:26:EE:8F:3F:D0
Authority key identifier: F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC
Certificate issuer:       /CN=f266a0f986f21945c80d831567baf29620107adc
Certificate serial:       0194BC3BF99BCE211BD4D81A68C75815007B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 12:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:34 +0000
Files and hashes:         1: 8mag-YbyGUXIDYMVZ7ryliAQetw.crl (hash: QGBDxwGhyGYDNtiVEUpea2D73SVzIzrHtwLk3JWjc18=)
                          2: M5jtoM41Y8zxhgX6892Azn7CbgI.roa (hash: SsoCa6KU5R2ocIrHDaK8+DXGCTEtvLA0sldxtO1jaaY=)
                          3: NhXAxr82j13CORIdeWDl9PifhbY.roa (hash: LWTp4X6BWg45hL0vGetxJ41kPYBDS+pDAAij0HwwDrY=)
                          4: xwKRlfuar5Ok0_Vuih0mv8ent54.roa (hash: ofzw4+EAI9dgA5ztmD8H8K5/VJLMCGrjBng1uGirlUw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:f9:9b:ce:21:1b:d4:d8:1a:68:c7:58:15:00:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f266a0f986f21945c80d831567baf29620107adc
        Validity
            Not Before: Jan 31 12:00:34 2025 GMT
            Not After : Feb  1 12:00:34 2025 GMT
        Subject: CN=fbe005a4fd3381563f9c49c0b3168126ee8f3fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7a:8a:71:c1:0e:a7:f0:51:ad:19:86:e3:3d:
                    b8:28:c8:f8:b8:7d:46:1b:cb:5f:6f:19:9e:5d:b1:
                    5f:bd:d6:f9:11:ca:7b:91:64:b2:2d:26:89:21:cc:
                    b2:6e:0a:1e:7e:44:52:dd:76:12:eb:f9:73:b6:d4:
                    14:ce:93:69:df:dd:58:88:15:cf:18:f1:60:72:0d:
                    5a:86:36:8a:8a:ab:92:db:cf:e8:58:8a:dc:15:4e:
                    70:1e:18:f3:f4:d9:fa:a9:8a:11:4e:88:2f:54:87:
                    51:e5:a0:9c:b3:b0:b8:d3:ab:06:5c:8d:32:5d:99:
                    0f:54:54:f9:76:81:13:4b:97:61:5b:a0:9c:b4:21:
                    c0:95:b8:46:8d:f0:e9:33:70:7e:b0:2d:7f:a4:a6:
                    ab:c5:2e:d2:db:e5:66:68:ea:48:61:bf:e1:ea:76:
                    1c:00:65:a4:9e:0a:f8:35:d2:b8:c2:26:e1:7c:2c:
                    a3:db:3c:0a:25:03:57:20:c1:dc:25:a9:5a:e1:eb:
                    34:74:08:05:32:5a:59:5f:c3:f6:42:c8:56:e9:66:
                    0e:8a:dd:06:57:fd:6d:d4:d4:fd:57:72:25:f9:6a:
                    2d:4f:0f:0e:ea:42:24:fd:34:14:75:0c:98:8f:55:
                    17:94:27:b3:6b:01:4d:f2:ef:b3:35:62:b7:90:81:
                    d6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E0:05:A4:FD:33:81:56:3F:9C:49:C0:B3:16:81:26:EE:8F:3F:D0
            X509v3 Authority Key Identifier:
                keyid:F2:66:A0:F9:86:F2:19:45:C8:0D:83:15:67:BA:F2:96:20:10:7A:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mag-YbyGUXIDYMVZ7ryliAQetw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5873c4-b5e5-497e-9242-fe0b2226cfb3/1/8mag-YbyGUXIDYMVZ7ryliAQetw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:70:79:73:c6:e8:25:f8:4b:88:42:9e:7b:3d:cc:9e:4a:96:
         1b:05:45:55:6a:5c:f0:2c:fb:a1:86:88:ad:92:b3:95:20:0e:
         2d:15:62:af:ee:6d:60:2a:0b:2d:a1:7c:d1:28:cc:8e:23:c7:
         1b:a6:01:4c:2c:8a:7c:ca:59:7a:0b:b4:69:98:0e:4a:55:cc:
         fa:14:51:78:f0:30:df:64:fe:2f:6a:e3:c1:93:50:d8:53:77:
         de:09:bb:87:19:a9:f4:32:6a:2b:44:a1:c6:33:76:de:19:15:
         d8:36:83:60:78:c0:41:a8:42:98:d9:b1:81:00:25:45:55:f2:
         b7:aa:fb:67:ae:52:22:22:ae:59:84:ef:49:84:97:a0:15:42:
         6b:66:93:97:06:3b:fa:4a:74:66:3a:24:1a:c0:7c:9d:57:f9:
         1e:e8:16:bf:95:32:68:ca:b3:f2:73:0f:0d:b1:8a:7d:90:92:
         07:e0:5a:4d:5b:f1:e5:db:54:fc:a5:fe:50:1a:1a:ad:86:64:
         94:fe:33:78:3d:18:47:95:55:6c:7f:df:31:3d:23:30:fa:8b:
         7b:57:91:f2:2e:57:ba:e4:0a:36:38:91:bc:f5:09:ae:54:56:
         c6:3d:1b:a7:dc:54:05:c6:f6:c6:ed:2d:84:e0:81:52:cf:e4:
         cd:51:01:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----