Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
File:                     LDsK5bf3gRIscJomUK35cpGH4eE.mft (raw, json)
Hash identifier:          V1PG7/oqu3C9iDpuAR1KDE7h0g3LHoNzQge5O6JVDs8=
Subject key identifier:   34:D8:D6:0D:25:51:F7:70:EF:3B:36:13:2D:BB:17:78:41:46:B2:43
Authority key identifier: 2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1
Certificate issuer:       /CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
Certificate serial:       0194BCE0BB6B8DE097C900368D3D8C4AF4BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 15:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:32 +0000
Files and hashes:         1: G476nUAKTiPJHOVq8nA5e_q--jo.roa (hash: RBYLVll5e4aRdiDwFsCa0na9QgzsuLbF9Bor28EzHvs=)
                          2: LDsK5bf3gRIscJomUK35cpGH4eE.crl (hash: +2cPEZNToO8RP/xq2V6udR5qw9m+NjnSV32cJjRd48o=)
                          3: blAeTsgzvnXWzJGcIbpOuIA831c.roa (hash: UZdZQhTrYWuyboy/tiFF2aL/eCwbDovq+DqP0z6IHtw=)
                          4: qnW-kG_ubcYESkIhZA8A-RWn9Yo.roa (hash: OFkURHNbZaUbpCTRn6/6z5pejCg/w/M+JX7vs64fqfY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:bb:6b:8d:e0:97:c9:00:36:8d:3d:8c:4a:f4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c3b0ae5b7f781122c709a2650adf9729187e1e1
        Validity
            Not Before: Jan 31 15:00:32 2025 GMT
            Not After : Feb  1 15:00:32 2025 GMT
        Subject: CN=34d8d60d2551f770ef3b36132dbb17784146b243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a0:3b:52:97:de:a2:92:bb:ac:6f:33:d6:bc:
                    63:b6:28:fa:50:4a:ff:55:8d:5c:5a:ac:a5:63:10:
                    70:8d:b1:c5:04:9b:d6:ba:07:7d:0b:a7:ee:3b:d3:
                    c1:ab:ab:66:05:b5:0a:a0:83:60:79:b3:5f:d3:41:
                    a4:f9:f4:56:a5:0c:6b:7f:0d:df:f3:c5:b4:bc:3a:
                    b2:71:7c:8f:ce:2b:57:0f:c1:58:48:a0:9f:30:3a:
                    0f:ef:25:82:12:04:f5:aa:7e:75:fb:d0:c9:39:8c:
                    8a:9a:79:28:12:9f:0c:9d:b5:af:25:73:d4:34:c8:
                    53:ce:ad:fb:d1:09:9f:ea:7d:ff:6b:ef:69:ff:de:
                    6a:f7:15:e6:ad:9a:2d:31:ad:b3:e3:6f:93:1c:0e:
                    3a:47:74:40:a3:05:63:70:63:60:58:d0:c0:f7:0e:
                    87:78:4d:d9:ff:b1:fd:a5:a5:d6:b0:46:d9:34:02:
                    03:3a:14:56:a7:55:46:f8:fa:15:ea:cf:4a:dd:41:
                    e1:94:b6:62:80:70:3b:e4:f3:a1:f9:72:99:fd:43:
                    c8:41:5e:81:a5:4b:d5:d2:d7:88:f1:86:95:01:91:
                    9b:e0:df:c5:2d:57:b8:06:0f:d6:4f:bd:ee:86:ef:
                    dd:0d:f1:5f:c0:97:e8:0b:e3:86:e0:9e:84:75:c3:
                    47:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:D8:D6:0D:25:51:F7:70:EF:3B:36:13:2D:BB:17:78:41:46:B2:43
            X509v3 Authority Key Identifier:
                keyid:2C:3B:0A:E5:B7:F7:81:12:2C:70:9A:26:50:AD:F9:72:91:87:E1:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDsK5bf3gRIscJomUK35cpGH4eE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/53e26b-e7ee-473e-a54a-ffcca3e1f17f/1/LDsK5bf3gRIscJomUK35cpGH4eE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:bd:96:c4:e5:8e:7b:52:61:a9:b5:93:a0:03:90:58:eb:28:
         08:a2:d8:34:35:dc:66:b3:51:5b:92:7a:6b:2d:a0:39:70:69:
         db:9e:4d:c0:1f:a4:66:0c:42:20:d4:d2:79:c0:60:8d:b8:99:
         dc:14:02:92:40:c0:ca:92:4f:a9:b2:a5:5c:d9:ad:c6:a8:bf:
         2c:4f:fa:ec:b8:68:cf:01:35:e8:3f:6b:b3:25:ce:44:fb:f3:
         1e:b6:18:9c:2f:e2:75:ac:b5:fd:dc:e6:92:ab:12:ae:dc:97:
         42:8e:cf:bf:7b:87:2a:94:42:ae:f2:e5:80:a9:66:cf:85:b1:
         3a:58:58:1a:84:75:0f:c5:0b:18:fe:be:73:7d:24:ee:0b:c7:
         d7:50:e2:aa:9f:a5:32:f0:a6:46:78:7d:bf:51:51:fc:84:1f:
         61:57:e8:32:a5:8f:0b:b8:28:ae:06:f8:f8:0f:f0:15:ce:77:
         92:e2:a9:01:f2:5b:4e:a7:75:6a:84:6d:b6:e4:a8:52:96:c5:
         50:bd:ab:14:cf:87:1e:0d:d2:37:30:04:27:03:61:aa:60:88:
         4a:dd:bf:0a:28:1d:be:f7:83:03:9f:98:1f:61:29:ea:c5:0d:
         94:9e:06:36:bf:5b:9b:08:cc:29:15:f9:c1:a7:e5:c3:26:6b:
         30:57:b8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----