Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
File:                     lCWIuR2pzKgbSeYDqYjiseq93Jg.mft (raw, json)
Hash identifier:          QBd9VQgShbF+hQmT/Zd5FTRdR9lRKS+oiWK34724jCY=
Subject key identifier:   CA:D3:97:F1:0E:55:B5:30:0D:6D:15:62:4A:B6:78:A2:BA:D2:87:C2
Authority key identifier: 94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98
Certificate issuer:       /CN=942588b91da9cca81b49e603a988e2b1eabddc98
Certificate serial:       0194BCA9D5EB5F7B6160BB957F03C7ADF465
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft
Manifest number:          146F
Signing time:             Fri 31 Jan 2025 14:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:34 +0000
Files and hashes:         1: BALv_ExnaNt7Ei9_oNy_lLXXzHs.roa (hash: 4ScxU84ECumBhevfK8YgF20L9hrETFzXn9HYLLsyrBg=)
                          2: UPeMe9exPA-XO-Wpe9l87kFbuLg.roa (hash: T5LXO+IIz5Jw7BGuFA7+Eefp0y4OKrkkqOT1rRFNsZQ=)
                          3: lCWIuR2pzKgbSeYDqYjiseq93Jg.crl (hash: TkwsJCGxM9fx/gUIpMi5EyGyGCvoZylFwuw8q7vf2O4=)
                          4: ncHzeeVjiZyRXYe4vScc4yls9iI.roa (hash: xHq845vbcqMqo7ofQZT122TooKV6Hc+EdpS/v8a5LnU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:d5:eb:5f:7b:61:60:bb:95:7f:03:c7:ad:f4:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=942588b91da9cca81b49e603a988e2b1eabddc98
        Validity
            Not Before: Jan 31 14:00:34 2025 GMT
            Not After : Feb  1 14:00:34 2025 GMT
        Subject: CN=cad397f10e55b5300d6d15624ab678a2bad287c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f3:8c:6c:a5:03:b6:59:8f:70:6d:d7:7b:3d:
                    7f:6c:17:9b:8c:1c:3d:98:b8:38:1e:4c:00:09:1a:
                    fc:0b:52:90:ae:ca:b8:83:d0:44:f4:11:2a:f0:4e:
                    22:23:f7:59:fa:7d:e6:83:a1:67:17:3f:53:92:c9:
                    f8:f4:6e:08:5a:b0:2c:17:03:00:f4:ae:c8:db:7c:
                    d9:fe:e0:5d:24:d2:f8:44:dc:dd:1a:56:92:66:6c:
                    55:75:12:94:e4:ce:dc:2e:ca:d6:ee:cd:7e:6b:20:
                    d7:f3:04:d0:c9:9b:78:f2:c1:d6:6b:00:b4:ed:89:
                    50:34:95:d9:96:64:50:a4:5e:75:82:1f:6a:15:8d:
                    68:1a:d5:ab:34:83:cb:92:53:96:f1:e6:de:ba:f5:
                    53:a8:e9:92:68:d6:18:7b:4b:58:af:30:3d:07:a4:
                    44:8d:6b:a3:30:db:24:d0:f9:1a:87:73:d4:35:0a:
                    ff:02:b8:0c:0d:93:9d:1c:53:db:e1:c6:55:6c:20:
                    c1:a8:5c:88:dc:d5:d4:8f:e5:f2:65:31:0f:8d:e3:
                    80:44:70:5d:6e:7d:8f:9c:58:4f:49:87:97:a0:ab:
                    48:34:f2:4b:a8:fc:26:3c:f0:c3:d8:e1:ee:31:5d:
                    98:b8:0b:32:53:4a:49:98:72:91:e6:1e:7c:42:7e:
                    f4:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D3:97:F1:0E:55:B5:30:0D:6D:15:62:4A:B6:78:A2:BA:D2:87:C2
            X509v3 Authority Key Identifier:
                keyid:94:25:88:B9:1D:A9:CC:A8:1B:49:E6:03:A9:88:E2:B1:EA:BD:DC:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCWIuR2pzKgbSeYDqYjiseq93Jg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4bba7c-a81f-40e1-8814-65daad632957/1/lCWIuR2pzKgbSeYDqYjiseq93Jg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:d0:6e:2e:ae:ae:e2:f7:18:28:85:e9:c6:ae:86:4e:fe:aa:
         c1:29:df:78:3b:a7:d4:6b:b4:14:d7:da:e1:1e:22:10:2e:1e:
         00:5e:fb:58:6d:5b:4c:3d:e3:a5:d2:27:e3:83:d9:cb:38:6f:
         6e:03:34:8d:44:e1:a9:17:e9:1b:8b:98:ff:55:e8:9f:f0:29:
         cc:32:7a:9c:66:0d:10:68:cc:69:69:3e:84:6e:73:0d:7e:08:
         ee:36:a5:2a:fb:69:71:00:b1:3f:5b:58:2e:cc:f0:43:dd:bb:
         99:c8:fd:7a:bc:0c:8b:e4:a6:36:f8:69:e3:c5:04:4f:a6:c5:
         34:51:49:34:60:62:27:0d:cb:42:9c:fa:b5:e1:8f:50:c1:21:
         ca:44:d6:13:e1:2a:64:e2:74:ab:53:a8:71:62:53:c6:6d:dd:
         61:2b:12:de:12:fb:cc:63:ac:e5:dd:71:64:5c:f7:6b:73:11:
         ba:10:66:92:b0:42:97:c6:5f:15:7b:b9:eb:fd:ac:45:86:46:
         40:6d:93:4e:73:79:0b:d6:de:d3:9e:ee:f0:c7:5f:6d:4d:72:
         b1:d6:a9:b6:22:15:a3:16:15:ea:52:ce:a9:6a:47:ab:f6:2a:
         5f:0a:0f:4b:b1:1f:68:ab:44:d5:7b:fb:60:db:cb:e7:e7:8a:
         25:a5:43:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----