Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
File:                     Tds9zfXmvuCYJcN787i98otvtZM.mft (raw, json)
Hash identifier:          fW2+ibNoPlcocsZq3jthiB0SvOX4GQlvoBEAvkFwSPU=
Subject key identifier:   87:C4:A4:8C:BD:57:C2:BD:09:49:C5:C8:3D:45:53:18:C1:B8:55:01
Authority key identifier: 4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93
Certificate issuer:       /CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
Certificate serial:       0194BC73084F15737C7A53012A71518FEA2B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 13:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:42 +0000
Files and hashes:         1: 3wToZwYlYJhmj7mm8PpwNtnWHVk.roa (hash: O8XdzrDLKhZRvl13MXXTR1JiyTE2ZlieoyWEJ7nOUTA=)
                          2: 4imq6_MMpyIjPy7JyGjrhcoftH4.roa (hash: htblR8fOEERQI20b0BNRdDO8FoijKodXH42ZRIpJlTM=)
                          3: BhB4QRUPoERbo_tuXIOvKFT5tus.roa (hash: asfvJzhTCTkNeMXKQv12QThiuP/0k3pLDDHOuHxC3r4=)
                          4: Tds9zfXmvuCYJcN787i98otvtZM.crl (hash: S+ZPp/Rz+jQ9pkZR6b0J6+13lb2M522essz+eA7vgck=)
                          5: Tw0TTktdyzp0HyCOraKp8Ikm9Zw.roa (hash: z4UO2288Zpke2+cJIS0jIR44dlwwS+r5fy09OgwTYzs=)
                          6: xMtiBvCdtWdpBztykMPhn-kY_9s.roa (hash: GpBtwdAknau8bMjJICf5aFSnmGTM0dxBI9Qhq4iCudQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:08:4f:15:73:7c:7a:53:01:2a:71:51:8f:ea:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ddb3dcdf5e6bee09825c37bf3b8bdf28b6fb593
        Validity
            Not Before: Jan 31 13:00:42 2025 GMT
            Not After : Feb  1 13:00:42 2025 GMT
        Subject: CN=87c4a48cbd57c2bd0949c5c83d455318c1b85501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7c:7f:e1:1d:06:79:72:6b:83:fd:d5:ad:70:
                    08:ac:7d:a3:56:b9:eb:65:ef:8f:8a:45:ad:01:65:
                    14:90:94:26:3c:8b:c0:8d:9a:4d:e8:04:db:b7:7c:
                    f9:a0:45:c9:8a:8a:d0:9b:93:a7:e9:69:23:86:0b:
                    8b:89:40:de:3a:21:dd:b2:b7:44:06:13:30:9d:af:
                    df:83:05:76:b1:e3:8b:7c:a8:e4:d5:9b:4c:15:6d:
                    fa:42:e3:2a:ec:b1:a8:89:33:e0:8e:0e:1e:6a:37:
                    c2:e6:a4:2b:5a:9c:27:f8:fb:9e:c3:6e:9d:13:9d:
                    4a:e4:e4:f5:ee:e8:d7:97:0d:63:dc:e8:7d:9d:ec:
                    b0:e5:58:c5:8b:34:2f:a8:83:93:c8:c1:55:51:b0:
                    59:84:1a:eb:c7:4b:84:41:c0:1d:73:48:c8:b3:27:
                    58:d1:fa:04:e6:6c:ea:04:76:cd:3b:e7:a7:a2:75:
                    a5:01:31:9d:72:76:52:0f:fb:6e:74:71:c2:e2:5f:
                    bd:d9:02:81:eb:bf:fc:ba:c5:32:3e:ee:cd:90:3e:
                    30:e3:e3:fb:9a:8e:3a:d2:89:21:0a:44:65:2a:27:
                    b8:ec:d2:29:b4:21:de:33:eb:fe:e9:7f:e6:fa:f8:
                    ac:64:b1:97:c0:1c:da:32:bf:16:a3:ff:b4:bf:20:
                    e1:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C4:A4:8C:BD:57:C2:BD:09:49:C5:C8:3D:45:53:18:C1:B8:55:01
            X509v3 Authority Key Identifier:
                keyid:4D:DB:3D:CD:F5:E6:BE:E0:98:25:C3:7B:F3:B8:BD:F2:8B:6F:B5:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tds9zfXmvuCYJcN787i98otvtZM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/790cee-d54e-4598-8bc1-2170c5c1d3ed/1/Tds9zfXmvuCYJcN787i98otvtZM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:9d:f7:45:b5:75:5b:92:12:bc:b8:55:57:5c:8b:b0:5d:5e:
         7c:c4:ab:b0:5a:28:38:a1:e6:a5:89:9a:c2:c0:50:6b:d9:1e:
         99:70:d1:35:ee:ad:5d:cd:bc:8f:34:3d:18:83:ce:01:32:cb:
         d1:39:ad:1a:e1:b8:51:9d:41:d0:87:22:f9:6f:15:a0:fc:d4:
         f9:c8:10:a0:f6:85:87:2d:42:07:25:57:db:f7:cd:19:ce:89:
         e5:21:fd:67:9c:9d:16:9d:9e:30:0f:8a:9e:4f:1e:9f:71:f0:
         2c:1a:6b:0a:38:29:54:49:38:25:f2:12:dd:8f:e8:34:b5:67:
         1f:99:30:e6:ee:d9:45:ae:17:56:35:25:ea:4a:cd:65:ac:db:
         44:f1:49:da:b4:77:0d:0e:33:7d:f4:a5:31:90:53:84:01:3b:
         1e:d5:46:2b:32:85:a8:3e:d4:b5:42:df:34:5b:f8:1f:33:6f:
         a5:38:33:e9:72:38:3b:b4:9d:1d:ec:d2:f0:1a:72:e6:31:d9:
         0f:b3:ba:39:06:cc:0e:1d:ba:c9:63:e7:8f:8f:e2:f5:b1:7a:
         c5:c5:1e:64:ea:fe:9d:70:6b:86:f6:26:c1:e5:c2:bb:1c:6e:
         33:83:ae:55:1e:84:8b:5b:1f:bd:d0:56:59:54:7b:49:ec:e3:
         f9:29:27:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----