Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
File:                     VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft (raw, json)
Hash identifier:          s4WrAvYJ4sEq0OS10S8uJcSyOdb0vIpOPnQPvieOFAQ=
Subject key identifier:   DE:B1:37:44:A8:6B:FC:52:A6:7D:60:1D:8F:83:7A:44:1A:7C:40:AA
Authority key identifier: 55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED
Certificate issuer:       /CN=55fad96dd05af8c2d26192c841131f2f97459fed
Certificate serial:       0194BCE080190134F4B08648E5DF2BFD2029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft
Manifest number:          1436
Signing time:             Fri 31 Jan 2025 15:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:16 +0000
Files and hashes:         1: 6fy-RpF2xj4bRR9VT9bQ_Fryj8A.roa (hash: +fjUuan9mhMoL5J+xbDDTtsP2e+9iZNf2Q6jWOsGO/g=)
                          2: B2guzqJ0c1c1SQ3CcIbZxFBJLXQ.roa (hash: 55A03hHw140PM0KCnI5wADrRDcpuUYgxTN0Hby4pUXI=)
                          3: GDhDJ-2zjU0GkRTxU28X9ngeRHc.roa (hash: o2yqsnKawfThSJXCRUMbs0Smm+L29A8WJUtnBaTxbug=)
                          4: GcZeqFRM3Vo0APvxkyx_MnzPveU.roa (hash: a4xzh+76qyVv2r1JqzdGIwl68kZYtgkEbksxJPUpquk=)
                          5: HDILnjmhtcEJk46AQcpCMkCLoA8.roa (hash: RKyE3trmJiGqNtjuvNCycAFA3dGIi6wfCWONyfSdxXk=)
                          6: OzvEZ_7o6iiEemTYYUh3uPS2kS0.roa (hash: olMlYCsvO4RycaUkfHVORoJbVkzPaXULWZ1VzqkkPLI=)
                          7: VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl (hash: +dSWd7ux5ghPv/ZZfxR3OX5klEJTjneG26JqoMwkRpM=)
                          8: X8OOCxFmHvFVmgVaORuTFl7bqwA.roa (hash: 8QmTqC1KGhreGJsiTB4YVXTsChzMFM1fgstpYcqi2wU=)
                          9: _XmPllT7ofYCPa4yLDSVV52Pl3k.roa (hash: bV+K4k+usRA15bCwnB7mW9jVhJg2loiLSbzbXFY6zLY=)
                          10: kGlBTt5x7KU-txz2Om5dyRKUTdQ.roa (hash: gRmjPVyQTg22cTzCYFSGaaZzVv3Ajzi1EkEgtKCYrRY=)
                          11: zC5qQAr1NH8TWMnKZTFLrXEquxw.roa (hash: p9nwz/HJCgnc5FZXpmGWtTKanzU2+2yGdiNXNP6y+Q0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:80:19:01:34:f4:b0:86:48:e5:df:2b:fd:20:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55fad96dd05af8c2d26192c841131f2f97459fed
        Validity
            Not Before: Jan 31 15:00:16 2025 GMT
            Not After : Feb  1 15:00:16 2025 GMT
        Subject: CN=deb13744a86bfc52a67d601d8f837a441a7c40aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:65:c9:af:f7:74:5e:5e:e2:3d:f1:09:de:7e:
                    07:f2:b2:4b:36:93:76:fa:03:6a:94:bf:ab:36:e8:
                    f3:74:8e:f5:fd:a9:87:52:4d:f6:c5:79:d4:86:4d:
                    88:f1:f9:f1:32:3f:22:51:47:3a:a1:ea:33:6f:ca:
                    87:de:75:c1:45:9c:2a:f0:c8:53:e2:6d:b5:01:f0:
                    e7:38:e0:38:10:92:69:03:21:41:54:bf:ba:f8:bc:
                    9b:83:20:49:93:90:aa:06:a5:4b:2d:b5:1d:4d:6e:
                    6d:7d:7c:ec:e9:67:6f:ab:ec:49:a1:3a:91:3a:52:
                    bb:06:54:f5:cb:06:e6:30:0b:e1:db:9e:e2:c0:54:
                    17:e6:bc:88:8f:2a:fc:bc:26:ad:3f:2f:18:ea:80:
                    49:4c:90:de:f0:1e:9b:e0:35:1b:4b:b6:88:e3:a9:
                    cb:13:0f:17:ae:03:7a:1d:b4:b4:d4:20:9e:56:34:
                    f4:46:64:7f:cd:36:e3:b2:f7:15:63:27:90:4b:68:
                    3b:5e:74:44:f3:da:c8:93:82:0f:f6:5a:21:d3:1c:
                    bd:ad:bf:9c:dc:ea:b4:a0:1f:ce:3b:7f:3c:00:5e:
                    69:f9:e1:63:25:ff:fd:59:13:7d:3f:51:be:f1:b6:
                    94:cf:b8:b0:4b:af:44:3e:3c:16:fe:96:42:fd:d6:
                    e7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B1:37:44:A8:6B:FC:52:A6:7D:60:1D:8F:83:7A:44:1A:7C:40:AA
            X509v3 Authority Key Identifier:
                keyid:55:FA:D9:6D:D0:5A:F8:C2:D2:61:92:C8:41:13:1F:2F:97:45:9F:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VfrZbdBa-MLSYZLIQRMfL5dFn-0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/30e582-4448-4952-94a0-30ff2c83f001/1/VfrZbdBa-MLSYZLIQRMfL5dFn-0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:71:12:8b:fc:96:af:3e:60:08:55:ce:92:4c:fb:89:e3:1c:
         0a:fa:7d:95:41:e7:32:eb:b8:7c:92:b2:50:e6:f1:e7:81:8d:
         18:16:f6:e3:7c:26:d2:78:02:0f:f0:25:f4:ed:89:14:4d:04:
         05:e7:3e:76:54:aa:69:82:8d:c7:88:ee:ea:a1:0c:85:6c:77:
         85:89:4e:d6:ae:8a:72:ee:c5:1f:32:ee:79:6f:90:09:95:89:
         ad:a2:da:1b:fd:a6:0e:03:90:3f:fe:de:bc:92:94:44:32:d0:
         b9:3e:fc:0e:33:d9:e5:60:ca:70:1c:2d:6b:81:23:d7:71:77:
         d9:32:bf:fc:3f:65:b7:d9:44:bd:0b:a3:63:ce:1f:ae:a2:13:
         43:b8:12:35:81:60:18:51:d4:30:12:cb:58:13:bf:87:f5:38:
         bb:7e:27:09:04:58:3c:48:4c:63:45:d3:e8:2a:57:3f:11:93:
         c0:52:07:49:44:1d:87:96:8f:d8:cb:e8:a8:db:2e:dd:0d:01:
         07:3a:50:4e:4a:3a:8e:c2:02:f6:2f:d9:78:dd:b1:d3:3b:b2:
         62:91:8d:4e:0a:82:f3:54:78:fc:ae:74:1f:78:c0:25:43:91:
         b4:d2:25:59:1e:de:c4:78:2d:b4:18:b7:d2:02:62:c7:30:76:
         ed:32:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----