Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
File:                     1-yNrIT1WST87B35rQfQuTz34zc4.mft (raw, json)
Hash identifier:          SrCI5lK+vZKa5dHPfiTRjYJCFbBebMY0ZtA7U7wLELY=
Subject key identifier:   6A:DC:76:F9:11:F4:41:50:BB:FB:A6:8A:F3:D9:7A:72:70:80:4A:E2
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Certificate issuer:       /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial:       0194BC3C09AFF83AA62860E03B5A406FA2E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft
Manifest number:          0EBA
Signing time:             Fri 31 Jan 2025 12:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:38 +0000
Files and hashes:         1: 1-yNrIT1WST87B35rQfQuTz34zc4.crl (hash: igFXgDtYI8nzqQ4+vrhuikLEj+JJrZ/xczMEeP4IMWc=)
                          2: 3wVT7ByFOgSRbNZYozrG_4k5Lf4.roa (hash: nWjMCvThnl/TirQoWGzb1aGz9gls9gsUGL9UH7UK99U=)
                          3: b4xGcgRXbZTm92PK-63-hJMR7i4.roa (hash: NbuD2qXzwa42L7iqCKP9Yf7x1Mko0nN5lZkpDNpT+YA=)
                          4: eBGWGs2DIykcACC-Vm8Am4_ZkLo.roa (hash: M61tw2NaptcB9SBNpEgNYdj/+3K2KnHR73k/O/VkAl4=)
                          5: qX47TfZ7U-VCDd8K_2PnZDbaW7U.roa (hash: AWzPY4ofax8Hh97c3nb596ilyxymid/EIQcHBQfpPr4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:09:af:f8:3a:a6:28:60:e0:3b:5a:40:6f:a2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
        Validity
            Not Before: Jan 31 12:00:38 2025 GMT
            Not After : Feb  1 12:00:38 2025 GMT
        Subject: CN=6adc76f911f44150bbfba68af3d97a7270804ae2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1c:9e:78:6c:76:d4:6b:49:87:21:45:26:11:
                    d3:83:9e:a7:ee:f8:ed:55:be:a2:25:74:d0:bb:ad:
                    66:45:58:40:81:c0:ee:3a:14:c4:1d:8a:2d:48:be:
                    12:d3:94:55:b3:70:b8:d3:38:81:2f:57:94:b2:19:
                    a5:4e:c3:ea:bb:da:03:6e:80:d5:72:17:d9:be:a5:
                    82:80:d0:84:6d:d2:bd:ae:c5:08:78:0a:1d:19:81:
                    c0:5a:a6:c8:95:22:a4:33:f6:67:0b:fa:2c:d3:fe:
                    49:fa:88:9f:d2:17:87:8f:06:43:20:60:99:13:03:
                    c9:8d:42:d2:18:44:14:90:f2:6e:c7:52:a7:d2:85:
                    6d:64:55:b8:0d:be:45:f9:4e:e2:14:0d:61:c7:1f:
                    0c:5a:b5:59:a4:fa:f2:41:e3:8f:08:5b:bb:6b:f6:
                    68:a8:59:e7:4a:87:4a:1c:10:64:d2:95:a6:a0:ff:
                    16:05:ba:65:fa:d4:aa:1f:78:14:9c:f8:f9:15:6e:
                    6f:6f:b8:50:53:28:f9:72:1e:30:0d:ea:54:8e:25:
                    52:6d:cd:7c:f9:bd:5d:e4:51:72:48:bc:f6:ec:00:
                    ad:09:5c:ac:fe:c2:37:0b:9b:de:1f:5f:37:12:df:
                    5d:1f:17:06:11:16:ad:19:4a:b3:17:6a:a3:0d:9d:
                    ae:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DC:76:F9:11:F4:41:50:BB:FB:A6:8A:F3:D9:7A:72:70:80:4A:E2
            X509v3 Authority Key Identifier:
                keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:4f:5d:b2:1f:11:d1:ad:62:93:58:d2:14:c1:3d:a4:e6:d9:
         d3:d2:f7:16:ee:c5:58:ed:f3:f4:9a:e7:63:18:62:c7:e4:da:
         ed:7a:17:e6:0e:be:bc:1d:5f:6e:3d:b8:8a:5a:69:85:ed:d5:
         72:7c:85:9b:d0:de:09:f5:fa:65:ce:bf:07:7f:a2:0f:49:10:
         03:b5:1c:15:ef:1e:95:1f:46:1f:68:9f:25:da:cb:9a:5d:0e:
         dd:1e:23:fd:20:00:06:51:3e:27:67:93:50:ee:09:0d:e8:ac:
         5d:fd:85:30:49:f7:a6:f1:cd:2b:01:d8:58:99:67:9c:4e:4e:
         4d:46:3b:c6:dd:ad:a9:9c:61:83:67:98:4f:99:66:ee:f8:c6:
         71:49:6f:d8:4c:f4:12:cd:12:cc:c1:69:f8:b0:f0:e0:c1:ba:
         7f:7b:84:dc:e8:4b:ab:0b:54:da:25:37:e6:80:e1:44:00:c0:
         73:41:74:f5:7d:05:65:1d:d2:9c:78:87:f3:a0:3d:88:86:87:
         5c:26:99:29:2d:f2:96:80:86:89:6e:31:7f:3c:69:0c:3e:1d:
         ad:56:8c:fd:ca:75:ec:b2:8a:c6:da:6d:fc:48:5f:76:92:ef:
         4a:08:00:eb:a3:22:d1:6c:dc:06:07:19:af:f1:d4:e7:17:c5:
         fa:62:97:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----