Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
File:                     HUOiSEVp0g4_U8F757n7KcNO5b4.mft (raw, json)
Hash identifier:          hOF/hXB+Erl8/TIXS7c6AiSgBPxLCF9ma8jEItWrbZs=
Subject key identifier:   DE:2E:D3:35:4F:88:74:E2:D3:1B:E1:B9:F0:E3:40:CB:A0:96:38:78
Authority key identifier: 1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE
Certificate issuer:       /CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
Certificate serial:       0194BD8589CF4B5D031FC66F185B70D6C773
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft
Manifest number:          0132
Signing time:             Fri 31 Jan 2025 18:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:32 +0000
Files and hashes:         1: 1-AdV1gWt78vpwXoV5m3jLVJq008.roa (hash: rb2fY0MrPmvpwUyFgkdg3rhj3G+c6kP1oiV1yXrQAuM=)
                          2: 1XXrB12LRdMGqs-GeS3cAximpqI.roa (hash: QvMP+g9vxMZ3cjLKa1foWvZXJz5KMsBVO3RZBZhceVg=)
                          3: GbNjA0u4LTGo9TpkOSKtWC1n_q8.roa (hash: WyAfLfQQ5UiJ33gbz0ra750pAYV6TxSwmrlHqd6QFdQ=)
                          4: HUOiSEVp0g4_U8F757n7KcNO5b4.crl (hash: t50mNk/hW8+AUAZ15BQQxt+ujQM8eapSt6nYPDw/jXw=)
                          5: Xrc0g_6FSG8ZFIg-M8j_EmbMaBk.roa (hash: Rc7LlFZsQD6UtspfP1hY2HJq001uYyMfvHYShOgLlRs=)
                          6: rplcEHwnzrs9ea4yV0c2pW2uUSU.roa (hash: F6kcOWEqyk9+Z0k9BnSlsmaw3fMe2/8X0jrKTuWJCk4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:89:cf:4b:5d:03:1f:c6:6f:18:5b:70:d6:c7:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d43a2484569d20e3f53c17be7b9fb29c34ee5be
        Validity
            Not Before: Jan 31 18:00:32 2025 GMT
            Not After : Feb  1 18:00:32 2025 GMT
        Subject: CN=de2ed3354f8874e2d31be1b9f0e340cba0963878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:38:20:cc:2d:6b:f8:fa:a3:e5:f4:28:01:ba:
                    65:03:5a:7e:56:ad:62:f6:ff:3a:d7:9a:cb:2f:08:
                    aa:71:08:b9:7d:b4:d1:23:a0:64:95:f4:64:3e:a2:
                    03:20:46:43:75:7d:bd:83:a4:ad:a0:2a:57:17:88:
                    fd:05:57:bd:61:c6:4d:40:ba:ca:9a:58:f4:19:f2:
                    ad:3c:5d:a6:75:80:93:df:65:b4:3f:e4:8b:df:8e:
                    e7:24:80:5b:56:b7:18:15:68:d5:10:f9:5e:28:8a:
                    86:51:31:6a:b5:32:ce:b6:1e:3a:16:ff:35:4d:f9:
                    56:16:47:30:ff:9e:2a:2c:e5:7a:95:7f:0e:7f:c4:
                    63:dc:5f:57:02:ad:4d:6e:ca:d0:1f:92:ce:eb:3b:
                    f8:eb:eb:be:2f:7c:e0:72:68:0d:4f:37:2b:af:3e:
                    e4:19:a1:2a:00:6b:de:75:88:99:76:30:39:09:ca:
                    0c:b5:dd:92:bc:22:59:6b:1e:07:d3:dc:03:59:9a:
                    79:24:bf:43:d9:74:27:28:cc:77:94:0b:1a:ea:0e:
                    54:db:ca:75:59:ae:2d:2a:7f:f6:ef:87:75:38:71:
                    29:a2:bd:58:2e:2d:7d:1a:d7:3f:29:09:49:b1:c7:
                    d3:d6:d7:7a:4b:24:90:a8:5b:76:26:54:77:72:57:
                    31:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:2E:D3:35:4F:88:74:E2:D3:1B:E1:B9:F0:E3:40:CB:A0:96:38:78
            X509v3 Authority Key Identifier:
                keyid:1D:43:A2:48:45:69:D2:0E:3F:53:C1:7B:E7:B9:FB:29:C3:4E:E5:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HUOiSEVp0g4_U8F757n7KcNO5b4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c93d87-32e0-46f1-9fb9-63451548979d/1/HUOiSEVp0g4_U8F757n7KcNO5b4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:a2:19:06:b0:1e:19:2d:dd:a8:2c:65:ce:a1:b3:eb:0f:3d:
         11:7c:87:6f:d8:7a:47:42:8c:88:99:1a:8c:db:cd:eb:10:a2:
         c6:88:29:71:ce:e2:64:98:3f:8f:5b:84:25:d6:fd:a5:71:81:
         30:ca:ee:5d:6d:26:a3:97:c1:87:38:8f:4b:3c:5c:3a:62:a4:
         87:02:18:18:a2:9b:21:d6:3a:58:e1:01:f3:47:e0:fe:c8:b9:
         23:08:4f:f5:ed:fc:23:7c:e9:32:93:8b:09:39:1d:3e:67:04:
         96:d1:89:4e:4e:0e:98:6b:60:1a:13:2a:40:f5:e7:ad:b7:a3:
         b0:25:27:78:8a:49:3f:b9:bc:37:a7:6e:8f:70:2f:23:8a:d5:
         57:6c:e0:b2:e5:73:10:c0:75:71:0a:6b:25:b3:07:dc:1f:f9:
         fa:ca:57:70:db:42:6c:de:df:d1:ac:90:11:33:49:fb:93:db:
         45:f9:3f:a5:bb:19:4b:74:3d:8d:81:49:4b:da:7e:d3:38:a8:
         19:2b:be:20:9f:4e:14:88:fa:0e:8e:6a:eb:b6:14:53:ca:61:
         f1:b7:07:3c:43:14:2a:32:f4:a6:3d:cd:ca:a7:e4:f9:80:97:
         a5:e9:bf:7c:de:7a:7c:73:90:77:f4:8f:91:99:7c:84:51:78:
         59:fd:40:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----