Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
File:                     EsiJlks1tRuo5eZ5oVsZox8TNXg.mft (raw, json)
Hash identifier:          t6LUH4uh49X+df8sYxuZ3HR6yNjDG7V6dOCH3cpitAI=
Subject key identifier:   8C:CF:02:3D:45:F8:F3:7D:FB:33:48:16:2D:CD:76:41:1A:2B:D7:84
Authority key identifier: 12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78
Certificate issuer:       /CN=12c889964b35b51ba8e5e679a15b19a31f133578
Certificate serial:       0194BD17796BE2D7980587E1ED85D65652DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft
Manifest number:          1430
Signing time:             Fri 31 Jan 2025 16:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:19 +0000
Files and hashes:         1: 1-Ltr4X7tHgiN803h8jPbBnWrAv0.roa (hash: 7OUkteLe8nHwqeQk9zlC7/yoJRlbZiYexJ0JFvbqk0Y=)
                          2: 9N77sGkqVPgPzl64HnlAQCAiJiI.roa (hash: 8rr1/h/HEPqZmQ/y+1jYrrv0fcfQ6nqe4NWrJHpDdT8=)
                          3: EsiJlks1tRuo5eZ5oVsZox8TNXg.crl (hash: 10JHduGVWi9egHGgLC4czq4c7SoNWe6uRO6F3vzHZIw=)
                          4: GxKilLVepL5t_pYKZrftFkg3OVM.roa (hash: XTTU+F0aFJFtKQUVRMP8YL9IwYldi2UmnMmIwVJ9a0s=)
                          5: Iav_qyY5ImtZ4ANKY_BlD16EiB4.roa (hash: o26HJXNrKDGMVRomgVXRlnZ79f/49jllECyaOAkuhL8=)
                          6: LTvU0JWVsSQgu0MVSG_VtxZcgMA.roa (hash: xmPZIz9nJEAlB3NELOSNPxxAUtJ8mR0ajbEAHYuN+DA=)
                          7: prOvIV94SipWj181Foj7X04Xy-c.roa (hash: fEs9h6WUn0wA3/zm4fis57AzqK3n8+IhBDsb2ZxLQfw=)
                          8: yTPU9KBT_yF9oFmQNNIcb5x-2m4.roa (hash: 4gwBmGsupWB21IC5fpENG4yVPsL+VM2s0DNtBND4taM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:79:6b:e2:d7:98:05:87:e1:ed:85:d6:56:52:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12c889964b35b51ba8e5e679a15b19a31f133578
        Validity
            Not Before: Jan 31 16:00:19 2025 GMT
            Not After : Feb  1 16:00:19 2025 GMT
        Subject: CN=8ccf023d45f8f37dfb3348162dcd76411a2bd784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:df:9a:ad:13:57:24:82:b7:45:c9:5c:9c:51:
                    86:3e:0a:71:f8:e8:30:43:79:47:88:d8:57:a3:3c:
                    03:ed:b2:b9:04:e2:96:1a:18:0c:46:0c:78:ad:31:
                    a8:10:af:2c:74:a8:77:1a:da:88:ec:29:89:a8:d8:
                    3d:db:e1:33:bb:02:26:40:24:67:7d:1c:a0:44:1f:
                    63:ce:8a:46:c0:a0:83:c4:c2:44:fb:08:09:1c:2b:
                    ea:d2:ac:75:1a:ad:0f:31:b9:bf:38:13:87:93:d0:
                    36:08:72:05:79:50:5e:3a:e7:c2:78:6d:0d:11:41:
                    a3:e9:cb:60:60:ac:9d:6d:fc:30:d1:f7:65:90:60:
                    4b:b7:4c:ae:eb:34:41:eb:e2:05:a7:9a:35:6a:4b:
                    0a:dc:1a:3d:3c:bc:ad:6b:7e:4a:5d:d2:d6:20:ee:
                    43:37:d0:dc:25:e2:90:a6:6b:7c:b8:da:5a:82:40:
                    86:a7:fb:3f:92:ac:27:fa:6d:21:8e:76:42:af:ef:
                    e3:94:d7:97:4f:f4:56:3b:f0:c4:74:91:ea:2a:be:
                    80:37:25:c2:ca:86:d3:c3:a6:ae:3b:cd:98:82:52:
                    e6:1f:3a:b4:93:4a:af:d9:be:76:5c:60:47:5a:71:
                    c1:dd:61:0d:9f:90:17:b3:18:a2:3d:6f:1c:0b:c0:
                    da:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CF:02:3D:45:F8:F3:7D:FB:33:48:16:2D:CD:76:41:1A:2B:D7:84
            X509v3 Authority Key Identifier:
                keyid:12:C8:89:96:4B:35:B5:1B:A8:E5:E6:79:A1:5B:19:A3:1F:13:35:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EsiJlks1tRuo5eZ5oVsZox8TNXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/16b02c-833a-48f0-ba56-ad6f0bf88438/1/EsiJlks1tRuo5eZ5oVsZox8TNXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:1c:45:1d:18:4a:64:ba:8e:ce:3c:9c:a7:99:bd:41:d4:8e:
         5f:fa:d5:a7:64:92:d4:50:d1:e8:c0:db:63:f1:e7:21:e8:42:
         09:e7:11:7d:f3:23:67:8a:5c:a5:55:4d:a3:78:b3:9d:7d:fe:
         75:db:ce:25:5d:80:dd:8c:d3:bf:a9:d4:1c:65:b9:2f:fa:59:
         63:eb:58:df:da:25:4c:12:77:8d:2a:4d:ac:20:2a:26:f3:af:
         ab:ff:b7:52:82:97:a8:da:55:17:76:9b:30:2c:b4:82:e4:38:
         e0:3e:fc:4f:38:58:28:99:94:23:14:87:47:2b:4d:7f:13:b5:
         86:30:88:55:56:67:bb:38:f8:de:21:98:f7:9b:0a:e0:e5:89:
         a4:62:b6:f4:fa:f2:3c:3f:a2:9f:c2:df:d0:3e:77:f2:25:19:
         93:e5:14:9a:f0:c8:52:d5:35:b0:7f:7f:93:18:85:e1:70:72:
         8f:75:74:d1:1f:49:2e:cb:e1:0d:1a:21:2d:cf:58:f0:f8:88:
         43:cb:97:2b:9f:73:2b:16:09:aa:4b:9e:88:24:0a:d9:56:da:
         8f:db:74:2f:f2:37:3f:2e:0e:c9:71:1d:08:88:77:0a:82:9a:
         3a:bd:48:b8:2c:5a:8e:4d:6e:11:7b:42:e7:ab:a0:1c:31:13:
         7a:e1:fc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----