Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft
File:                     MUTmCeNhkT48Owp410hqpFtWJAE.mft (raw, json)
Hash identifier:          nc/dsDovZ3GRP2Xcl1QPsf/I/5JS204HmMUw6YOu98s=
Subject key identifier:   FE:81:9A:FB:4A:C7:87:99:E8:03:18:7E:DB:46:03:07:2E:8E:5C:A3
Authority key identifier: 31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01
Certificate issuer:       /CN=3144e609e361913e3c3b0a78d7486aa45b562401
Certificate serial:       0194BC3BF72500C2D2AA8FE1A66AABD17DEE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 12:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:33 +0000
Files and hashes:         1: 0grHL5XgK1ebyYywK4lDDAZgFXk.roa (hash: 7IJm0rOyyU+pJZuljsQpmmrB2AVEaK9nH1aTnz504mA=)
                          2: 1Aaeji2MZnsxUqe7GzlTKM-kECY.roa (hash: ULIiyMRJoIy1v2cVArI/haodlXB2hhFDzw6RLH+AIt0=)
                          3: BeECX5eJFfyGwemrzzJizOKE4xI.roa (hash: LnKd8SA4nwF4lOHNh/WuPipE/qVLC5TOIq7F+R9q7zE=)
                          4: MBRhqE6-aD7iCWcMnH5h8UHWwao.roa (hash: kKLFOWBQkg10mLbq/o1kc1WLMlwid8+y8wNhwWSrsCQ=)
                          5: MUTmCeNhkT48Owp410hqpFtWJAE.crl (hash: HuXVPoF6pzwWs0D5tkuEZuxXGBp1jIy7R8dHNgIN6TE=)
                          6: yMibhdeNkrtpzm1LIcJxa2aSGEE.roa (hash: FzeHPUN5/1eWMKZnzxinmg7lQbi1t/jROjMl/iHf/wE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:f7:25:00:c2:d2:aa:8f:e1:a6:6a:ab:d1:7d:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3144e609e361913e3c3b0a78d7486aa45b562401
        Validity
            Not Before: Jan 31 12:00:33 2025 GMT
            Not After : Feb  1 12:00:33 2025 GMT
        Subject: CN=fe819afb4ac78799e803187edb4603072e8e5ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:51:f5:45:06:68:af:dc:90:2e:a2:d7:92:50:
                    b1:6a:ec:af:8f:e7:2d:d2:2a:47:35:d3:76:c7:95:
                    d0:4e:3b:c6:60:5f:b0:22:9a:3a:46:81:09:52:cd:
                    85:4a:f6:f7:0b:6d:4a:b7:46:d7:c5:e6:50:36:22:
                    36:79:99:af:a4:67:19:d9:86:19:73:d5:de:e7:52:
                    be:62:11:68:06:04:41:4b:9a:da:cd:1a:62:04:49:
                    15:3f:0e:bf:e4:01:f3:0c:ce:a9:30:8b:f2:a2:17:
                    73:91:23:ed:41:47:e6:7c:9f:60:62:4a:ca:c0:c4:
                    3b:a6:de:de:7d:eb:04:17:a2:be:f0:a8:eb:7c:6e:
                    e6:af:33:74:27:d8:1a:85:bf:96:56:42:35:10:a7:
                    00:0b:7f:88:4a:0f:87:65:e6:6c:0e:3a:2d:9b:cf:
                    a9:99:7d:f5:dc:49:27:c1:38:1e:1b:38:d2:39:86:
                    63:e9:d2:ab:1a:06:0f:5c:be:88:c5:66:d1:a2:96:
                    eb:7f:6e:5b:c4:a5:84:2e:89:c0:23:43:27:06:85:
                    90:b6:c2:b4:0b:ca:7f:b3:c7:83:b4:18:e6:a6:64:
                    3b:10:36:b0:79:e5:52:70:67:1f:fd:b1:90:29:10:
                    25:a4:06:bc:ba:7c:24:1b:bf:21:06:4f:28:49:53:
                    78:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:81:9A:FB:4A:C7:87:99:E8:03:18:7E:DB:46:03:07:2E:8E:5C:A3
            X509v3 Authority Key Identifier:
                keyid:31:44:E6:09:E3:61:91:3E:3C:3B:0A:78:D7:48:6A:A4:5B:56:24:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MUTmCeNhkT48Owp410hqpFtWJAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/caa2b6-87e8-4e24-a446-775888a87194/1/MUTmCeNhkT48Owp410hqpFtWJAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c9:bd:e3:da:bc:1a:5b:f2:42:52:54:4f:ea:a9:9f:b1:25:
         7d:2d:58:80:6a:6b:d7:94:3a:03:b6:3d:f4:df:c0:4f:4e:cd:
         01:30:c0:ca:1c:bc:f7:73:be:14:cf:46:ca:20:f2:fd:0b:15:
         f8:5e:a8:50:bf:e7:ad:99:0d:6c:8d:28:63:b4:24:7f:46:63:
         80:82:c7:0a:a0:c1:f4:1f:96:7e:02:1d:ce:4e:ba:63:07:0c:
         f8:8c:97:9c:6b:5d:7f:da:6e:36:72:0e:99:37:13:dd:78:8a:
         4d:d5:68:23:d2:56:21:2d:b0:06:1f:99:b9:39:8e:af:90:56:
         2e:e2:5f:17:76:22:9f:c7:e8:f9:23:20:07:aa:d8:18:5d:a3:
         b0:aa:47:df:f6:a5:2e:0e:42:21:8e:63:22:33:38:c0:a0:e0:
         51:a2:85:0f:6d:be:92:21:7e:9a:00:46:fe:39:31:a3:28:51:
         16:4b:6c:9e:18:c7:e9:42:e4:77:39:50:48:ae:4e:ea:56:e7:
         f2:bd:09:13:d0:73:82:23:63:79:93:ad:48:d5:d9:07:11:a5:
         e6:81:cb:0a:95:f4:1b:fa:9d:98:e1:ed:ea:f5:cb:ad:90:90:
         6e:49:d0:92:88:01:9a:01:f5:a5:29:d0:22:15:da:07:6b:e0:
         40:93:23:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----