Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
File:                     d1XNi-ceKectlpDHzUCHtfJhFvA.mft (raw, json)
Hash identifier:          nFaSxeg2TNmu4Ta6inDnecC3Axs9i1NxqrCEhZHGBwU=
Subject key identifier:   57:DF:EC:1C:A2:55:95:35:6E:37:26:3A:06:BB:D1:C7:30:AA:67:B8
Authority key identifier: 77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0
Certificate issuer:       /CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
Certificate serial:       0194BCAA2FB31AD3A06839791C3145D0ECA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft
Manifest number:          0451
Signing time:             Fri 31 Jan 2025 14:00:57 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:57 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:57 +0000
Files and hashes:         1: B36LiC0OjqZ3wtH6qzPHL39SDVM.roa (hash: lC3icrS9H534ILHm12EWgHNj+HzhQRDu9zX1M9oOdqc=)
                          2: d1XNi-ceKectlpDHzUCHtfJhFvA.crl (hash: ahFFz2x9BqnO51yxMC2awTf8gdtXW37IrTkpCu1LF8U=)
                          3: e38yhLWXEVmqzpexT39CAVvzz0Q.roa (hash: BPXva5k8oXj/MP9PbA9GSzPiSKc5f6Z2a5jmXbL4TDQ=)
                          4: orSDHxnHGA47DQXY7GCuv1ViUKY.roa (hash: LnjrGG6bbrDuTNmUNlD7ds05Ph4J1TnAuWMrinaUcFQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:2f:b3:1a:d3:a0:68:39:79:1c:31:45:d0:ec:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7755cd8be71e29e72d9690c7cd4087b5f26116f0
        Validity
            Not Before: Jan 31 14:00:57 2025 GMT
            Not After : Feb  1 14:00:57 2025 GMT
        Subject: CN=57dfec1ca25595356e37263a06bbd1c730aa67b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ad:03:c4:9b:1e:8a:48:0f:a8:a7:80:89:16:
                    30:1f:99:54:c2:f8:75:5c:44:2e:28:02:3a:f2:a1:
                    73:8b:83:9d:5a:7a:d3:2f:4a:bf:65:4d:92:e3:d2:
                    8a:db:c3:64:0d:06:2f:65:f1:68:c4:25:b7:53:cf:
                    25:b1:c8:d7:fd:f2:e0:28:ca:37:24:fa:26:74:91:
                    1f:4b:90:a3:d5:07:65:ca:40:51:8c:4e:51:92:52:
                    7e:1d:1d:3e:d2:43:d0:18:a8:cd:c6:30:94:60:96:
                    23:3c:25:d6:83:20:6c:ec:3c:5c:c9:06:14:af:ac:
                    76:46:09:80:50:e4:c3:a2:79:32:5f:a8:cf:03:ab:
                    d6:df:ea:86:68:52:50:94:ed:8c:30:13:ac:e7:2d:
                    20:89:a9:9e:5f:1a:7f:56:6c:3e:1b:6f:70:e7:50:
                    38:8f:60:d7:e7:33:56:d7:fd:7e:2c:6e:70:85:55:
                    67:ca:ab:18:38:9f:b3:f8:0d:50:59:c3:1b:fb:09:
                    c9:cf:b2:c7:55:41:a8:ae:ae:2c:ca:5a:7c:f4:08:
                    21:29:ee:24:dc:0d:b5:dc:9d:36:cf:3e:c4:1f:07:
                    ba:b3:05:94:a1:ca:de:78:cd:2f:2e:34:78:9c:18:
                    e6:01:d7:63:e0:33:35:8a:b1:58:1e:6c:82:6a:0f:
                    c8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:DF:EC:1C:A2:55:95:35:6E:37:26:3A:06:BB:D1:C7:30:AA:67:B8
            X509v3 Authority Key Identifier:
                keyid:77:55:CD:8B:E7:1E:29:E7:2D:96:90:C7:CD:40:87:B5:F2:61:16:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1XNi-ceKectlpDHzUCHtfJhFvA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/7c0c57-15a8-4307-850d-e021f8ce6c51/1/d1XNi-ceKectlpDHzUCHtfJhFvA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:f3:8f:ef:7d:f8:ea:74:18:1f:58:6a:47:9d:28:57:c5:71:
         91:03:60:94:52:53:30:b0:a6:47:75:7b:5a:7c:42:22:da:29:
         f0:a2:fb:71:2a:55:88:d6:ac:72:13:76:27:27:c6:74:b2:3d:
         3b:69:74:6c:90:1c:95:e1:03:a2:16:68:33:3a:71:3e:38:3d:
         62:3c:84:45:8d:dc:c8:6e:7b:b8:7c:52:69:2c:c4:b9:1e:5f:
         62:52:10:13:33:bf:82:b2:c5:59:6c:09:2a:5c:b1:69:dd:e5:
         52:7d:9a:9c:b1:7c:2c:d6:76:d4:c1:fd:4e:cf:28:87:50:ce:
         f0:58:5b:88:d6:9f:cc:dd:5c:84:61:ce:27:c9:61:40:da:2b:
         73:43:4c:b4:02:13:3e:8e:c5:28:50:b0:fe:fe:5b:40:bc:73:
         11:8e:d6:e8:67:e5:a9:d7:cb:cd:88:c8:26:50:be:2d:30:1d:
         b2:b1:38:24:d6:41:08:57:39:42:a2:27:c9:64:ab:52:bd:45:
         a4:ad:b5:91:f6:bb:fe:66:54:2c:e8:f0:81:0f:c2:a0:d6:c6:
         fb:80:57:04:5c:6a:6a:49:e8:07:eb:d8:d5:8a:41:36:fe:32:
         91:1f:36:84:ed:0b:85:b0:3c:4d:d6:cd:7c:2b:3d:6b:04:29:
         aa:63:0a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----