Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
File:                     _SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft (raw, json)
Hash identifier:          gJgvJs/nnuxxPVjBfQtBf27Gx1z2QISGx9LGAFrvNGc=
Subject key identifier:   52:69:82:63:4A:4C:E1:6E:CC:69:4A:EF:BA:03:57:58:38:D2:CF:A8
Authority key identifier: FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4
Certificate issuer:       /CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
Certificate serial:       0194BC3C6C02F1DAD1FD4EAE2483B868930A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft
Manifest number:          0F3B
Signing time:             Fri 31 Jan 2025 12:01:03 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:03 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:03 +0000
Files and hashes:         1: 5ZcLxiewB6SlgnkXrkL_qV-6c70.roa (hash: GbaGUbv69G2XGzJlZWZreb/2hT1CRKa032XRQqRiLc0=)
                          2: I1O4inp7HBvWNe9o3Cdiqxo24PI.roa (hash: w0+4BIRKhD7XUvL36J282b0/EXDqyGM8URO+oQQ/ReM=)
                          3: QUq_as-wJbivzxLijTmqQSzAeeM.roa (hash: Obggdbq+FXYocjRAbiQV6ufwU9548OHhlSGKsE0Fnq0=)
                          4: _SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl (hash: WNFxjcN3WVU1kPbCVDMJBMevVNFua2q0rp7XwQqmkho=)
                          5: fUAyjzobbYqY4LtTx9KW62S7ym8.roa (hash: IdzdGJHWpk15Q0jGSrpbWLOfiHsRudIY06wcbYibU3s=)
                          6: rSVe0qwmHRmRSbc-BqRXWgwo8xg.roa (hash: r3p05wO+xtEje8UL55zhFJYQg8/aaGUGyXfpX1tlFYY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:6c:02:f1:da:d1:fd:4e:ae:24:83:b8:68:93:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd21cb4baa15862d1b5773bf2be60ca5f4fc24d4
        Validity
            Not Before: Jan 31 12:01:03 2025 GMT
            Not After : Feb  1 12:01:03 2025 GMT
        Subject: CN=526982634a4ce16ecc694aefba03575838d2cfa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0f:6d:6b:50:ba:e0:71:4f:00:e5:99:91:07:
                    a5:f3:6d:72:e6:be:60:23:11:8e:90:a7:a5:d4:44:
                    5f:f4:9a:14:96:11:f4:20:7c:e5:b3:2a:6a:5f:0c:
                    d7:55:15:6e:29:a2:51:c0:fe:0e:a9:f2:46:0a:c6:
                    09:28:22:7b:fb:91:95:7c:65:30:a9:b4:81:a2:f1:
                    74:f3:56:71:e0:a9:20:46:b6:4a:8e:6e:7f:03:6a:
                    93:ba:aa:f2:6f:03:62:7c:63:e8:06:99:30:7d:53:
                    97:b9:35:16:34:b4:c8:27:ec:6e:e8:1f:1c:db:b7:
                    b2:da:a4:37:88:51:33:c7:09:00:b0:4f:c8:aa:89:
                    70:6e:c7:74:b6:7c:d7:c5:9f:dd:5b:ae:4f:f4:fd:
                    db:79:ee:a0:e3:65:69:ae:95:19:35:3d:82:ed:9d:
                    2f:0c:79:a9:e7:1b:86:df:35:69:dd:bb:29:fb:88:
                    71:43:b3:91:7f:3e:1d:e4:24:1c:05:b1:fb:75:fc:
                    28:eb:8e:3f:a1:f1:60:5d:60:ad:06:8a:c4:5b:10:
                    f2:cd:d5:6c:e7:00:b5:52:36:2b:3e:bc:9a:9f:82:
                    34:26:a7:21:71:13:52:00:2a:13:51:86:e4:17:49:
                    30:4e:ca:1b:1e:3d:8c:10:28:d4:63:15:e6:6a:58:
                    ed:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:69:82:63:4A:4C:E1:6E:CC:69:4A:EF:BA:03:57:58:38:D2:CF:A8
            X509v3 Authority Key Identifier:
                keyid:FD:21:CB:4B:AA:15:86:2D:1B:57:73:BF:2B:E6:0C:A5:F4:FC:24:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/326606-14ba-4436-9985-be5520a5c821/1/_SHLS6oVhi0bV3O_K-YMpfT8JNQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f2:f8:e7:3f:b8:ae:e9:db:5a:13:d8:85:f2:e9:ac:1c:bb:
         dd:86:f8:de:77:8c:e3:15:91:41:f0:d3:b1:bc:72:89:42:36:
         4c:a7:55:cb:72:a7:1f:4b:61:b2:ed:31:e3:cd:6e:5e:9d:08:
         c7:94:41:43:1b:24:7b:38:9f:60:84:62:48:c8:10:03:fc:e9:
         46:7d:26:c3:eb:67:39:e8:f2:7b:e7:7c:57:e1:6e:73:7c:3b:
         a3:3f:cc:7e:57:5f:94:c6:e2:fb:03:e4:64:4b:22:ba:0c:9f:
         7c:9c:2e:dc:ae:f3:aa:b9:b6:5a:56:a3:fb:60:37:27:40:1c:
         0e:5d:24:9f:7b:98:b3:f0:43:ac:6a:e1:cb:e9:59:94:34:24:
         a6:68:e3:a5:4c:7f:00:9c:59:f2:0a:45:5c:45:43:09:6d:82:
         15:71:0a:12:d3:f0:9c:a9:16:43:43:2f:dc:1c:70:16:15:24:
         f9:11:db:95:88:ff:4b:f9:c3:00:55:f1:88:29:89:8a:46:b9:
         4a:f3:76:6e:92:c5:ec:b4:53:22:e8:70:d3:61:78:37:c6:96:
         e4:b3:49:f8:f2:4f:01:57:c3:d0:c5:29:bc:ae:4c:91:21:98:
         e6:f5:8f:91:49:fc:c2:6a:fe:6c:a3:eb:fc:f5:0a:e4:68:68:
         05:39:d6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----