Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
File:                     iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft (raw, json)
Hash identifier:          pNvgaTPgtohlH+c5OFF/pUX11J+tWbwv112g6UF9iFc=
Subject key identifier:   28:15:AD:94:68:11:9E:F2:D6:57:46:74:E7:88:E8:6C:B8:0B:7F:BC
Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
Certificate issuer:       /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Certificate serial:       0194BC72F87D713B3F72E51BC704C7EF7CC0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft
Manifest number:          0BEA
Signing time:             Fri 31 Jan 2025 13:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:38 +0000
Files and hashes:         1: 0IndqmA5xgu2CF_jwxX-2bd09ko.roa (hash: CG/Zn9dtirhwk2tnBTHiZTYDu08mvtaBnxe37T6W3lo=)
                          2: 26hYMSP5I24sSK8G8ARAORN91aI.roa (hash: fE1Nc8BOxk+V3SDxaatTnZ1kS+wI1f9B8qy0zBZMF/Y=)
                          3: 5Ea_oFY8Vhazk22dtpgBa5iqoHc.roa (hash: HWgeP0eaAdQydyZn5ncNASieHJEe9+L9FHT51xwkTtA=)
                          4: Rgi2MqRe28scNXwPSUaBJHXLnRM.roa (hash: miWc+jt8vObsSbUl+pf5rxC6Fyzqxyz42FOUYU27xXk=)
                          5: htFXYL1G4eCbcC3mPYaIkosKB6Q.roa (hash: oJWFKr4H9EjNjtC5DQyq80O2d4aINMVPyWSnIqkyv3g=)
                          6: iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl (hash: bzf6aOdtrvb7njsjLfm0YYYWMiKg/roye5Iu+l0MoyA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:f8:7d:71:3b:3f:72:e5:1b:c7:04:c7:ef:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
        Validity
            Not Before: Jan 31 13:00:38 2025 GMT
            Not After : Feb  1 13:00:38 2025 GMT
        Subject: CN=2815ad9468119ef2d6574674e788e86cb80b7fbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:4b:a5:de:81:b4:61:ed:bc:09:30:0f:0d:1c:
                    a8:b2:10:30:b0:fb:c7:0d:9f:61:a3:ef:e1:86:b3:
                    38:ea:3b:9f:be:a9:be:68:d1:c3:61:e7:5b:fd:7f:
                    b5:18:63:ad:89:87:c5:3b:ad:5d:14:ca:d4:3f:8f:
                    cc:68:a1:30:f8:aa:a1:fc:83:34:54:7a:f8:59:f6:
                    e1:2f:66:35:8c:da:9a:2c:89:1c:19:18:cc:1a:23:
                    a9:d2:5e:47:33:cd:a1:05:b3:87:8b:a2:e6:5a:b2:
                    a3:1a:07:2e:a8:f8:33:a6:bd:27:05:0b:20:b4:88:
                    92:ef:fa:14:40:dc:2e:e4:60:a8:70:ff:40:bb:1a:
                    2f:dd:6c:4c:e4:40:01:dd:99:38:bb:e6:f0:96:f1:
                    5c:d5:6c:79:35:16:d6:e2:f4:0c:bb:7e:39:c9:6b:
                    c7:92:79:80:5f:ec:bc:ff:ff:03:67:16:57:7c:43:
                    e8:e7:f3:e0:e9:70:2c:e9:94:c7:4b:f6:d1:aa:45:
                    74:25:03:f4:5d:d2:b1:de:7e:5c:25:78:0c:6d:f2:
                    71:56:a2:a8:91:d8:d7:35:99:11:5e:63:5e:93:80:
                    b8:c3:7c:1d:9f:5b:f0:f1:5e:d9:05:c2:28:26:48:
                    c7:29:b0:24:2e:ed:6f:27:e4:7b:0b:e6:15:2a:eb:
                    fd:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:15:AD:94:68:11:9E:F2:D6:57:46:74:E7:88:E8:6C:B8:0B:7F:BC
            X509v3 Authority Key Identifier:
                keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:92:c6:b2:73:36:92:02:e6:f3:41:c1:6d:dc:f9:8a:83:be:
         51:0b:9d:41:b6:2b:8e:b9:38:47:ca:ac:d8:c0:a0:ac:2b:cb:
         7e:2c:d2:ba:e0:0c:2e:7e:03:86:a9:82:73:12:d4:7e:5c:4b:
         4d:a4:9c:dc:8b:41:dc:dd:6b:7f:3f:ea:e1:e2:62:fe:dc:35:
         a2:23:cf:26:56:37:3f:10:4d:72:7d:f9:56:e9:30:8f:72:2d:
         ba:aa:ab:e2:a7:38:50:ba:b3:3b:d9:cb:dc:98:34:28:1f:ee:
         c0:44:f5:9a:13:0d:c5:0d:71:cc:78:83:79:b6:94:70:aa:a4:
         68:fa:17:99:a7:95:49:48:7c:d2:3c:00:e1:c5:66:53:cd:f3:
         76:d5:56:de:15:ec:e9:94:28:a0:a9:86:e6:06:4d:10:be:3f:
         86:e6:6b:b7:c7:63:bf:5d:27:72:52:9c:e5:bd:53:96:d0:ce:
         4e:34:0b:92:87:ff:e9:03:30:59:a5:54:87:2c:29:b7:15:3e:
         73:aa:44:cb:1f:0d:65:f6:90:39:59:79:0f:a8:f2:49:5b:6c:
         cb:46:d6:9e:46:cb:fc:f8:9f:9a:4a:a0:d4:3a:d9:e7:ba:ad:
         bb:66:f2:d7:ae:08:0d:06:b5:5a:99:6e:93:a0:2b:32:14:9c:
         7f:e3:9c:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----