Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
File:                     YKVAzkUEVjReyOCY709TY010vx8.mft (raw, json)
Hash identifier:          PB3hMU+icVy9Y+nFcux4QG8bG+fL3QWM6ypxMLd1u4g=
Subject key identifier:   32:EA:EB:CF:F8:4C:95:A3:F0:2B:60:DC:F8:9A:12:AA:6E:3F:95:AC
Authority key identifier: 60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F
Certificate issuer:       /CN=60a540ce450456345ec8e098ef4f53634d74bf1f
Certificate serial:       0194BD4EAE131D30CE7FD549DF25E192C3C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft
Manifest number:          028B
Signing time:             Fri 31 Jan 2025 17:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:37 +0000
Files and hashes:         1: Bq43MW6bqq2vM6N_DNsfJJero4c.roa (hash: VW9B+4fqw3vwWS3Hrgaa9ekIoZlwSTvJqX1tdku3w4Q=)
                          2: FFuyCzey-ipHJjO6uFxO4LXEWh8.roa (hash: BnXInNtTIRPQzVjQvIt2UJghwBPIV2UTW4dKQw8S/yc=)
                          3: GNYCBA73RNfPwbA7eeRR2Ynb_MU.roa (hash: StZ632pNqDa4wkp/dODQDXg1mtBzKfLiR3mQsyHI7KM=)
                          4: MxYpdz7QLHrqszrw0ICVs_l_uwI.roa (hash: uY4nKFGGyfh/6l3FSdHL/FklopbqDKoZs2zw3yHpkBY=)
                          5: YKVAzkUEVjReyOCY709TY010vx8.crl (hash: ElKaJzuFesfldVsMR0BuI+yjlACD1t/rU0MHcFd0SIc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:ae:13:1d:30:ce:7f:d5:49:df:25:e1:92:c3:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60a540ce450456345ec8e098ef4f53634d74bf1f
        Validity
            Not Before: Jan 31 17:00:37 2025 GMT
            Not After : Feb  1 17:00:37 2025 GMT
        Subject: CN=32eaebcff84c95a3f02b60dcf89a12aa6e3f95ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:50:bc:73:76:5b:2b:e1:78:49:8a:cb:44:4c:
                    4a:ef:72:07:2f:9d:bf:22:1f:4b:3a:b9:ff:d6:9b:
                    ce:2b:b0:90:2e:bc:43:17:f5:e1:13:2b:4f:50:38:
                    0e:5b:59:92:4b:ed:3f:01:c4:ff:c6:6a:61:d1:48:
                    a4:21:32:b0:ca:4b:9e:c6:00:f4:ef:19:64:22:8d:
                    ef:14:e5:56:8e:86:6a:01:56:eb:19:80:8b:73:db:
                    b0:44:16:38:c9:c6:55:88:89:1a:f8:41:23:3c:07:
                    59:db:c5:ef:a9:ec:a3:53:70:72:50:a5:ba:88:c1:
                    89:5d:3f:be:b8:05:32:b5:36:ce:e3:c6:dd:96:80:
                    4e:a1:39:db:68:bd:4f:66:40:22:d8:20:cf:2f:20:
                    95:2c:aa:a8:74:0d:4d:78:76:23:62:76:ef:d8:1c:
                    32:4a:32:e5:71:35:64:a6:c1:e8:e0:09:e1:f2:b7:
                    d0:df:38:f8:b4:8a:93:6c:75:b6:3c:d6:a3:34:bd:
                    0a:c2:26:7a:6d:88:db:d6:03:94:d6:41:bb:eb:fb:
                    75:47:15:08:83:4e:29:ff:42:d4:8d:9f:66:4b:a8:
                    65:d8:e5:ee:c3:fb:b5:7a:39:e0:14:f7:48:b0:2b:
                    a5:3b:42:2a:b2:a6:1e:be:08:aa:f7:11:a8:c7:c8:
                    ba:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EA:EB:CF:F8:4C:95:A3:F0:2B:60:DC:F8:9A:12:AA:6E:3F:95:AC
            X509v3 Authority Key Identifier:
                keyid:60:A5:40:CE:45:04:56:34:5E:C8:E0:98:EF:4F:53:63:4D:74:BF:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YKVAzkUEVjReyOCY709TY010vx8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/195a47-a2cb-4f00-8531-e473531f6fe8/1/YKVAzkUEVjReyOCY709TY010vx8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:33:cc:f3:eb:db:1a:63:8c:16:b1:72:8a:f1:c9:66:c7:b4:
         cc:7c:7f:04:7a:75:b1:ca:ba:81:96:11:dd:fd:92:0e:3a:58:
         11:f0:54:6e:ad:17:ca:a3:9f:a4:a4:ae:da:ed:1f:ab:18:37:
         1e:22:5f:c0:5a:7d:0c:77:2c:8a:a1:f2:b7:d9:d1:b7:8e:6c:
         fe:c8:b0:c1:fe:eb:01:d8:6b:4d:ef:42:ee:3e:99:cb:af:8e:
         3a:2a:ec:16:27:d5:87:fa:77:93:d0:0b:2a:c7:35:c1:fa:96:
         26:e8:bd:d2:8a:a3:9c:e0:16:19:b8:89:ec:74:d4:d0:6e:9f:
         e1:4c:9e:bd:eb:24:f4:d9:be:b5:04:a4:46:b2:47:c3:3a:39:
         48:37:89:53:f7:1f:f7:b5:da:b4:1b:9b:81:df:70:8d:7f:e2:
         ed:b1:f8:eb:b0:00:b8:7f:c5:b8:46:42:6a:ab:0a:b2:a4:05:
         a0:ac:75:8e:b5:fb:66:41:da:2e:a3:fc:07:bc:2d:25:7f:c7:
         45:25:08:77:12:ed:c7:9e:88:91:11:b2:fd:62:b3:5e:4e:f6:
         90:84:34:27:7a:82:c6:ab:6a:29:4f:47:63:a6:31:35:31:5c:
         b1:69:a1:ec:ed:04:c6:7b:1a:9b:e0:11:c7:f5:32:55:45:0f:
         18:e4:f3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----