Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
File:                     yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft (raw, json)
Hash identifier:          5fgcAMpYU1+D5JSDyy8lfRuJLarZjB85N9MzScxUTlk=
Subject key identifier:   D3:87:E3:A2:77:F0:45:3E:BA:D7:69:06:26:07:A9:F8:DE:FE:2E:DD
Authority key identifier: C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1
Certificate issuer:       /CN=c8531ae2ce57c95f5a398930ea45503542801ba1
Certificate serial:       0194BCAA1872D46593C6F60E484F553BF6EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 14:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:51 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:51 +0000
Files and hashes:         1: Fdf0vtB1gT4L0JunIsm8qNZYmQ4.roa (hash: Hfh7wbvCwd9LX8YiFV9RA+et4MH+5Md9SfCGKXu907E=)
                          2: WzbbS-CvpAp-X59KDM_38Kb2Q90.roa (hash: nHcAVErDor/w6cF6rsBmTNyYVia/mJgseR3zdZens+w=)
                          3: iUi7thjoE_NSerMmdG4mBc-A3aQ.roa (hash: XBvqQypf6zmJJtMlo2u++NDcjCA5xpacY+hSBCY97kY=)
                          4: rmFmeiHNGZqQIM8I3hQZlTQLSPU.roa (hash: +4TH3iY83i5mgX2X206BcOV0PV0agK4VaBkhFLKmwRA=)
                          5: yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl (hash: A43o1SJFdEgugubIgQeTMydtz45tJ8yFSy/lkCyx5WE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:18:72:d4:65:93:c6:f6:0e:48:4f:55:3b:f6:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8531ae2ce57c95f5a398930ea45503542801ba1
        Validity
            Not Before: Jan 31 14:00:51 2025 GMT
            Not After : Feb  1 14:00:51 2025 GMT
        Subject: CN=d387e3a277f0453ebad769062607a9f8defe2edd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f9:32:16:57:b3:96:8b:47:82:39:77:7d:9b:
                    4d:7c:67:67:1f:92:7c:35:6a:9d:96:de:fc:09:c0:
                    e6:a8:91:95:18:4d:44:8e:ba:d3:83:2f:28:d2:4a:
                    20:f9:06:c5:f3:1e:64:85:2a:26:b3:75:09:9d:e3:
                    79:b0:fe:dd:cb:bc:46:8d:ad:16:28:21:80:95:53:
                    65:f1:43:1e:37:3f:c4:fa:03:fa:34:79:3e:6b:9c:
                    4b:36:b2:fc:f5:d4:7f:d9:d7:7b:40:6b:00:8e:57:
                    e0:04:ce:22:45:d4:1e:72:cd:2e:d4:6d:5c:f5:cf:
                    26:2f:63:09:17:e4:fd:b2:cb:c0:e2:ae:8a:f4:14:
                    b9:41:01:bf:87:52:5c:47:b4:31:0a:83:a8:ed:f2:
                    8f:66:ac:ac:dc:89:5a:14:36:80:1a:20:06:71:e1:
                    27:51:9b:d8:5f:d9:76:7e:0d:d5:ec:b8:d1:31:59:
                    d8:bb:79:ba:96:0b:a6:58:19:e6:e0:2e:44:4e:21:
                    c0:3b:1b:be:7e:62:af:e6:86:4e:d5:22:79:e6:57:
                    cf:40:ee:d7:30:4f:21:ac:38:2b:73:ab:8d:e4:12:
                    b9:4d:9b:41:42:3a:d8:af:67:12:c1:f6:6c:2f:8a:
                    ac:ec:08:cf:9c:aa:4d:77:89:33:ad:1b:29:ab:3e:
                    25:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:87:E3:A2:77:F0:45:3E:BA:D7:69:06:26:07:A9:F8:DE:FE:2E:DD
            X509v3 Authority Key Identifier:
                keyid:C8:53:1A:E2:CE:57:C9:5F:5A:39:89:30:EA:45:50:35:42:80:1B:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFMa4s5XyV9aOYkw6kVQNUKAG6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/c4c32c-322e-4ed7-8a29-45d542d5f55f/1/yFMa4s5XyV9aOYkw6kVQNUKAG6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:00:4b:5b:c9:65:fc:11:c0:af:c8:bf:d8:76:58:6a:19:49:
         79:a3:2e:14:fd:10:bd:7f:9f:ff:3d:bd:ba:54:d5:4c:60:9c:
         78:de:e3:1f:20:f5:b3:b9:9c:aa:a5:4b:fb:de:dd:9d:c4:8d:
         6f:e3:7b:b6:d8:af:3e:1f:ac:16:b8:d5:08:86:2a:43:3a:99:
         69:88:18:a4:24:6c:4c:c2:bc:16:e8:87:d6:69:ff:38:0b:74:
         8d:8c:76:e4:69:28:db:50:53:68:93:09:20:3b:a2:84:51:2a:
         29:3b:69:61:29:fe:dc:93:c2:49:7b:ca:7d:50:96:94:c5:9a:
         4e:34:c9:b1:16:94:f2:da:b0:2b:c4:a6:33:e1:df:36:9e:a7:
         15:ca:27:31:b5:71:f2:90:34:62:50:97:ec:2f:62:68:93:4e:
         2d:a5:05:d4:04:05:db:b4:0e:6a:2e:e7:9e:77:2c:6b:d3:a7:
         7f:36:45:3a:4f:fd:06:58:d3:3d:90:a7:c9:7d:94:09:46:83:
         fa:38:fc:61:6e:4d:21:43:77:66:3f:5c:37:7d:fb:bb:5a:3f:
         4d:e9:31:b7:8c:15:ca:89:10:5d:30:4a:f0:5d:a4:b6:3e:c0:
         de:f6:89:7f:ff:eb:f5:32:ac:e5:8c:32:54:b3:b4:8e:3a:fa:
         1d:ce:54:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----