Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft
File:                     Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft (raw, json)
Hash identifier:          iN481X4Dj3Dcda61P3WGRI6GnXssOeOo2iJ1lqDY3lI=
Subject key identifier:   F2:D7:E9:99:BF:48:0E:0F:0C:AB:59:74:A1:17:8D:47:59:02:B6:C1
Authority key identifier: 32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03
Certificate issuer:       /CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
Certificate serial:       0194BC3BEB3401C8EF2BD70132B268797906
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 12:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:30 +0000
Files and hashes:         1: HmHeQxMY02gAsBxkDWSIqXAFPWk.roa (hash: yFvd3OyXwMNthaAHqIWMziti5jwnDTnfs9Aruq9ufQU=)
                          2: Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl (hash: dWsO3Wh/UFsunnaicwHquhfAG+Hw9Ya+iOFHNQLvGLo=)
                          3: Uy1V9b0wFpdMlzDRipTY6OI6NV0.roa (hash: mWAWf/tUyMqSuERI1NnQLYVJLUvPjig1mh8WLVGNkto=)
                          4: eLZAK6GtA5fTxDAgO34pkWDxDSg.roa (hash: JJF45T8sSlny8vS8g2xIJpL+wlb6VnXLMeh3W/wsIG0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:eb:34:01:c8:ef:2b:d7:01:32:b2:68:79:79:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32a77427c03709b339a95b0ad9a4ac9d2c92c903
        Validity
            Not Before: Jan 31 12:00:30 2025 GMT
            Not After : Feb  1 12:00:30 2025 GMT
        Subject: CN=f2d7e999bf480e0f0cab5974a1178d475902b6c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:77:e7:77:e0:31:d7:80:59:8f:f6:48:51:76:
                    7b:df:f2:da:37:a4:cd:4a:a4:5d:5d:3b:58:d5:6e:
                    44:9a:5e:cb:75:0d:96:54:e0:c0:4b:74:bb:3c:11:
                    dd:9f:c9:c9:a5:c6:f7:2e:c9:2a:2c:ca:6a:43:3a:
                    e5:6a:0d:0e:26:fe:a3:73:9e:f6:31:97:8a:1f:85:
                    6e:d3:0a:e0:19:95:e4:1d:96:1f:a8:db:78:23:30:
                    67:1d:a4:6f:67:86:7b:39:a4:94:bb:d2:69:45:48:
                    82:73:ae:3f:b1:30:59:5f:8d:a8:41:ef:68:26:ce:
                    9e:d0:49:64:aa:6a:a9:52:5f:11:f2:b3:cb:09:08:
                    14:b3:ff:ab:54:8e:de:d5:32:12:bc:bf:99:58:f1:
                    fd:07:eb:5b:39:a2:a5:f2:ea:f9:1e:be:bc:23:37:
                    6c:93:92:36:b0:54:52:19:8e:bb:94:a3:bf:98:1f:
                    03:7b:91:53:87:06:5d:4a:f1:99:6f:35:eb:16:c0:
                    aa:ec:62:0f:bf:4f:47:2c:33:ed:19:e9:a3:9c:81:
                    7a:9b:b6:64:32:d9:de:67:d5:6e:d9:2a:9a:36:de:
                    d5:9a:e5:a0:04:b1:ae:6c:36:3b:f4:12:57:99:c3:
                    fc:05:7b:4b:2a:83:9e:a7:d6:28:a3:54:47:dd:a7:
                    e2:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D7:E9:99:BF:48:0E:0F:0C:AB:59:74:A1:17:8D:47:59:02:B6:C1
            X509v3 Authority Key Identifier:
                keyid:32:A7:74:27:C0:37:09:B3:39:A9:5B:0A:D9:A4:AC:9D:2C:92:C9:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mqd0J8A3CbM5qVsK2aSsnSySyQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f251ed-5967-4ddd-932b-7d40b7c8fb01/1/Mqd0J8A3CbM5qVsK2aSsnSySyQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:48:80:f7:b7:40:da:a2:a2:3f:60:6f:b1:7c:ef:ce:aa:92:
         02:b6:f8:cf:94:56:4c:37:44:92:ea:d4:f9:5c:a9:85:6c:e3:
         de:a1:bb:c4:d2:1b:d2:a2:90:36:36:e4:7e:d8:58:1a:7b:e5:
         51:f6:79:a4:90:8d:05:e6:81:65:ad:3d:1e:f0:8f:92:42:22:
         d7:5f:aa:01:61:fa:f3:db:c4:79:7f:65:11:da:3e:c9:42:b6:
         64:5a:6c:1f:e1:52:9f:b5:f0:f7:d3:a1:14:5e:29:cd:d8:13:
         f1:c4:f5:48:38:27:97:fe:58:9d:84:aa:ba:9e:1c:14:53:a9:
         4a:49:a5:20:d4:3b:b5:a2:fc:e5:c6:29:fe:77:a6:25:90:10:
         89:c4:f4:3e:90:b1:e4:da:59:ce:14:d4:be:25:84:53:de:c7:
         b4:fa:36:84:e0:14:6e:0b:a1:18:d3:56:44:2c:b7:08:61:dc:
         50:e4:7f:18:74:b1:66:8f:41:99:cf:a8:be:3e:e0:b3:f1:75:
         c2:c7:73:de:1e:5c:11:5d:4c:bd:70:7a:8a:c5:b8:4b:bb:36:
         17:44:a9:19:34:0a:9a:88:36:1a:92:47:70:fe:11:93:d9:5b:
         c4:6b:d0:9a:16:13:5b:3a:b6:cc:f6:00:1b:9c:ae:b4:d8:16:
         06:f4:ec:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----