Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
File:                     1-i5yq_exco_aaqCwQT2IVIEuo2E.mft (raw, json)
Hash identifier:          rE/jUxhgHvY49iD5hjBa8BxTPopcybVVByhDSUk+hxI=
Subject key identifier:   ED:60:86:FE:94:0D:95:86:7C:36:2E:A2:37:33:B2:9A:E0:B9:81:AC
Authority key identifier: FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61
Certificate issuer:       /CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
Certificate serial:       0194BCAA0EB65C4492398F6B4E743537199A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft
Manifest number:          1433
Signing time:             Fri 31 Jan 2025 14:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:49 +0000
Files and hashes:         1: 1-i5yq_exco_aaqCwQT2IVIEuo2E.crl (hash: RpmoyXw9n1ewNLPKRSD6cmtiSuRtNpKZL0+08wkYqtQ=)
                          2: 20JZoPz-t_mgvCADeYADS1I1_kA.roa (hash: RK32qURGpdFetMp2/p5tqjPHVuZOydtV4ypb7Fv2oMw=)
                          3: FOD3WMgpxNybQzPuOwe78NsZWus.roa (hash: aFhRTJ+99Rr5uEMBT8AVfzARvPKS5dqhwYxUDD8GnV8=)
                          4: I7kRS98TWlLCpdxkZBJ1Ghb8vEo.roa (hash: pMswfMPqF7jqU8BWibFY90ZZ9yo1kLeHnDWRYRgreMo=)
                          5: JKL9ye3UOtI1o8T1cr1S9hXZ2no.roa (hash: lqCnv+8U/mZxgsC3R6bKu9b+cHWg6szFuB9C89FECMk=)
                          6: NKAZ0yQz4XuaBkRE9662AOjULN0.roa (hash: WvZwUHQ3SYfvF1aNu0uLqAKbebVCJ8X+LsDJ8/NlJz8=)
                          7: fPkUlM10HdenIbz-4UarZNI0zVw.roa (hash: YSGgPzsusSZwFwzPhGTMehx0nsGiu8yxsdihONVOyuU=)
                          8: hjRwwruuc7xXtL8W5gfmyR6abQw.roa (hash: djOP6Nk8xft6q+iLH/g7Yin3X++Oc/uER5vpULDglLk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:0e:b6:5c:44:92:39:8f:6b:4e:74:35:37:19:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fa2e72abf7b1728fda6aa0b0413d8854812ea361
        Validity
            Not Before: Jan 31 14:00:49 2025 GMT
            Not After : Feb  1 14:00:49 2025 GMT
        Subject: CN=ed6086fe940d95867c362ea23733b29ae0b981ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3e:49:7b:be:86:86:52:ee:1f:dd:df:39:f5:
                    91:dd:07:52:79:9b:67:f2:22:ee:f0:a6:79:39:1d:
                    03:7c:34:6a:17:bd:ee:a8:e6:ad:94:05:2c:77:39:
                    26:cd:8c:5c:c8:5e:d4:f3:a5:e6:a9:27:37:ad:f1:
                    a2:19:d0:4a:89:96:f2:27:9d:77:f8:c4:39:25:87:
                    87:cb:d4:11:d5:16:2e:aa:a4:8f:83:d6:1b:02:13:
                    4d:3b:df:28:12:e8:1a:e2:26:9c:63:a9:8c:3d:c3:
                    29:ef:6a:63:18:a2:17:aa:43:d3:1f:e7:eb:fb:b9:
                    fa:ba:80:28:03:16:aa:b6:c4:58:94:f1:af:19:3b:
                    9b:78:02:38:cb:fa:2a:0a:c4:02:af:ad:1a:91:d8:
                    45:71:b4:6b:c8:54:b2:ce:19:92:e1:a3:01:18:3b:
                    aa:2c:aa:00:6f:cb:44:57:38:23:28:61:27:0e:b6:
                    3c:1a:27:07:00:12:f6:ae:27:a1:75:7c:05:52:d7:
                    14:7e:07:67:b0:bd:82:0f:bc:a5:c5:77:d2:49:bf:
                    4c:85:95:76:fc:08:83:3e:8f:de:69:10:af:c1:c1:
                    3d:08:31:88:e2:0a:ff:40:ea:e6:ef:75:63:16:24:
                    55:0d:2f:e2:43:75:0e:bd:0c:2f:87:6f:f7:06:48:
                    51:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:60:86:FE:94:0D:95:86:7C:36:2E:A2:37:33:B2:9A:E0:B9:81:AC
            X509v3 Authority Key Identifier:
                keyid:FA:2E:72:AB:F7:B1:72:8F:DA:6A:A0:B0:41:3D:88:54:81:2E:A3:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-i5yq_exco_aaqCwQT2IVIEuo2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f61591-7ca8-4a9a-899f-a366da251a83/1/1-i5yq_exco_aaqCwQT2IVIEuo2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:c8:ac:ef:ca:18:9c:fd:0c:13:2b:01:7a:dc:75:90:f5:23:
         fb:60:74:63:07:a7:00:4c:ca:37:ac:05:6b:cd:94:75:d5:84:
         97:1a:ce:17:da:1f:56:69:07:80:d9:2c:c0:e5:55:ba:0f:ac:
         2b:35:49:6c:c2:8f:35:ac:66:c5:46:87:4e:54:cb:8a:9b:c6:
         e7:90:8a:dc:6a:8f:5c:b1:4a:d6:a6:ca:58:a1:bc:9c:64:09:
         21:54:cd:5f:b0:1a:44:7e:f7:37:81:56:ca:fa:f6:1e:42:d7:
         3e:ee:41:83:0c:04:11:77:9c:41:55:db:1a:61:ff:e9:33:65:
         91:b9:15:1f:41:85:31:63:bf:e8:ac:fa:e8:74:7b:06:47:87:
         3e:fa:94:90:50:34:85:62:23:51:d4:51:6e:9e:4d:78:61:a2:
         44:c8:36:15:50:ab:8b:1a:3c:fa:2a:c8:90:c3:c1:5c:2b:13:
         d9:b0:ed:bd:3c:ab:d6:94:cf:0e:1e:45:f9:fb:a1:4f:c9:a4:
         59:25:a8:cc:f8:b3:66:92:46:ad:07:bc:97:e5:59:bc:2d:4e:
         2d:9a:f6:e4:9d:88:7f:ce:73:54:81:1b:55:46:c3:a5:9a:12:
         ab:69:d7:2d:ae:2d:e9:71:20:c7:11:7e:cf:73:c9:46:95:97:
         5b:a1:4f:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----