Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
File:                     0lYiRXob4zoBJYhmoGfgRH39iWQ.mft (raw, json)
Hash identifier:          FHsLZn9rFxkXvZI5ZQbwytec1lKjFf8rLbWCHRFw9Z8=
Subject key identifier:   99:D0:7B:80:92:2D:25:25:EE:89:B3:B1:AF:EA:7B:1B:68:64:8B:9A
Authority key identifier: D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64
Certificate issuer:       /CN=d25622457a1be33a01258866a067e0447dfd8964
Certificate serial:       0194BCA9F1B139AB8A8DD6E16F7CC117E078
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft
Manifest number:          06F3
Signing time:             Fri 31 Jan 2025 14:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:41 +0000
Files and hashes:         1: 0lYiRXob4zoBJYhmoGfgRH39iWQ.crl (hash: 4R3IKFUG4JycWOMs56SWiR3aaVzLApBIYyomynfqIwc=)
                          2: BZ6xhJfrN5RhRf6aXwKr795wQzI.roa (hash: Sf+y1lLm8gMUQKO4zkjlgPHIcjW4+YLH23G2t7sxkBg=)
                          3: POa1_1lG2fZrcfZRxbGnmzL6mIU.roa (hash: hZbXwNqNEsVBnStQz74wqfWaYd+uX0JeS3LWv9uiIFs=)
                          4: dOb6T3OXGQhPHEiptZe57ohMT40.roa (hash: GPGKsltxe4+qDNQ/6wiIDNbmlS41MFY6pNidlYOqIB8=)
                          5: odqokcojUr9yxkWAb7GrIB85gu4.roa (hash: Om0/D88pk7hA9ZrAEiw9hB11xnW6KFgos1pPe55BWW4=)
                          6: tfLXGQ5PJkMa3PshyPbQs6SgEew.roa (hash: 8rcVApOGw4v1UyjSDglLR5/i6c9sG5r3XdZlHqPb4QI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:f1:b1:39:ab:8a:8d:d6:e1:6f:7c:c1:17:e0:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d25622457a1be33a01258866a067e0447dfd8964
        Validity
            Not Before: Jan 31 14:00:41 2025 GMT
            Not After : Feb  1 14:00:41 2025 GMT
        Subject: CN=99d07b80922d2525ee89b3b1afea7b1b68648b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b0:e7:2e:a9:6e:7b:52:d4:2c:fa:54:35:3f:
                    98:2c:bd:1b:38:d3:de:a5:62:7f:d2:6f:9e:0e:5b:
                    ab:77:14:73:f7:43:9e:79:3a:19:db:26:1b:4e:11:
                    c5:62:60:f7:ef:72:d9:98:cf:dc:5e:67:ee:4f:de:
                    66:8d:b9:47:df:bc:fd:5c:86:39:da:47:44:0e:bb:
                    4b:50:50:2e:86:26:b3:b2:1b:c5:76:28:f7:4f:bf:
                    9b:7b:ee:2f:d6:c0:48:70:77:a3:b9:55:69:aa:5b:
                    34:65:4e:5a:37:47:68:8c:fc:e4:b4:ed:c2:c9:2b:
                    5e:74:2c:2a:f1:9c:eb:b3:5c:f6:36:2a:8b:28:4e:
                    99:dd:be:81:c6:82:7e:a8:52:44:a2:ac:1c:39:2b:
                    cf:74:f0:4a:76:d5:b8:38:41:fd:fa:06:a1:37:d1:
                    57:99:84:2c:c3:b8:b2:de:78:8e:c7:fb:8d:ce:aa:
                    e5:e5:95:9a:b3:5a:5b:f4:6c:6f:45:3a:a0:c4:67:
                    1d:c1:ff:fd:e3:c7:ed:59:ac:fe:47:6b:67:ba:4b:
                    f0:de:28:45:4c:42:1a:1a:b5:7b:7b:80:d2:27:af:
                    2f:c9:dd:44:6f:de:80:c0:6d:03:f2:75:33:76:c5:
                    1f:7c:08:f2:0c:f6:84:bd:86:ec:01:06:c2:25:49:
                    e8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:D0:7B:80:92:2D:25:25:EE:89:B3:B1:AF:EA:7B:1B:68:64:8B:9A
            X509v3 Authority Key Identifier:
                keyid:D2:56:22:45:7A:1B:E3:3A:01:25:88:66:A0:67:E0:44:7D:FD:89:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0lYiRXob4zoBJYhmoGfgRH39iWQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/26b47b-f2ce-4f2b-9d33-45579e418ff7/1/0lYiRXob4zoBJYhmoGfgRH39iWQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:83:dd:0c:07:b8:c6:80:12:44:34:41:90:3b:0c:23:07:2d:
         61:50:36:15:44:47:6f:a8:91:f2:c4:ee:66:1c:d5:46:d0:64:
         49:4a:d2:ce:99:d4:42:7a:c1:b3:2f:4b:80:5b:13:15:41:19:
         8a:c8:33:6e:81:f2:fc:9c:3c:b9:85:f6:19:ad:3d:b8:a1:f6:
         6d:ed:e3:73:51:b8:d4:c8:d9:ee:cb:32:41:55:3d:c9:6c:6b:
         a9:7c:f9:47:2b:6a:84:8e:77:a3:d0:d3:1e:73:b7:28:96:c5:
         9f:6b:da:c7:f0:66:6b:59:f5:60:28:e4:a0:37:8f:df:3d:78:
         1e:97:66:b2:07:4d:4d:4c:ea:e8:cd:81:06:04:54:68:af:3b:
         35:58:86:7e:d4:4d:ed:69:1d:00:e6:69:53:14:61:f4:80:7b:
         50:89:5f:5d:f8:21:00:42:fe:b2:3f:2f:22:2d:4e:7f:2b:6a:
         65:1d:59:2d:f9:de:ab:dc:e2:a0:31:f4:98:b7:46:6a:2c:7d:
         0c:b0:18:50:05:ba:68:82:50:3f:3d:9f:76:3a:a7:9e:0b:e5:
         a9:8f:1f:06:9f:9c:67:d9:06:c2:04:3e:fe:a9:6b:f4:d2:30:
         64:2f:2a:8e:4a:7d:0e:dd:56:38:0c:25:3c:b2:22:07:35:83:
         b1:0f:97:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----