Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
File:                     N5FWc7KL362ywgGaxo0EZP0htxo.mft (raw, json)
Hash identifier:          DVqha03qIyCAz1SQbP84K/Q8j3o8wnfEqK5oQ1LjLWo=
Subject key identifier:   92:03:09:3B:67:3E:FC:BA:01:58:13:13:6C:C3:3A:5D:51:BB:A8:C5
Authority key identifier: 37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
Certificate issuer:       /CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Certificate serial:       0194BC7323E68337AE3639CA051747B4BF66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
Manifest number:          13BE
Signing time:             Fri 31 Jan 2025 13:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:49 +0000
Files and hashes:         1: DH9htlq0hiwldp4q07DNTkVZOf8.roa (hash: J0KU22uieTNYBq4unRpzKgHyqTQbyJRKS4kqQcbzVVo=)
                          2: N5FWc7KL362ywgGaxo0EZP0htxo.crl (hash: xuJphV/4aGNULj9x1ZnY9iNZJVtmrIpKMJ8TA7eai2Y=)
                          3: jeU3xqGrcmxdIS4lfaliQojmUd4.roa (hash: WoVvfzkH0PYO9V3NP53Pv15mZRXcsOzFbw+RGpI6V54=)
                          4: mbXBHvnDkr71szR1uqXUf3o_CNU.roa (hash: gBt+bTGYlOGXiT5DEgI8/fzoH444V5sSGRbb6v+iHAk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:73:23:e6:83:37:ae:36:39:ca:05:17:47:b4:bf:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
        Validity
            Not Before: Jan 31 13:00:49 2025 GMT
            Not After : Feb  1 13:00:49 2025 GMT
        Subject: CN=9203093b673efcba015813136cc33a5d51bba8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:42:f7:85:a3:42:78:7f:15:81:07:91:1e:1f:
                    e6:fb:0e:47:28:c0:54:ef:5b:ee:7f:af:1d:dc:36:
                    f3:d1:05:b4:75:90:cc:b3:25:b8:a2:cf:f1:11:a6:
                    20:03:bc:51:6d:06:de:9d:bc:3c:82:82:7b:e4:74:
                    17:03:2a:1b:a3:bd:f4:e1:57:43:a1:92:eb:da:db:
                    6b:db:58:6b:e0:d9:e7:5d:18:2c:f3:a0:6a:32:9c:
                    81:18:97:af:e5:2d:14:9a:6e:a7:df:d4:89:a5:fd:
                    7e:8c:0f:28:22:53:3c:c1:49:d0:a5:44:61:9e:d8:
                    74:b4:7c:57:12:1a:ec:94:7e:1b:43:f2:b2:9d:6c:
                    74:01:21:fa:ce:80:fc:53:71:c4:3f:a6:67:62:a5:
                    4c:11:df:8b:5b:af:52:b4:5a:1e:86:f9:78:89:fc:
                    0d:69:b8:83:b4:58:ff:93:79:30:c5:3f:e3:7e:e5:
                    a5:d0:f2:5d:45:a9:1f:74:b3:fb:89:39:bb:6d:47:
                    d7:af:e8:a6:a5:3a:aa:e0:ca:40:9b:c2:76:12:e0:
                    47:e6:13:ad:94:61:5a:f9:c4:96:ce:34:3f:0a:97:
                    5c:79:bd:a2:22:ff:5a:9b:af:ed:58:54:35:95:80:
                    d8:0f:12:20:4d:e8:75:f5:df:0c:72:f2:6a:48:d4:
                    30:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:03:09:3B:67:3E:FC:BA:01:58:13:13:6C:C3:3A:5D:51:BB:A8:C5
            X509v3 Authority Key Identifier:
                keyid:37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:a8:10:04:80:6b:b5:f9:4a:82:27:32:16:d4:fd:ab:0b:ab:
         00:19:d1:19:a9:33:51:5c:b9:ff:23:59:2b:7a:c3:a8:7a:b3:
         69:74:0c:9d:cc:a2:5d:ba:81:bc:a6:df:66:df:65:bc:42:eb:
         90:c5:21:9b:2f:2f:6c:4d:a2:e0:18:49:54:26:9b:9d:b0:68:
         fd:3f:78:1d:17:86:46:7c:6b:77:6f:c5:d7:24:31:22:31:77:
         34:ba:94:fe:36:ab:94:1a:fd:6a:36:de:05:fe:9d:32:42:e2:
         10:16:50:ee:83:d8:12:2b:49:1a:13:11:0e:60:2e:a1:90:98:
         b2:ca:80:6b:1b:83:e8:cf:45:dd:0c:19:b3:a2:cb:1b:b8:9e:
         14:80:69:a7:19:d3:dd:ff:c7:15:9a:b0:ab:22:8f:01:07:6b:
         cb:38:4c:03:57:dc:a2:46:84:ba:9c:40:49:f7:22:a7:cc:20:
         c9:b4:90:4b:3c:38:d9:12:94:f6:93:ea:ee:21:41:ae:c7:33:
         c7:9b:c9:9d:87:84:a0:cc:56:60:70:4b:74:77:a2:e2:44:ee:
         ad:8b:0b:44:98:11:91:56:9f:ba:00:5f:83:51:e9:aa:f4:dd:
         75:a6:f6:ff:47:71:87:39:6f:b1:71:df:7a:05:97:e4:55:90:
         f4:67:ce:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----