Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
File:                     u4MGMPI7Bwore99Sn3OUjJfqzUA.mft (raw, json)
Hash identifier:          M6FcxhlFyTgScx+cYdBIHwJcWrmFVYTCzgZs5+gGRB0=
Subject key identifier:   77:5A:E3:19:6B:5E:D6:06:2D:A3:79:7E:8D:32:09:49:36:51:E0:7C
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Certificate issuer:       /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial:       0194BCBD8DDFA8E08B21F4F565B1BC0E1299
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
Manifest number:          1461
Signing time:             Fri 31 Jan 2025 14:22:06 +0000
Manifest this update:     Fri 31 Jan 2025 14:22:06 +0000
Manifest next update:     Sat 01 Feb 2025 14:22:06 +0000
Files and hashes:         1: 2zKVxa5ZKGpg1zDrETT8fTyAG8U.roa (hash: RUglVoeUy6tdJhM2FiBGFBEjFDwNfOCa0rtIGcZ1G9w=)
                          2: 3G7uhcLKWWOtfmFK3Aty6Ijq4PE.roa (hash: 8QA8TR1b1eaSEAsPrBsT2EeJQQNKv/ChzK9Nd3Kvl/4=)
                          3: SDOLmAhobKGDPwlOvXakvXkm9LU.roa (hash: zmS1T8bhM8/AfzZdTFVM6nmbZ8DYbKH7HiNAE7C3CHU=)
                          4: X1siZ9Qw-Qdr1rdQOI3YLEys8HM.roa (hash: 5qhy7PA4ouPLqHLfVTzhYKTNogFI0I7BWVsffjGnW/g=)
                          5: bu-aY814oN0zZmuedO0-L6nA1Js.roa (hash: l9qaLt4gYL7GO6wlotPMWtCoUA115L85+uv76tlCG/s=)
                          6: fTehu6R3AoM7vzxCOKIZORSQlUI.roa (hash: GS3ArN1KMCpgSOmhobJHpxL3olu/s5FKNkG7/hwSOoQ=)
                          7: u4MGMPI7Bwore99Sn3OUjJfqzUA.crl (hash: w8VX/OtSNhX2wFRr9Zi7vtH2yDQz4DM1E0V2vf2T8BM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:bd:8d:df:a8:e0:8b:21:f4:f5:65:b1:bc:0e:12:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
        Validity
            Not Before: Jan 31 14:22:06 2025 GMT
            Not After : Feb  1 14:22:06 2025 GMT
        Subject: CN=775ae3196b5ed6062da3797e8d3209493651e07c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:18:40:37:09:56:2c:11:0b:54:9f:16:10:6a:
                    f5:bd:7a:c4:39:f6:eb:29:49:73:08:0d:2f:cf:63:
                    7a:7e:69:47:25:d6:e8:9e:5b:5c:a5:dd:b2:05:ab:
                    d4:c8:c6:1c:b4:fd:73:34:e0:60:33:91:a5:c9:fc:
                    f8:5b:d0:4c:28:e4:63:e5:dd:25:a2:9c:64:fb:9c:
                    a5:87:f4:b2:27:3c:1e:37:d3:45:2f:90:4d:5d:bb:
                    e8:93:09:1f:57:5a:bb:f5:9b:d4:94:1c:e2:53:96:
                    8a:93:f1:7a:98:25:e8:59:a6:a8:ba:61:a5:93:d3:
                    08:51:43:30:93:1a:a4:76:4a:81:ff:4f:48:ba:84:
                    2c:5f:b1:79:06:cb:14:57:71:ce:2f:0c:99:85:45:
                    82:0b:5e:87:8d:b2:c9:59:8a:46:67:40:d7:32:dc:
                    27:ac:43:f9:28:f2:62:0e:00:0c:be:56:a1:58:92:
                    67:19:3a:d8:ff:4d:e0:f9:9c:3d:47:17:4e:cf:aa:
                    38:c7:02:b9:41:07:71:7c:b0:b5:69:17:26:09:9e:
                    9e:91:d4:af:4c:67:0b:b1:14:66:70:d6:c4:93:30:
                    b8:ff:f8:b0:23:ee:a1:9f:fc:89:f8:bc:3c:eb:ca:
                    56:f6:d8:fc:7f:67:cf:2d:52:1d:49:27:74:1f:9e:
                    01:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:5A:E3:19:6B:5E:D6:06:2D:A3:79:7E:8D:32:09:49:36:51:E0:7C
            X509v3 Authority Key Identifier:
                keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:b0:33:07:b3:e5:2a:26:94:89:5f:31:43:d5:2a:4c:2b:7c:
         3b:58:28:e8:4c:48:80:fc:4b:24:a0:0f:44:fb:ff:29:de:ed:
         2e:f1:bb:1d:f6:44:a4:0c:c8:a6:76:9f:41:90:a3:bf:b9:3f:
         c1:87:86:6b:ce:be:38:a8:34:52:f3:30:42:56:ee:e5:f1:2c:
         70:fc:da:ab:fa:e1:09:25:ad:09:ad:a0:6a:17:d6:d8:50:6f:
         19:54:a7:c9:b3:92:7f:2b:4c:ae:4c:f9:6d:7c:d7:20:0e:47:
         68:74:64:02:ac:37:1b:48:e2:11:b8:c9:70:d8:38:1b:a4:d5:
         b5:61:9a:b9:63:4e:25:4b:b8:42:54:98:02:9a:89:ec:a4:1d:
         f8:c4:8c:33:3f:98:2c:1b:7a:bc:cb:55:42:c0:d0:46:ea:e8:
         f4:a1:74:15:1f:5f:78:f0:d1:05:24:7a:b6:0d:aa:99:c0:be:
         db:65:fa:18:1a:9c:9e:06:d4:88:ce:08:f7:ab:dd:8f:6f:2a:
         3e:7e:8a:79:22:5f:6c:b0:43:7a:d3:7e:9e:a3:b6:7d:38:31:
         d6:5f:ec:a9:bd:e3:a2:44:fb:c7:e5:5a:4c:53:c4:70:30:7e:
         b9:94:3d:c2:60:20:47:34:a0:fb:1d:1a:8f:56:53:5f:fd:05:
         6e:d2:b5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----