Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
File:                     q8GRjB9F5uwX2spnp60ZPK8Et7I.mft (raw, json)
Hash identifier:          2jVL9jbeq7sShsqOHyMjJQ1QfyDeveNnyh9Q+VwSZ3s=
Subject key identifier:   76:AE:5E:4B:82:DC:50:56:8E:AF:F3:25:93:1D:05:88:B4:CB:F7:C8
Authority key identifier: AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2
Certificate issuer:       /CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
Certificate serial:       0194BD17C4E69DCD93D7C5735BCDEC283D53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft
Manifest number:          029F
Signing time:             Fri 31 Jan 2025 16:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:39 +0000
Files and hashes:         1: 2-PCYSmoRYP78bU8-tuVZLZOhCE.roa (hash: aSC0E7m4wW6P1G+DA0HfmnfnwGNL/CMWhL2kiTYQvoc=)
                          2: L4RKq9blDuun-Ov7h4-EXCJDU7o.roa (hash: rV2ghgo1vc0bF0beR2sZL8zKS4novhD+fyLSyA4fGEk=)
                          3: TKYCIQIu4F23JxsEDfGIzBctkEc.roa (hash: EAnr/9lW4r6/S4hhnfhRdmsx8JCo45r2zRW9cF9kcLo=)
                          4: q8GRjB9F5uwX2spnp60ZPK8Et7I.crl (hash: beUkcbjx8Re96W0++zYBdXhCMeSJUN0fkO27YxuzeOE=)
                          5: qvNjDJ9eS48JlV1R7hV7YEei3s0.roa (hash: 7WHrrqOQZDnykzDETa13+ZYZFeNzxM1H1+r8MstF8cE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:c4:e6:9d:cd:93:d7:c5:73:5b:cd:ec:28:3d:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abc1918c1f45e6ec17daca67a7ad193caf04b7b2
        Validity
            Not Before: Jan 31 16:00:39 2025 GMT
            Not After : Feb  1 16:00:39 2025 GMT
        Subject: CN=76ae5e4b82dc50568eaff325931d0588b4cbf7c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:51:4d:62:66:ba:c3:1e:4e:59:bc:e5:2d:7f:
                    ff:79:30:0b:8a:e6:d7:3a:59:47:8d:ca:9f:e0:e1:
                    04:40:1b:c5:cd:c6:c0:bb:37:88:7c:92:0d:3a:41:
                    15:ef:95:6d:d4:44:b7:de:fb:e9:67:5d:f8:d1:9b:
                    85:cf:67:e2:a0:89:be:65:ba:f1:35:15:e6:e7:44:
                    d6:be:d8:06:28:3a:f0:30:b8:75:30:b9:ff:75:88:
                    63:97:5a:4b:d8:be:7a:f2:22:f1:1a:64:5c:32:ee:
                    5d:25:c2:a4:d8:44:c8:78:52:6c:7c:cb:da:05:93:
                    7d:e6:e9:f7:cb:73:0f:ad:5c:fd:24:43:53:d5:a9:
                    9b:82:0d:13:91:f6:2b:3d:fd:08:88:f2:f3:7c:b7:
                    78:c1:f6:df:52:a6:c1:79:f5:98:9a:c2:9e:0b:7c:
                    4b:1c:7d:63:a7:7b:49:72:bd:ba:95:8a:93:22:da:
                    8e:2c:55:c3:ed:d4:ee:8c:d4:c9:6e:11:ca:ba:a5:
                    e6:28:a3:af:9c:dd:78:e3:f0:99:bc:a8:c7:2a:31:
                    7a:53:5d:f6:e4:1e:40:b1:c8:b2:30:cc:89:9c:bd:
                    6c:98:4b:90:08:a4:55:cb:5c:89:d3:ce:b0:70:87:
                    4e:6b:03:44:1f:05:e0:c5:44:58:d0:cf:2e:09:b8:
                    98:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AE:5E:4B:82:DC:50:56:8E:AF:F3:25:93:1D:05:88:B4:CB:F7:C8
            X509v3 Authority Key Identifier:
                keyid:AB:C1:91:8C:1F:45:E6:EC:17:DA:CA:67:A7:AD:19:3C:AF:04:B7:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8GRjB9F5uwX2spnp60ZPK8Et7I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8f88de-daed-48d2-b701-6bb5fe665750/1/q8GRjB9F5uwX2spnp60ZPK8Et7I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:ea:ab:1e:40:c4:da:3c:95:72:fa:4c:5e:a2:ca:87:01:64:
         72:c5:cf:9e:f2:d7:51:aa:9f:7d:03:04:64:02:04:4e:ed:c4:
         f0:39:fd:14:27:eb:9e:df:11:89:ec:29:40:33:2c:ab:3d:eb:
         8a:99:2b:9d:3b:3e:52:3c:f4:cb:4e:fc:b6:39:5d:da:e0:a6:
         04:b4:9f:ac:3b:1a:76:2c:35:f4:31:b6:0a:c6:e8:e6:b9:21:
         11:fd:80:b3:24:c2:35:85:51:f5:48:10:67:ef:12:10:5d:ec:
         b1:c5:c0:8e:88:3d:de:d2:04:7c:df:d8:ae:c9:95:ca:6d:ac:
         96:37:88:fa:70:b2:c0:2c:4b:7d:ef:5c:55:d1:ec:72:8e:d0:
         fd:f6:9c:ec:45:36:45:42:36:71:5b:a8:c7:ab:a9:14:90:a5:
         a4:2b:70:b8:e0:3a:4e:56:4d:b1:9a:9a:fd:44:54:c6:fa:14:
         4a:d2:22:33:40:76:ed:6a:27:64:c3:27:0d:db:00:84:1c:dc:
         d9:ed:13:a5:32:d0:58:57:3e:92:54:ee:73:1f:26:26:eb:2f:
         2c:38:54:dd:35:66:c5:4a:86:7d:87:72:b5:7f:ad:b9:61:20:
         0b:63:28:aa:e8:3a:f4:26:98:fd:35:5c:1d:03:1c:ec:2e:5d:
         59:16:eb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----