Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
File:                     M41C-7P0P1bduHguZUkKI9hbcuE.mft (raw, json)
Hash identifier:          4qSe1kCqcJdMMtRVJKE8TmH4CC0DpEqC3vcCpUVgKRw=
Subject key identifier:   7F:3F:68:29:0D:84:C7:13:10:36:C2:0D:B1:EE:B5:B5:4C:DC:C1:29
Authority key identifier: 33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1
Certificate issuer:       /CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
Certificate serial:       0194BBCDEE0EACC30CC1440D695DA9332920
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft
Manifest number:          08A6
Signing time:             Fri 31 Jan 2025 10:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:22 +0000
Files and hashes:         1: 2VDjJz9n7fNb41CHgZLbe3-QdD0.roa (hash: NTSasPJavqqAm1Q5mw/3+6GrzCofhHPMKBh40Uo0ZUU=)
                          2: M41C-7P0P1bduHguZUkKI9hbcuE.crl (hash: I11ybbeAjXz+EXqLwO9XqQYidnMDP8q3S3CsapR0XH4=)
                          3: NMTc166VLRQ_ryCoHTFRsR83UNY.roa (hash: BF6b/jv7hOFjJwviuax9djqsB1bZ01DAfPp+52Wk9Hs=)
                          4: Q7HPJqSYzwAL9MgLg7-PWUtYCvA.roa (hash: Kzr58t+vIh856QCyC0+GN1fLeCTArKtLtDUh4zpgaGA=)
                          5: cij7W2iI6HP-gownSQ8PPT8Mc5A.roa (hash: 6BJ7lK+voZ1wFQ4hs8ZtoQUXFJFgei3ZQ3BBrbapu48=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:ee:0e:ac:c3:0c:c1:44:0d:69:5d:a9:33:29:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=338d42fbb3f43f56ddb8782e65490a23d85b72e1
        Validity
            Not Before: Jan 31 10:00:22 2025 GMT
            Not After : Feb  1 10:00:22 2025 GMT
        Subject: CN=7f3f68290d84c7131036c20db1eeb5b54cdcc129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8d:ee:2b:fe:46:72:f9:f7:a4:ba:2d:db:6e:
                    28:97:0b:05:a9:e5:6c:a9:6d:28:00:f9:f7:4f:01:
                    53:9a:ba:03:22:6b:89:70:f2:c7:65:3a:cf:74:cd:
                    a9:2f:41:e3:45:26:70:5d:f8:94:1d:e9:71:d2:93:
                    ac:fd:ec:a2:22:94:5a:4a:de:77:e4:97:4c:27:bc:
                    e8:11:37:17:94:3d:d8:f9:80:0d:f5:f1:7c:73:bf:
                    1c:05:85:83:7d:96:32:f0:3c:57:65:80:cb:eb:09:
                    2d:c5:e2:83:7b:2b:9b:9b:b4:0c:6f:a0:54:c1:e6:
                    28:ae:08:75:5e:2c:17:41:46:fd:3f:61:16:a6:23:
                    a7:a3:d1:64:0a:37:e9:74:cf:1e:90:72:26:03:ae:
                    dc:2d:7f:d2:91:a3:25:39:c6:45:d4:57:88:53:13:
                    43:ab:2e:0c:04:70:06:32:77:c1:a2:96:6c:e9:c7:
                    f9:bb:ee:61:83:39:67:a8:4b:93:d1:70:86:28:72:
                    98:29:cd:0d:36:bc:73:4f:f4:d0:85:ad:5a:b5:89:
                    c7:b4:f7:96:cd:8e:58:97:df:45:68:39:c3:32:09:
                    4e:85:6a:32:8a:e4:92:8a:80:49:fc:3a:ce:ad:5a:
                    eb:25:43:25:ac:a4:24:dc:86:00:75:f2:9d:05:1e:
                    b6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:3F:68:29:0D:84:C7:13:10:36:C2:0D:B1:EE:B5:B5:4C:DC:C1:29
            X509v3 Authority Key Identifier:
                keyid:33:8D:42:FB:B3:F4:3F:56:DD:B8:78:2E:65:49:0A:23:D8:5B:72:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M41C-7P0P1bduHguZUkKI9hbcuE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9166b8-5e54-458d-9b32-557a7d11e2ae/1/M41C-7P0P1bduHguZUkKI9hbcuE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:ae:c4:f0:d6:24:7e:4f:37:70:df:da:2d:e3:10:b8:47:96:
         34:26:76:6e:a9:f3:9d:ef:b7:88:f9:27:27:9f:e2:a1:7e:f3:
         b8:79:fa:94:94:ab:f7:e1:25:e5:87:e8:4a:31:89:bd:d6:2b:
         f3:1b:3c:1b:d4:a7:2b:30:18:47:29:46:76:6a:dc:32:cd:42:
         0f:39:a7:73:84:3b:b1:42:64:0e:2f:58:1b:a6:c2:c9:b2:26:
         56:2b:f7:32:35:47:a8:ab:fa:f1:53:a1:d2:ef:1b:3c:f8:6c:
         c1:96:36:65:81:88:67:6f:1c:62:d0:5f:aa:e4:a3:ec:97:cc:
         a3:c2:90:2f:5e:e0:fe:05:2c:8e:dc:d1:84:71:7e:af:2b:01:
         ce:85:23:11:b6:b1:9c:09:3f:bf:27:d4:db:c9:29:59:e5:3b:
         bf:fd:78:ce:7f:f3:66:40:ca:d3:59:a1:b1:71:89:a6:48:00:
         e4:d9:3e:81:d9:b6:5d:a3:92:22:cb:1b:e3:85:08:3f:06:b4:
         84:76:6a:7c:d4:98:12:ad:f8:21:33:29:8a:c3:f1:26:80:32:
         06:e4:32:8d:a1:ab:cd:aa:69:ae:40:0f:7f:1f:5b:d1:38:41:
         32:ec:53:98:e1:68:e3:7a:dd:40:6c:fc:04:0b:b8:69:af:48:
         25:38:ab:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----