Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
File:                     i_ynyW6ARQWki5lgPZshJPHdNwI.mft (raw, json)
Hash identifier:          eapX9nNjDKjY6CC2sPgnPwO1M5iI9MklhO289ke99u8=
Subject key identifier:   D0:67:F8:0C:45:C8:EB:68:B7:9B:82:E5:1C:9B:D9:25:0C:4B:23:57
Authority key identifier: 8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02
Certificate issuer:       /CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
Certificate serial:       0194BCA9E764FB457DDE29E4DDAF19F5795B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 14:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:38 +0000
Files and hashes:         1: 4sWj8i7vRryJSCNDCbfEp1hlcTg.roa (hash: vNPNBYN1nUhed4j+PRjHE75t7GtK+pbCWaOwWZ1P5Dk=)
                          2: GMZbdZf7DVTMVtG07UzJ8oYQZc8.roa (hash: uUSVFyEZfsZP1WTLjagwoDZc2IMdNsTiDoZDnsmStBw=)
                          3: OXFWEO59LWqNp3-W3eA61p6mEl4.roa (hash: jxmmKXt9r49nsxlJrTEnzRizABJyfl5jsZhQ3LTeKIk=)
                          4: gtsG_e5t3YAxHhnI_DHS901RwK8.roa (hash: 1lFl+Q6Ir4bOnT+mLXLb7DAr/V+reNwDxhD0ncFcb1M=)
                          5: i_ynyW6ARQWki5lgPZshJPHdNwI.crl (hash: YSycqI8i3SaSqh92HX3HDdguuwd9a7LRogP8tdwm7MI=)
                          6: kgtXMGVq_yiG6jbCmetTa_cdZEI.roa (hash: 6jOU2wUAoyQfpjSCtb3mycfBqwA3lOt9bOnarXx4iMo=)
                          7: vZSI2LaRad19lSy1p-p3fBBNwQk.roa (hash: axONSdCDQQuuZ1UzeZtig6WOLz6ES7sF69OmLUuGd5Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:e7:64:fb:45:7d:de:29:e4:dd:af:19:f5:79:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bfca7c96e804505a48b99603d9b2124f1dd3702
        Validity
            Not Before: Jan 31 14:00:38 2025 GMT
            Not After : Feb  1 14:00:38 2025 GMT
        Subject: CN=d067f80c45c8eb68b79b82e51c9bd9250c4b2357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:17:cc:6b:22:04:31:f2:c2:6d:d9:c0:bd:92:
                    c1:04:c9:f2:ea:2a:f2:4c:5e:1e:4d:04:50:cc:3a:
                    7c:40:02:f5:73:03:14:7c:06:f6:48:32:76:36:b9:
                    6d:31:99:be:bc:96:ae:9a:94:22:a6:7a:db:3a:d0:
                    ed:ce:a4:5a:61:89:fc:d9:40:63:5b:34:f4:03:2b:
                    62:f4:ea:f2:da:80:4d:8c:cf:03:34:26:42:c9:c3:
                    e9:67:1a:07:f0:3c:9c:f2:54:44:8c:7f:9b:7d:a6:
                    0e:b6:3c:05:ff:a0:8d:09:22:90:d6:0a:b3:9e:22:
                    72:1b:fa:20:ac:d6:50:a2:00:11:a1:f0:9d:c4:1c:
                    28:73:b8:c7:af:96:0c:a7:bb:fa:44:1f:64:ac:3d:
                    b7:a7:ef:00:85:f1:87:38:08:fe:91:3a:dd:14:94:
                    b4:63:2a:e1:98:15:b8:36:c2:ce:3b:28:29:ca:39:
                    77:8b:c2:c5:d0:2e:00:41:88:b5:bb:1e:2a:1b:4f:
                    dd:cd:07:bf:cf:db:19:ae:78:6b:60:f7:b1:1a:a7:
                    0f:dc:bd:c9:e6:a9:16:bb:77:1a:9e:37:84:28:87:
                    8d:80:b0:8b:cf:f5:c8:d5:e3:eb:fd:a1:87:a1:26:
                    05:e7:d7:4c:f5:41:46:03:07:9b:21:7e:53:53:88:
                    16:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:67:F8:0C:45:C8:EB:68:B7:9B:82:E5:1C:9B:D9:25:0C:4B:23:57
            X509v3 Authority Key Identifier:
                keyid:8B:FC:A7:C9:6E:80:45:05:A4:8B:99:60:3D:9B:21:24:F1:DD:37:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_ynyW6ARQWki5lgPZshJPHdNwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/8f3b6f-e86f-467d-aa90-18b1a937a567/1/i_ynyW6ARQWki5lgPZshJPHdNwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:1a:15:3c:73:43:0d:2c:6a:1e:e2:93:c3:ba:6e:2a:11:13:
         9a:7a:00:cf:bc:87:b7:07:c7:80:56:9c:cb:ed:7c:31:5b:8f:
         88:49:76:16:9d:8d:4f:76:77:39:fd:1b:f1:52:3e:f9:1e:87:
         e4:f4:91:6c:f3:cd:4a:75:8b:ea:cf:d7:24:c5:63:df:9a:af:
         bb:e6:08:f8:e1:67:80:f9:d5:ab:8f:42:f2:51:28:e0:56:e1:
         b4:37:24:c5:0d:b1:4e:b8:c6:6e:44:51:32:a4:aa:b1:e2:75:
         70:de:9d:73:54:92:b5:a4:00:ed:13:27:77:14:2d:5c:e1:9a:
         e5:3d:36:e4:87:85:82:83:a0:36:a4:ea:87:45:12:e6:88:6b:
         31:53:7b:80:a4:a3:12:d3:fc:6a:55:b1:74:a1:94:3c:e1:28:
         54:2e:c2:de:b3:b4:aa:cd:96:3c:2e:2c:cf:f3:c3:32:3e:ed:
         d5:b4:25:06:e6:a9:bc:b9:9d:cb:9e:b3:09:a5:1a:12:4f:4e:
         f0:07:1f:14:28:75:fc:9b:b8:d5:fa:4e:52:bb:3b:f1:06:29:
         22:ad:42:a1:e3:91:50:8a:65:50:50:7d:d8:2e:65:76:d1:e7:
         9b:dd:88:1a:82:9e:93:4f:55:39:e4:da:40:aa:a4:f4:05:bb:
         ea:0b:3a:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----