Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File:                     bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier:          JRIxgz6kECjHgFU8IYRo1lSTke8nrVlOxJvM1vgbF6I=
Subject key identifier:   60:A4:41:EA:F1:03:E5:7C:67:44:D5:0F:17:FC:3F:AD:37:F0:C4:CB
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer:       /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial:       0194BCE0C993F955F79E1F73BB1BE9D5CEE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number:          0C58
Signing time:             Fri 31 Jan 2025 15:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:35 +0000
Files and hashes:         1: CJ2ClG_JdfjMlY4Z6z_RGPwGBQA.roa (hash: hDhd3vstthEFV1qbikUvxMAn4J2gEu+fzCJOKi1wsv4=)
                          2: Q2-iT_0Zjzv9GH02ya8YtILj8aY.roa (hash: w4dI7huh81K1h/L8FZLaE05OH1acBhhl3bfSdimUZDw=)
                          3: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: lOCFSXg48SxHyh+lHqw5gNn6LeliiiQ/ffPjxx1iXZg=)
                          4: oUFbfosRerYL4FfAZ6uYtohyzp4.roa (hash: JUInv/aznsbzYjMy5pV4S9vPkxKeoCUa9vUJpVjQ3KU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:c9:93:f9:55:f7:9e:1f:73:bb:1b:e9:d5:ce:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
        Validity
            Not Before: Jan 31 15:00:35 2025 GMT
            Not After : Feb  1 15:00:35 2025 GMT
        Subject: CN=60a441eaf103e57c6744d50f17fc3fad37f0c4cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:69:a4:e8:9a:35:04:20:ee:90:6f:25:22:a4:
                    f9:00:b3:65:3c:f6:f2:41:00:93:bb:21:b2:aa:82:
                    31:cd:c1:26:0c:a5:a0:63:33:2d:1f:0e:8e:98:db:
                    6d:e2:a9:a7:30:26:5d:bd:ac:72:54:9a:5b:ea:bf:
                    3c:0b:d4:18:89:5c:a8:a3:a2:05:75:7d:14:d3:ca:
                    bf:67:bb:d9:b9:64:bc:1c:ad:00:01:ea:fe:d9:a6:
                    28:4a:6f:a9:52:9b:ad:9f:eb:d9:12:00:29:2d:7c:
                    d2:27:12:72:f9:73:57:07:87:fa:25:2e:04:0b:a2:
                    1c:d7:09:68:09:e9:50:a5:82:90:8b:6a:de:10:fb:
                    23:35:1f:a6:d1:9b:66:73:db:2a:b9:52:5e:a8:4c:
                    f4:54:1c:54:99:59:f5:2b:c0:21:d1:fe:dc:37:5f:
                    89:fe:88:d4:5a:8f:c3:9a:27:f1:68:dc:81:ec:bb:
                    8e:f3:b9:58:4d:99:c2:d8:c4:90:db:a7:6d:31:04:
                    38:0f:5a:ab:6f:19:63:b9:4a:9d:c0:88:dd:42:11:
                    dc:8f:64:03:e8:9b:84:d8:d1:7a:c0:a3:41:7a:ca:
                    e7:46:ac:9d:c3:a9:e1:0e:87:0b:46:8b:bf:f7:e9:
                    a4:49:6f:d0:6d:a2:48:e0:90:12:f4:1c:65:fb:cf:
                    5c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A4:41:EA:F1:03:E5:7C:67:44:D5:0F:17:FC:3F:AD:37:F0:C4:CB
            X509v3 Authority Key Identifier:
                keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:64:c3:de:8d:3f:41:56:b9:73:ed:9b:29:95:0d:4d:14:25:
         26:25:fa:21:01:3f:47:34:5f:69:c7:a8:35:31:29:d3:ab:ed:
         5f:f2:0c:41:73:f7:10:a9:4e:72:a1:42:34:36:56:b2:43:b1:
         1f:df:25:e9:4b:89:c7:41:75:80:4d:8d:1d:bf:e0:8e:ee:cc:
         b2:b9:b8:d8:3c:60:57:49:b9:f2:49:a5:84:e9:f3:73:68:85:
         1b:2a:b4:ae:d6:bc:c7:ae:ac:d2:c6:02:5e:f4:83:21:5e:31:
         e5:d2:98:85:ac:04:e7:99:1b:30:db:e9:a5:f3:51:b4:ba:41:
         8d:9f:69:6e:8e:a9:9f:11:2c:bb:32:36:1d:e6:bb:68:7b:c5:
         47:81:ec:e1:b6:99:04:cc:98:7d:3f:a9:0f:10:fb:35:6a:07:
         5c:72:f3:01:73:00:67:43:75:18:55:0c:4f:ca:14:41:64:9e:
         92:85:36:0c:0e:1b:73:bc:6a:cf:71:8e:25:57:cb:bd:cd:1a:
         1f:ce:2e:dd:fe:f1:a5:5d:cf:5b:d0:e9:c5:3b:e1:8c:6f:1b:
         37:8b:81:61:f7:07:6a:b6:a5:c8:b8:6b:a4:50:e7:45:1a:76:
         da:6c:a2:fe:24:13:c0:6d:e8:26:ef:5e:aa:36:0c:79:1d:e0:
         46:be:07:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----