Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
File:                     ldn8gV6QyoeSeQfF6rP-ecohXqo.mft (raw, json)
Hash identifier:          6ug3FI7Al4HzCs5/09W6SOyT6/5PdLQvA3pOmlmz4mk=
Subject key identifier:   A8:70:B0:3D:B7:96:2B:34:7F:C9:35:DB:F6:C9:21:52:FA:DD:15:0A
Authority key identifier: 95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA
Certificate issuer:       /CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
Certificate serial:       0194BC3C5F2A57BE1A8F90E79B56164F9D58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft
Manifest number:          012C
Signing time:             Fri 31 Jan 2025 12:01:00 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:00 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:00 +0000
Files and hashes:         1: A4UfYrXsQ6iSsiav-YeuLfimOTs.roa (hash: cPKqM44Z83MlRMbviQtgWddEZ3JyHZfP+3cvsuoyczI=)
                          2: WqCM--ZSqxtcqHxil1wItYtEpEM.roa (hash: CPcHuYLnfs1zjrIDaz07dO7we+nME2TOlwKRzyCU7gM=)
                          3: ldn8gV6QyoeSeQfF6rP-ecohXqo.crl (hash: 3pOcIXoMQhgLJ7PUmxSAPUflE+F35nsRswk4tWXl6hQ=)
                          4: wkbm61J6JI58DzdO7MCd9o4dj-o.roa (hash: hSaua0y3ny5hOslQkyLJESOAWMtyf0RUHAd8EHcHySo=)
                          5: xhhJQqhM5sB1fU9J0vxm3RoZWw0.roa (hash: +YOuzWIZ++rhf1ENTPtE45w85KCzRIvAgoMtfwrZcLw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:5f:2a:57:be:1a:8f:90:e7:9b:56:16:4f:9d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95d9fc815e90ca87927907c5eab3fe79ca215eaa
        Validity
            Not Before: Jan 31 12:01:00 2025 GMT
            Not After : Feb  1 12:01:00 2025 GMT
        Subject: CN=a870b03db7962b347fc935dbf6c92152fadd150a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:27:b0:bf:41:b9:bc:09:d8:4d:91:a7:85:f9:
                    ac:ec:be:31:4e:8f:7c:11:f5:4c:f8:09:fe:d1:b2:
                    7e:d5:50:1b:a4:61:eb:22:49:e5:af:4c:d6:d5:db:
                    9c:2d:4d:53:50:75:d0:b9:29:d2:39:46:ca:b9:db:
                    f3:56:4c:0b:53:a3:95:68:fe:57:54:71:4f:27:f7:
                    59:eb:41:32:d5:09:db:66:72:59:2c:29:0c:5b:85:
                    21:3b:2e:49:81:ff:98:02:7a:0f:cd:96:07:ff:ab:
                    76:19:33:3c:43:1f:4e:1c:e0:1e:e6:d0:c4:57:b3:
                    28:7c:a6:5e:1e:5d:86:18:06:41:0d:fc:6f:cb:90:
                    7e:0c:e5:36:2a:f9:2d:53:23:c6:21:10:62:3f:f3:
                    0e:99:52:bc:00:89:f1:12:44:58:1a:8e:d6:c1:f1:
                    cc:a5:d5:68:2d:a0:2a:f7:ca:83:c8:34:54:d3:56:
                    4d:10:0c:0b:4e:5d:e5:21:02:2d:ad:62:21:23:cf:
                    2c:45:98:8d:20:67:8c:15:81:44:38:8c:ba:b8:ae:
                    47:65:2f:e7:31:02:7f:38:df:b0:f1:e8:2b:39:fe:
                    79:83:df:6a:ea:c6:69:1a:3b:5f:2c:91:fa:2c:55:
                    87:c1:30:4a:21:f4:55:4e:51:01:fb:9f:2f:0c:f7:
                    e9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:70:B0:3D:B7:96:2B:34:7F:C9:35:DB:F6:C9:21:52:FA:DD:15:0A
            X509v3 Authority Key Identifier:
                keyid:95:D9:FC:81:5E:90:CA:87:92:79:07:C5:EA:B3:FE:79:CA:21:5E:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldn8gV6QyoeSeQfF6rP-ecohXqo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/9caa50-a510-417a-b589-8ce4179232c8/1/ldn8gV6QyoeSeQfF6rP-ecohXqo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:6a:de:0e:2a:e0:f6:a3:2b:71:60:f6:97:83:52:97:df:41:
         60:38:91:94:e6:59:f0:d7:3e:85:d2:61:eb:68:f4:c2:aa:e0:
         49:0b:14:ae:8e:fc:b3:fd:4a:7a:7a:5f:5b:73:d5:8a:a6:c7:
         0b:3e:7c:af:34:88:0e:12:8f:33:3d:25:78:95:6d:5c:c0:b9:
         82:44:44:84:21:a3:4e:07:95:9b:65:79:aa:1a:9d:40:b1:17:
         c6:0c:fc:af:e2:7c:1b:79:5c:c9:49:bb:22:95:17:b3:53:05:
         c0:25:61:38:63:c3:61:e0:30:af:c8:e6:3d:cc:57:85:54:11:
         fb:96:ec:c5:2f:23:ac:66:c9:7a:72:87:52:1e:bb:7e:b2:53:
         59:80:3d:66:7f:08:76:9e:26:25:5a:7e:01:24:8e:fa:22:f8:
         c8:89:b0:d3:6d:ec:a1:bd:7b:16:c7:70:85:60:28:76:32:96:
         d8:08:4c:21:48:2b:c6:2f:1d:fe:4d:c1:8b:af:b9:15:e8:79:
         bf:81:27:67:d0:cb:5a:39:5e:9e:53:81:25:a8:3b:be:d2:e2:
         29:1c:06:77:b4:54:b7:c4:2d:3a:0d:87:65:7d:32:50:8e:0a:
         33:36:ce:ac:57:fd:76:68:56:6f:a3:cf:2c:54:55:b7:34:1e:
         6c:62:e6:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----