Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
File:                     OXMtzQw1QmFE-fAmdUF5366-iVg.mft (raw, json)
Hash identifier:          wVHxO8QA+CmfpDnSrhPY4AFSGl71WV7DX3mazxR0P5o=
Subject key identifier:   B5:AA:56:96:76:6D:37:6B:BB:09:D3:B4:45:46:E6:39:68:40:A8:3F
Authority key identifier: 39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58
Certificate issuer:       /CN=39732dcd0c35426144f9f026754179dfaebe8958
Certificate serial:       0194BCA9EED76384A90B861B95EF6F85A542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft
Manifest number:          141B
Signing time:             Fri 31 Jan 2025 14:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:40 +0000
Files and hashes:         1: EQS-D1pgF9X9JxFRgbIMqF1eIP4.roa (hash: X1oH+D4EKjN/FZ/0o/XNZpi/rX7eBTsOxnwwIoAyafs=)
                          2: OXMtzQw1QmFE-fAmdUF5366-iVg.crl (hash: qcugEa/KmV3GWspfJW88uizp6z1z50Yz2Nvpd3hV+04=)
                          3: VK52xwAI-aKIKTeQlztwUDOO02E.roa (hash: C9ydrT1jO/tCG0jTbHX7J5njz1R33YyX3/MyTTWyLe8=)
                          4: cVloRXAZs5Oo5mzrcunH3Tc2864.roa (hash: PRZbsG5bEI+5vtvix6l8s4vQ6r0jrrNQcUM/ZaoxHsc=)
                          5: fTKyWpeZBzHIpHOAP_HWdyLZ9gk.roa (hash: NJGE7uKTYs1I+EUOo5wFk+oBfIXQxyDxL9xtb3Bt434=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:ee:d7:63:84:a9:0b:86:1b:95:ef:6f:85:a5:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39732dcd0c35426144f9f026754179dfaebe8958
        Validity
            Not Before: Jan 31 14:00:40 2025 GMT
            Not After : Feb  1 14:00:40 2025 GMT
        Subject: CN=b5aa5696766d376bbb09d3b44546e6396840a83f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f2:eb:8d:90:d0:c7:25:78:3b:b3:33:f0:94:
                    e0:3d:f9:bd:aa:b6:96:14:6e:b0:ae:30:20:24:53:
                    2f:ce:31:ec:3b:89:86:8c:a3:6e:c8:62:a8:f3:57:
                    bc:01:4f:37:52:0d:d5:52:01:17:56:66:01:7d:ef:
                    83:68:1c:f4:3c:6f:7f:be:bd:d9:8e:8b:ee:5d:04:
                    13:e4:0f:7d:39:54:55:a0:4f:3d:d9:96:46:0b:45:
                    1f:bb:88:e5:44:ed:33:38:39:8a:08:c5:ce:aa:1f:
                    38:14:d3:3e:61:e2:ee:ba:4c:6c:4e:d1:e4:03:fc:
                    a6:b5:9b:c6:d3:ef:26:ee:d7:90:2c:a1:cc:1f:84:
                    97:08:bc:25:12:8e:5e:55:90:d2:07:f1:77:77:cf:
                    92:ae:2d:15:00:5a:ff:f3:84:0d:29:e8:cc:3f:89:
                    22:89:cb:90:e0:37:7e:48:95:60:98:61:34:a7:b3:
                    d5:1b:02:b7:7e:81:ff:fd:b2:a6:24:a8:b5:b7:a6:
                    09:cb:5d:da:3c:60:3a:df:9d:ff:03:30:01:09:d1:
                    dc:de:89:df:dd:b8:74:b4:c8:75:a9:46:1a:29:99:
                    bc:27:ac:d6:3b:a1:ac:96:c7:11:91:b7:7f:81:79:
                    72:1a:63:ca:9f:9b:ee:bf:53:b3:a1:22:a0:4c:5a:
                    15:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AA:56:96:76:6D:37:6B:BB:09:D3:B4:45:46:E6:39:68:40:A8:3F
            X509v3 Authority Key Identifier:
                keyid:39:73:2D:CD:0C:35:42:61:44:F9:F0:26:75:41:79:DF:AE:BE:89:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OXMtzQw1QmFE-fAmdUF5366-iVg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/237106-d08d-4aa0-ac82-f60af2a82060/1/OXMtzQw1QmFE-fAmdUF5366-iVg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:8e:a8:4a:d4:8b:ae:af:b1:93:ee:19:a8:dc:21:69:1d:51:
         82:b4:1b:2a:16:f7:ce:4e:90:ae:a7:4c:ff:db:89:f2:e8:cd:
         99:ad:d4:1b:78:35:b8:d1:b6:c0:76:b1:55:c8:9c:57:c2:59:
         f4:c6:6e:11:9e:a2:d2:62:56:85:a9:70:fe:a2:21:17:a4:ea:
         22:86:9c:c7:6a:79:7d:40:1d:5d:64:3c:f5:fc:2a:3f:1a:09:
         f0:f8:e3:a7:86:cf:cd:51:f9:99:18:94:d2:e6:96:bd:39:af:
         d2:0e:cb:4a:6b:2f:bf:10:7e:6b:4a:60:4a:92:3f:be:93:94:
         de:13:d7:54:21:df:07:df:bd:60:7b:f7:e9:7d:2e:4b:11:88:
         2e:7c:15:11:5c:50:66:51:15:ff:05:4b:3b:06:8b:3a:04:cf:
         bd:d1:41:14:d5:1a:73:04:bf:2a:b2:74:a5:5b:ae:3e:a7:6b:
         a1:d8:d6:dc:7f:97:36:da:a8:a1:5c:18:d9:08:71:32:83:74:
         42:7a:0a:43:28:f7:6f:f5:80:67:1c:95:d4:23:b0:f4:62:d1:
         0a:ad:07:19:72:e9:52:3d:01:7e:cd:23:a2:0f:fa:2d:5b:e8:
         6c:64:8b:ca:18:5b:6a:04:73:bf:30:ce:11:41:4a:cc:55:46:
         67:6f:0b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----