Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
File:                     _a1h2OjBq9qFlpMOIfGCEaUXaB8.mft (raw, json)
Hash identifier:          GYn8w+Xu7/IBewP9xo6BDGuvhKgd3ytsOWOTU1B9k90=
Subject key identifier:   FB:7B:13:48:4E:55:8F:2E:E2:89:90:9C:EE:B1:CE:80:1D:A4:2E:44
Authority key identifier: FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F
Certificate issuer:       /CN=fdad61d8e8c1abda8596930e21f18211a517681f
Certificate serial:       0194BCE0E66869B271DB1F8FFF4E48A92E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft
Manifest number:          135B
Signing time:             Fri 31 Jan 2025 15:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:43 +0000
Files and hashes:         1: Fcl_aJsJt4KiIjhLtFxpQAZ--TI.roa (hash: aS0+JitqaJojivrvqxvVApMU+OsS1deS84dQZzA8Tnc=)
                          2: YaQeUaPm7DT5i6DIJSP2oPk6asc.roa (hash: Xe3hwh1S9IdquQYZSTUC+SBDReDUDM3Us/vWljHz8KQ=)
                          3: _a1h2OjBq9qFlpMOIfGCEaUXaB8.crl (hash: +DQj1krUac6RPkmCBW8LG3OxKXs60wr3H7wG71Q6idI=)
                          4: b3VRvUBoZO6M6gjGueykiziKPRc.roa (hash: VBIsT3fCceZgm7iHJXEBP5n/OLHn0+1WoqHHXWi6Cy8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:e6:68:69:b2:71:db:1f:8f:ff:4e:48:a9:2e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdad61d8e8c1abda8596930e21f18211a517681f
        Validity
            Not Before: Jan 31 15:00:43 2025 GMT
            Not After : Feb  1 15:00:43 2025 GMT
        Subject: CN=fb7b13484e558f2ee289909ceeb1ce801da42e44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:37:d5:32:fa:2b:3f:e6:7e:84:0a:c8:2d:39:
                    47:7c:14:f7:bd:43:a7:57:be:66:34:ee:ce:0f:ab:
                    f1:83:dc:4e:a8:e2:09:67:52:c6:61:74:d6:7c:45:
                    2a:1b:d8:37:7b:ef:d9:fb:74:02:c5:18:ee:e7:3d:
                    50:fd:96:93:4f:b2:9e:6e:8a:12:fe:81:fd:d0:27:
                    5e:ea:69:38:2e:df:84:c8:a3:f5:54:11:cc:de:4e:
                    08:13:6b:37:54:69:ca:f8:da:b4:20:ec:46:d2:25:
                    c8:dc:35:7d:cd:d1:6f:a3:63:22:ab:f0:66:5b:37:
                    d1:0a:c5:df:09:a4:56:c6:53:cc:2e:e5:bb:8b:11:
                    fc:19:ab:18:67:26:d8:2b:6f:0e:65:ae:01:c1:cf:
                    d6:5b:2e:ca:1e:79:bc:15:76:1a:80:62:f4:b3:ae:
                    2a:43:34:bf:05:6f:e9:2b:90:af:3b:be:55:50:dd:
                    e6:7b:c8:da:c1:99:cb:f9:d6:54:d8:6a:f2:e5:8a:
                    17:9c:87:5a:bd:9b:bf:60:32:72:aa:5a:3e:35:7c:
                    0b:e3:59:e4:37:29:e8:2f:5f:b0:e7:54:3f:33:39:
                    08:e8:35:1a:50:51:85:15:70:45:a7:e7:7f:6c:60:
                    a1:ac:73:ab:a8:1c:b2:b5:db:93:9c:d8:f7:62:93:
                    06:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7B:13:48:4E:55:8F:2E:E2:89:90:9C:EE:B1:CE:80:1D:A4:2E:44
            X509v3 Authority Key Identifier:
                keyid:FD:AD:61:D8:E8:C1:AB:DA:85:96:93:0E:21:F1:82:11:A5:17:68:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_a1h2OjBq9qFlpMOIfGCEaUXaB8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a46c86-4b08-482b-92ca-84ee22a3ee5b/1/_a1h2OjBq9qFlpMOIfGCEaUXaB8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:80:49:57:85:ef:f9:e2:db:6d:07:e7:a3:75:9c:7e:b7:4d:
         4c:b4:b0:fb:6c:03:12:b6:c0:41:71:fc:0f:de:56:aa:dc:f5:
         35:25:44:ca:eb:f5:01:9d:42:57:3c:45:e7:8d:09:17:52:cb:
         2c:8e:fe:1e:27:0a:8f:54:f7:30:45:47:b0:49:00:4f:c8:ad:
         75:5b:a4:4f:e2:5d:e3:be:a9:04:3b:19:bc:f8:b8:71:a9:14:
         3e:0b:19:0c:7b:34:04:de:e2:be:c2:50:87:8d:f4:45:25:d5:
         00:57:2b:a8:fd:72:ed:76:87:37:6d:93:6c:59:1b:5e:7b:8e:
         83:3c:4b:31:c7:72:69:97:68:2c:d4:32:74:d7:d7:30:91:72:
         12:8a:19:84:c8:eb:e5:3c:76:ae:71:cd:67:fd:3e:25:21:4c:
         71:1e:dd:f6:5c:37:d5:d5:2b:8a:62:7a:f7:d2:31:0e:17:10:
         d6:7f:18:ca:91:43:28:af:13:32:1d:30:3e:74:16:e9:e5:ca:
         79:ff:ad:4a:2a:05:2d:ca:d1:b3:71:10:40:37:2e:7e:c1:d0:
         15:0b:72:4a:5d:77:94:f6:16:cc:34:87:4e:e1:8f:99:57:00:
         cb:3a:b7:de:e2:7f:2d:dc:2c:d7:cb:e7:81:42:ae:94:ac:88:
         13:ba:c1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----