Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
File:                     s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft (raw, json)
Hash identifier:          DwucZ8psAn5JKZMZC+FY39Om1p48vSYvwjYgFf+TzJk=
Subject key identifier:   83:1E:B6:33:B0:A4:82:AA:67:41:32:36:71:17:2E:E0:10:A4:29:60
Authority key identifier: B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06
Certificate issuer:       /CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
Certificate serial:       0194BBCE7A6BD4FBF6411A6D509E559E7F2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 10:00:58 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:58 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:58 +0000
Files and hashes:         1: 5WxXf6dS__Evv8ybNdjAs3Nto-g.roa (hash: y6JQKN1GUMZnwd9TH2DZ03UU+crYCRvw3vTZfmRAIuw=)
                          2: 8keuoYHRmEN7a8dM4R3KAZIUMn8.roa (hash: cqhsmkY13XgBA/8McBrRobM59idSx8HxeP3LI73UX3s=)
                          3: MW_XTzv670w7yHZaqcLcLC-4RP4.roa (hash: Q3TgnJoLo5ueJohGmYg5Li9qa76QR93ky622rzd6M1k=)
                          4: _g7tJv9RQ8GKBzh3JoIFLDhg6Os.roa (hash: lCKjV64dwqXs6VagiwwJOVKqACy5VCGM5CrdkZRYvvY=)
                          5: o0jeoBjm6A2tZp_sdpXJQxSFq9g.roa (hash: 0tJFYrvs37c2RcoKNsABjGXFSJGBQds9qdtyJiQGJI4=)
                          6: s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl (hash: rXTMFLMj16KGX/dhhACat2qbTZPiAXETgkeUEBxpLu8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:7a:6b:d4:fb:f6:41:1a:6d:50:9e:55:9e:7f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b38bb62a47b1a2aedb70f32f58c979ba0c777f06
        Validity
            Not Before: Jan 31 10:00:58 2025 GMT
            Not After : Feb  1 10:00:58 2025 GMT
        Subject: CN=831eb633b0a482aa6741323671172ee010a42960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:65:f7:7b:03:67:5d:00:d5:09:7c:be:09:84:
                    f2:fb:ee:a0:7a:ee:bd:9e:20:b3:d4:6f:f7:1e:ed:
                    f2:31:3a:4f:14:d7:37:a5:4d:be:77:0e:99:94:6f:
                    35:58:f1:1f:8c:a2:d0:f5:ef:ec:0c:22:e9:cb:b3:
                    df:20:60:ca:03:5a:b5:1b:37:1f:90:31:9b:d0:bd:
                    84:4f:ba:b1:d8:cc:5a:88:b7:c3:5c:40:55:7a:37:
                    dd:63:bc:08:8e:59:44:7b:b4:96:34:60:1b:e8:3c:
                    c0:57:af:57:0f:df:86:64:ad:87:a5:2c:c9:8a:14:
                    76:4f:15:a0:10:b3:76:07:7b:d3:a2:6c:5b:d9:e8:
                    5f:8b:ca:4f:e5:2b:16:d1:65:c5:0e:d5:de:9d:9e:
                    fa:2d:97:6d:ce:99:bd:c3:31:34:dc:a8:b5:98:e6:
                    2f:ce:b6:18:04:7f:bd:c7:74:78:dc:65:55:d6:2d:
                    67:5e:e3:73:97:31:a0:ff:b4:2a:49:d9:fd:7c:df:
                    8f:75:a9:52:e6:d7:ee:22:bc:07:9e:50:b4:e2:36:
                    e6:43:d0:32:ff:26:ed:24:41:87:ca:fe:27:d8:fc:
                    18:b2:b0:2b:1c:72:8f:ce:da:d3:11:33:4e:a9:fe:
                    0b:fc:fe:af:81:b6:15:0d:d8:0e:71:34:ec:6b:39:
                    3a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:1E:B6:33:B0:A4:82:AA:67:41:32:36:71:17:2E:E0:10:A4:29:60
            X509v3 Authority Key Identifier:
                keyid:B3:8B:B6:2A:47:B1:A2:AE:DB:70:F3:2F:58:C9:79:BA:0C:77:7F:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s4u2Kkexoq7bcPMvWMl5ugx3fwY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f682c-1c57-4ce5-bb98-0605c089fc38/1/s4u2Kkexoq7bcPMvWMl5ugx3fwY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:ec:1b:09:00:90:05:7c:c9:4c:f4:71:fd:2c:a0:51:0f:5e:
         67:79:2d:6c:ce:f4:79:90:16:f6:6a:c9:fa:0e:08:09:fb:03:
         18:58:3c:a3:b3:86:4f:da:6a:a2:42:7b:9c:53:26:ad:7f:e6:
         b7:3c:d6:3f:b6:6d:0d:a7:e8:0e:df:46:4c:54:7d:66:0b:6a:
         ff:96:40:90:ba:8c:12:0b:30:02:b7:ce:c5:67:b7:62:5c:0c:
         37:70:ce:1e:88:95:41:fd:cb:8e:91:8d:76:62:08:44:7d:8d:
         40:7a:a3:7b:7c:b4:01:e4:13:58:84:e1:c0:6f:27:92:e2:ec:
         35:90:83:0c:5d:38:13:bc:c8:c7:bf:2e:38:84:d0:74:cb:f5:
         76:cf:b8:e6:19:ba:cb:ca:a8:0c:a3:4e:3a:57:19:0b:18:aa:
         5c:0e:33:1d:68:fc:1c:ce:56:af:27:c3:e0:4f:b6:f3:29:d4:
         af:fa:ab:18:b8:a5:12:2a:91:62:31:f6:62:30:91:10:10:15:
         69:88:fb:79:4f:4f:c8:56:a2:07:65:c2:4f:26:3d:de:27:6f:
         27:b4:48:f2:58:b8:df:c5:46:00:f5:2a:23:96:c7:7a:7a:1f:
         89:c9:6f:b1:8b:67:05:21:37:3d:02:9d:20:2d:66:ee:0c:92:
         45:17:28:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----