Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
File:                     VC9jP3bo2Krqoytazhaj2zlD2Aw.mft (raw, json)
Hash identifier:          8AXUcOWEs5D0iLOaOW/k9gUhpPGLji3oPWHv0BQEdps=
Subject key identifier:   6C:E7:51:21:BF:BD:78:24:E0:05:00:46:AF:1C:38:87:52:7B:1C:09
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Certificate issuer:       /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial:       0194BD8580F239573A2DA00E0ADC6D93E6E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
Manifest number:          1445
Signing time:             Fri 31 Jan 2025 18:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:30 +0000
Files and hashes:         1: 1-fqkV7JZgJxycvSPusdfWjnU1xQ.roa (hash: QONebl1+/LHi2kQ7q9RN/wwgttq2CVHi0V6T+dpI+kM=)
                          2: SI1eRx7mp7C6Ee63_Urlkq5Jow0.roa (hash: KedtudQv2SLIdXkEOXcYgWllW+7znCK3vjYsNT4yrD8=)
                          3: VC9jP3bo2Krqoytazhaj2zlD2Aw.crl (hash: KTgBVFbtA5VOuaC+PFJgckS6X3GpNOPYlAD5fbFOGZ8=)
                          4: ZL2VPZ_9luxtBoeAANKmQq7yRd4.roa (hash: jO9zoicMR89BbaUoFzRifxO6s+pERNBb9LZTtsx4HAI=)
                          5: mDlTIXtyMC1YUf8yxleTLLfvbP0.roa (hash: leXsGqcCg4EKhJFC1aPC5eeC/eow2ykRnzqfbw1Pp7c=)
                          6: qNDvfGI4y3Kv0_gKftAtZ8uEm1g.roa (hash: c3T51iiVF4Heub78zCeOe/wtmjyNC9TOSkeV0C+2EaI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:80:f2:39:57:3a:2d:a0:0e:0a:dc:6d:93:e6:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
        Validity
            Not Before: Jan 31 18:00:30 2025 GMT
            Not After : Feb  1 18:00:30 2025 GMT
        Subject: CN=6ce75121bfbd7824e0050046af1c3887527b1c09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:11:14:88:17:2d:e9:ec:a6:a8:ca:e0:a2:45:
                    fd:c1:f6:ef:85:71:6f:a5:f6:c0:b3:59:f3:34:f3:
                    78:09:f7:66:fa:bc:25:f2:08:67:3a:a3:26:45:9c:
                    6c:91:70:48:72:78:7c:e8:5c:70:6d:c0:08:3f:06:
                    76:d2:69:04:cc:19:5a:ed:82:05:d8:10:e1:50:e4:
                    a6:b1:13:95:ed:5f:de:fb:7f:78:7e:67:e0:16:af:
                    b6:93:9f:53:55:d2:f7:3f:e8:40:ff:e4:63:78:1f:
                    ff:ad:fe:f4:f0:85:e2:54:4d:98:c7:14:83:17:3d:
                    f6:0a:92:18:67:56:0e:77:d2:d4:a0:5a:14:1f:98:
                    6f:4c:5f:c8:55:d4:f2:d6:91:30:64:f7:52:2d:2a:
                    7c:de:7f:eb:2a:34:42:77:77:96:5a:06:91:b3:05:
                    37:af:de:fb:79:9e:8b:0b:19:ea:b2:2b:33:d5:96:
                    d6:a4:2b:02:83:29:cc:ad:4e:8d:d6:14:33:19:86:
                    55:39:bc:b0:09:bc:50:b0:be:4d:35:06:f1:a7:85:
                    be:39:13:87:de:a0:10:e4:22:2a:77:09:fc:26:fa:
                    0b:ea:37:e7:6b:fd:5e:f7:03:a0:49:83:19:55:f1:
                    27:f1:cc:84:15:5d:7a:a1:f9:46:a6:4e:e1:e8:4c:
                    90:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E7:51:21:BF:BD:78:24:E0:05:00:46:AF:1C:38:87:52:7B:1C:09
            X509v3 Authority Key Identifier:
                keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:81:48:ee:cc:f2:36:eb:68:ed:a9:56:52:5d:e3:8a:a5:20:
         8c:fb:4d:3e:ca:c9:90:1c:54:64:2e:ef:1a:91:7a:2a:95:78:
         3e:63:bd:77:fc:41:57:36:c0:cf:d6:41:de:9a:ef:4a:cc:8e:
         7a:df:23:af:32:bf:00:69:c2:21:ba:cd:63:70:9c:d1:6e:eb:
         4c:96:02:ee:9a:e7:dd:c3:b6:c3:b3:7b:b5:3e:1c:d6:93:0e:
         e3:e6:8f:d9:fd:46:98:70:61:e6:a5:0f:77:af:e1:cf:b6:f0:
         24:78:f2:0d:e4:3f:86:a4:0d:e1:4a:fc:4e:5c:9e:c8:d8:e5:
         81:23:d9:b5:8c:70:03:cb:12:5f:6d:13:f0:20:ef:df:20:f0:
         e6:3a:b9:91:39:a6:89:da:15:ed:47:92:ee:17:b1:a7:ac:90:
         97:7c:2b:62:40:80:a9:14:7f:09:94:91:d6:b7:29:32:f3:68:
         42:7a:69:eb:7a:12:9f:a0:47:9f:8c:f9:ac:10:af:a9:18:2b:
         9c:12:42:00:1d:77:0a:ae:f8:f5:33:3f:6e:6b:a4:16:80:0f:
         5a:f4:d3:9e:95:73:fc:0d:8d:a7:56:0c:dc:69:4b:5d:f5:00:
         17:67:00:6f:cc:a2:0a:56:19:d5:b6:8b:c2:f3:ee:cc:3a:32:
         0a:23:2a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----