Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
File:                     k1AwYeGuUD7GPZcLMIdd2T_6u98.mft (raw, json)
Hash identifier:          kknQLCgu9kZt5SPG+lBkaRZPIQzLkAFAzF0/emhFJCE=
Subject key identifier:   06:52:E8:3C:2B:75:E1:74:2F:BD:80:54:D2:BB:A7:67:D2:24:D2:84
Authority key identifier: 93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF
Certificate issuer:       /CN=93503061e1ae503ec63d970b30875dd93ffabbdf
Certificate serial:       0194BC729755C10407D7B2D13FE72AA211D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft
Manifest number:          1156
Signing time:             Fri 31 Jan 2025 13:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:13 +0000
Files and hashes:         1: PLlM-caQciClvP4vmCR1thJm2Qg.roa (hash: 483jEz1mqdgxRO/yMJ0BYxcE+ZWZtXLMbpw6xeoN81k=)
                          2: UGR0Nm7XgEo_C52g4hZe_Rs5ZcQ.roa (hash: LA6rXbOmVl2jO/KpnJDcjc8gvW16w8N7yWXEbyRFi7Q=)
                          3: WkwzoKAp7V8ZhXL1g15aK61O6bQ.roa (hash: s5hrnFxpg0nBPQ3K+9u43Zz76gYas2owW8dLskXtTU8=)
                          4: i10NWUSGAIWexuZ8PjNhBDIKbUs.roa (hash: 1db21KiR5bFTQidbbCI1S4Ch0ZkfRZfQJSvHB/2+tIw=)
                          5: k1AwYeGuUD7GPZcLMIdd2T_6u98.crl (hash: hE9acfedc/Ac85w0ZCvfVVCqDdv2TFRJLWyjHRVaCnw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:97:55:c1:04:07:d7:b2:d1:3f:e7:2a:a2:11:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93503061e1ae503ec63d970b30875dd93ffabbdf
        Validity
            Not Before: Jan 31 13:00:13 2025 GMT
            Not After : Feb  1 13:00:13 2025 GMT
        Subject: CN=0652e83c2b75e1742fbd8054d2bba767d224d284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:db:72:24:be:6c:b0:bb:36:eb:c3:8e:0b:da:
                    19:6d:d2:37:7d:3c:3f:67:55:ad:16:04:fa:1b:ac:
                    12:65:b0:a1:87:5b:d6:40:ff:4e:48:6c:1e:43:01:
                    5f:65:c1:7f:03:fa:d0:e5:49:8e:d1:df:8a:18:39:
                    9e:22:20:3d:9e:6c:7f:bb:05:74:9c:98:90:83:f3:
                    77:2a:ac:ad:0d:3e:51:e7:97:9b:a3:a3:5b:08:88:
                    90:ca:02:92:41:63:42:00:ea:4b:8d:f8:8f:bb:64:
                    0e:39:3d:4f:e9:d4:a1:3c:31:33:7a:c3:4e:72:67:
                    7f:ee:a4:b8:fe:8f:df:75:29:b2:40:09:08:8e:d5:
                    6f:ae:9d:71:23:93:ca:f8:29:9c:b4:66:18:4c:95:
                    af:06:8e:72:db:90:96:7e:39:68:22:03:51:af:d4:
                    e0:2a:e3:65:ce:93:81:0d:63:d0:c3:b5:ea:26:e0:
                    72:fa:a4:1e:b5:db:21:41:8d:3b:ad:e8:e9:e3:ce:
                    a5:4c:ba:4f:35:72:aa:38:20:3e:2e:5c:bf:f2:58:
                    53:71:d3:f9:67:34:84:ce:c3:7f:11:43:52:9c:49:
                    2f:7c:21:ca:2c:80:09:37:00:ed:2b:42:c2:50:6f:
                    2c:04:c2:84:c0:94:3a:b2:b6:6f:06:52:ef:2f:26:
                    9e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:52:E8:3C:2B:75:E1:74:2F:BD:80:54:D2:BB:A7:67:D2:24:D2:84
            X509v3 Authority Key Identifier:
                keyid:93:50:30:61:E1:AE:50:3E:C6:3D:97:0B:30:87:5D:D9:3F:FA:BB:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AwYeGuUD7GPZcLMIdd2T_6u98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/a76ac1-5f22-47d1-b8c1-c623ed8f2f28/1/k1AwYeGuUD7GPZcLMIdd2T_6u98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:fd:dd:a0:04:7f:e5:bd:ff:8d:27:7f:67:55:df:57:7d:ea:
         fa:40:23:55:63:85:dd:24:e4:bd:d7:aa:1c:66:3f:13:50:f9:
         d5:7c:76:1a:99:4d:d2:92:cf:44:ab:78:6c:ff:1e:db:e8:bb:
         76:f5:a5:5b:11:89:9b:97:92:fa:e2:39:a9:32:30:64:0c:88:
         f2:f9:aa:57:b2:aa:e0:33:e6:1c:60:d0:24:99:9e:7d:86:c4:
         9c:b7:8e:90:dc:a4:76:f0:65:c8:fc:e2:36:f7:6c:08:63:7c:
         3e:dc:ef:e0:93:6b:e4:fe:9c:5f:e4:55:8f:b6:c9:07:6a:db:
         94:4e:18:10:76:41:b9:eb:6a:31:7e:d3:fc:b1:f5:28:3c:69:
         d7:c4:0c:ef:87:ac:ed:8f:3a:e0:c6:23:3d:ed:89:8b:d7:9e:
         28:0e:8c:d3:29:03:c4:34:c8:1e:66:34:63:e9:67:e3:f5:42:
         be:42:fd:59:89:ad:e7:ab:97:4c:f5:24:4a:8a:a0:b8:de:36:
         18:c1:40:27:5f:f6:95:74:85:2e:d7:cc:d1:75:8a:5e:8f:9d:
         68:18:22:18:6b:4e:25:71:ff:94:58:98:6c:29:c2:6a:3d:c1:
         37:20:20:0d:61:8c:71:a4:ce:8d:47:3d:51:30:85:99:66:22:
         62:73:f8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----