Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
File:                     PfikDGosaZPJ--gd8-p903L5bew.mft (raw, json)
Hash identifier:          7N3rvUVEJXhVVbYJ1wTSlrXvMofZTnXgjKNAXW10bk4=
Subject key identifier:   6E:9B:97:14:3F:68:3A:F4:96:A3:B9:46:21:6A:22:95:A4:6E:B5:4B
Authority key identifier: 3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
Certificate issuer:       /CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Certificate serial:       0194BCA9F6951EC6C66C71AF471EC649A1A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
Manifest number:          0832
Signing time:             Fri 31 Jan 2025 14:00:42 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:42 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:42 +0000
Files and hashes:         1: GQiJ6A3TQvBKFhpquOxaF9eGGSM.roa (hash: 6erLpsgMI9bO4qfOCcfgJUCMEDYhGzxWY2AMUbeslCE=)
                          2: IHvKxmr3uwpJKwkutA9nKfip_F8.roa (hash: E257yWlPmy47lDQ49F17JotJ+RKeZHzV+AfLNrTNJCw=)
                          3: PfikDGosaZPJ--gd8-p903L5bew.crl (hash: DZadoDLqYesNmHT9ySOFrJj6UZ6KtG4U9VK9evbuFyA=)
                          4: pqLRP6br3Tf8MSpYzZpv7JQJdvI.roa (hash: t46mDE1wE8ruzgJ1jDR113WnhduQHovpLeyn+ltLQ0w=)
                          5: sS3umUajXXmqMBA_9lX5Ye0iJuQ.roa (hash: IM/xG6YgVa2blydnHEIN0rcU5aCmvFCbaiZgSErPPdI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:f6:95:1e:c6:c6:6c:71:af:47:1e:c6:49:a1:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
        Validity
            Not Before: Jan 31 14:00:42 2025 GMT
            Not After : Feb  1 14:00:42 2025 GMT
        Subject: CN=6e9b97143f683af496a3b946216a2295a46eb54b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:75:62:d8:5a:f7:f8:2b:ff:9a:2f:7f:63:16:
                    47:7e:75:ef:21:4e:31:13:0a:cf:7c:d0:38:0d:b4:
                    0a:04:c8:1a:12:47:8e:ae:4e:48:e8:1e:33:5b:88:
                    05:c2:d4:a0:f5:4f:b8:fb:d6:af:bc:92:23:35:c5:
                    66:b6:70:d8:aa:70:32:e3:f4:b9:7a:59:d5:30:ac:
                    a6:72:c6:be:de:8b:fb:e1:b1:41:77:15:55:7e:7e:
                    5f:f5:09:d7:27:1c:51:e8:11:eb:72:19:3c:62:55:
                    60:9b:c9:af:51:23:e8:83:db:3c:eb:0d:ae:a2:ca:
                    d6:ad:a8:78:f1:be:b2:ff:2c:e0:7e:da:68:78:55:
                    ca:0c:86:02:77:3e:c3:cc:c7:e9:83:80:17:20:93:
                    4d:86:c5:56:25:55:97:3e:f5:1e:6c:c3:73:bd:14:
                    fb:34:1e:39:3e:94:cf:80:80:4a:f3:3d:8f:3f:28:
                    61:d8:b4:31:ce:45:cd:9d:d6:b6:5d:18:30:4b:77:
                    df:8c:c3:56:cd:74:c8:70:af:68:4f:e7:61:24:7d:
                    9f:11:0e:e6:1c:6e:3e:43:22:45:f4:0a:c0:3a:b9:
                    15:e6:d0:7b:ed:8f:ea:8f:a5:a4:09:58:32:95:85:
                    6c:cb:fd:0d:2c:ed:24:8c:ee:ff:b0:11:ae:c7:7e:
                    00:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9B:97:14:3F:68:3A:F4:96:A3:B9:46:21:6A:22:95:A4:6E:B5:4B
            X509v3 Authority Key Identifier:
                keyid:3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:fe:ea:fe:bf:68:26:a7:f7:40:50:b1:7b:55:7c:a5:dd:4d:
         a7:57:0b:36:be:8c:00:fe:b1:a2:82:66:93:f7:e6:5b:b4:8a:
         ba:2e:e9:69:2b:e9:c8:77:88:44:6f:bc:d2:90:4c:43:97:d4:
         00:f5:23:05:10:19:b3:18:b6:5d:66:54:96:10:b5:2a:ff:b4:
         88:4d:ac:fc:6d:a5:79:71:0d:f1:27:d3:b9:4c:84:9d:98:ac:
         24:d0:23:98:7b:61:5c:1f:71:b1:75:3d:80:0d:69:26:b5:08:
         2e:ce:83:3a:de:da:98:d2:8a:97:75:be:fb:10:37:9a:0c:00:
         01:b5:79:c4:ba:72:91:44:b0:38:09:b1:06:dc:b9:9f:8e:0a:
         36:40:3c:a2:60:1a:ac:e7:8e:88:53:a2:1b:2c:86:c9:3f:08:
         1e:c0:00:23:0e:f0:eb:18:96:bf:ae:05:6d:b3:d9:57:1a:8b:
         b8:73:c9:98:e5:c0:7b:24:ef:08:1c:e3:f5:1b:96:66:99:cb:
         a7:1f:4c:f6:83:52:84:66:0a:72:55:e0:a8:a3:3c:0a:8f:eb:
         44:98:d6:1c:c1:da:53:51:c3:58:73:6c:9e:4d:69:be:9c:4a:
         0f:53:ef:66:6f:87:56:d4:6d:a5:af:17:c7:fa:5b:73:e6:a5:
         44:cc:bc:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----