Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
File:                     z8fvK3ZllIkteJKMvngXef3OZ9A.mft (raw, json)
Hash identifier:          wmdhFehZogLqSGoa1WSI77xVgylR7/UDi7pg2fEnGhE=
Subject key identifier:   35:DE:41:E2:72:9B:80:87:DB:9D:7E:19:96:25:9D:BA:59:C0:F7:22
Authority key identifier: CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0
Certificate issuer:       /CN=cfc7ef2b766594892d78928cbe781779fdce67d0
Certificate serial:       0194BD1781C7C1E87DBAEC15CF280DB2DD8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 16:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:21 +0000
Files and hashes:         1: 29zMSF3w66sUntVbm7zafoqxL7A.roa (hash: S+iEX8T3rvEJsvoQGdlPU+P3oIHIy1nvdiiFmyyofVw=)
                          2: 3QUDeKE7yNgQmHJNVO-g-9mVj4o.roa (hash: pVQz96Zg1UqB0ZGK2z8e6eGc6vTCat1YgW+D9RqJ9KA=)
                          3: PpdtSf-eqwERrg8wgynYdTmmTLE.roa (hash: ify0C44M1xKOyDvtxqel7hVqVdfYpMaLpzM5ZRBsfs8=)
                          4: vA4rANUmY77ajy3yEyLDZ1K3vnA.roa (hash: v5PKNuGl4AALPFrvuOw4WSf5gwfiM8g/rIh066tDvuI=)
                          5: z8fvK3ZllIkteJKMvngXef3OZ9A.crl (hash: qwJrJkzcG6Ur5U1a/Q8CM8URqZ4/wvEes2n1jehjO3U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:81:c7:c1:e8:7d:ba:ec:15:cf:28:0d:b2:dd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cfc7ef2b766594892d78928cbe781779fdce67d0
        Validity
            Not Before: Jan 31 16:00:21 2025 GMT
            Not After : Feb  1 16:00:21 2025 GMT
        Subject: CN=35de41e2729b8087db9d7e1996259dba59c0f722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0b:8f:17:0c:dc:9d:8c:e6:89:a9:c9:1c:93:
                    90:f9:61:06:78:c3:04:bd:e6:64:ba:b9:0c:37:02:
                    cf:10:3a:e7:9a:70:0a:78:83:99:33:7b:94:ed:a5:
                    93:7d:6c:2e:ab:44:4d:0f:07:2b:bf:ba:a7:24:c9:
                    ac:30:f3:3b:61:1c:3c:8f:72:23:86:f8:65:c1:56:
                    06:ae:64:bb:9a:65:5a:92:b3:83:34:1f:a4:52:74:
                    83:c7:84:68:32:48:04:4b:52:d1:46:7b:ae:ca:f6:
                    cd:e5:84:ba:d1:35:f6:d0:9d:15:ea:15:4b:aa:e6:
                    14:33:bc:15:2e:e5:8f:fa:10:2e:e3:ec:c8:33:bc:
                    07:f9:c8:1e:d1:9e:5d:1b:5c:b8:54:60:16:75:b5:
                    3b:6f:79:3d:eb:66:42:d5:54:32:5d:6e:33:52:a3:
                    3c:8b:a6:30:28:be:d8:f5:25:69:cc:fd:f4:81:1c:
                    a7:4e:9a:26:d7:07:14:71:5f:62:49:c1:4b:05:4b:
                    d5:cc:10:e3:0c:f1:f6:4b:c4:24:69:96:cd:40:3d:
                    c1:12:02:4f:b3:25:b9:ce:18:c2:77:f7:55:22:df:
                    1d:14:70:68:8e:7b:a9:79:ee:3b:87:c0:84:ad:ea:
                    73:fb:b1:24:a2:66:12:15:2d:41:5c:91:9f:c7:6b:
                    6c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:DE:41:E2:72:9B:80:87:DB:9D:7E:19:96:25:9D:BA:59:C0:F7:22
            X509v3 Authority Key Identifier:
                keyid:CF:C7:EF:2B:76:65:94:89:2D:78:92:8C:BE:78:17:79:FD:CE:67:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z8fvK3ZllIkteJKMvngXef3OZ9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/cd0b2c-29e2-4737-9eb7-8cd55b03d22d/1/z8fvK3ZllIkteJKMvngXef3OZ9A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:03:f8:6c:4f:ae:85:36:7f:05:1e:cb:2b:a1:e0:3c:d4:8d:
         53:c7:eb:6c:20:11:7d:a4:32:80:70:9c:3e:26:41:8d:0c:f7:
         e9:02:1e:35:30:66:e7:69:17:e8:b0:db:d7:25:5f:bb:42:56:
         87:d1:b8:e5:c7:0e:79:80:96:66:7c:e6:48:90:e1:84:d3:20:
         df:d9:42:3c:54:ad:72:44:b2:87:8c:18:4d:40:6a:dc:bf:65:
         35:46:3f:da:89:3f:63:5a:b3:41:5b:04:02:c5:51:ef:2d:1e:
         8e:7a:9d:2b:6b:0b:7e:f8:e9:08:62:6c:47:17:90:c6:40:92:
         e0:7e:fe:22:1c:76:b4:a6:8c:ac:f4:27:93:74:9a:25:93:06:
         67:0a:5f:5d:30:f2:95:1b:13:59:04:d3:ae:79:7b:c7:f4:18:
         12:76:e6:0f:d8:d5:7e:29:af:6b:b9:aa:30:a9:d0:20:b5:9a:
         1a:d7:8a:a9:39:4d:31:9c:89:08:f0:df:11:e6:42:56:73:0b:
         d0:b5:72:fc:f0:56:f9:6e:8e:4b:af:2f:47:85:c1:cf:dd:f8:
         70:42:85:93:99:93:f6:22:b6:29:da:92:87:60:e9:9f:2c:24:
         95:1f:88:05:52:c3:2d:a6:c5:5b:e4:37:07:bc:f7:1c:7b:f8:
         02:62:f7:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----