Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
File:                     wPvVh2YT7cVuD13kaMzl6yiF_yk.mft (raw, json)
Hash identifier:          LmJuPtZVhjwvuCLRJ6otr+RXzEYQVT+p1HP+AoPl7aM=
Subject key identifier:   71:B8:CB:E7:52:A7:7D:BA:93:BA:87:D9:CC:5B:A2:FF:6C:9D:53:53
Authority key identifier: C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29
Certificate issuer:       /CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
Certificate serial:       0194BCA9F031FDF53CCC4D731A66B6C37251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft
Manifest number:          1434
Signing time:             Fri 31 Jan 2025 14:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:41 +0000
Files and hashes:         1: EFxSU25sGdE7ReGZ4hQCxcL1EQo.roa (hash: uR14mG4VrYUKqqD3TGgmTlLEojfMxYMgFQs/N0rSPIw=)
                          2: J4eDOx5SJHSihuh2E2EdDHS1FZg.roa (hash: AX1DVLfXHqcPxw4MGiaVf7TNJa9XXou7rNBSUIsHkkI=)
                          3: djNdVQcmVTrF_ImkfBTW1TEQZN4.roa (hash: DtPfbxjdA+NH1bgRX93+QdhSVAdl+yD2XBVTnWNlO4A=)
                          4: fbcFhpzULC3EEWBNByMVqkv4COk.roa (hash: IqZFwEwAMsXDTRbFGgHZteBrOxKZIky7zYKYfP8PcME=)
                          5: mgkhzfFw4ufuprRiBTlmBaPgwFM.roa (hash: dz3CImHP1M7gcq3PLY9DQc36du2KECW9tVbHZAcIciw=)
                          6: wPvVh2YT7cVuD13kaMzl6yiF_yk.crl (hash: 2ujoFUfQ7aOSAvLylUI749m+k7U3UJ6G/dGhtWSgdQA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:f0:31:fd:f5:3c:cc:4d:73:1a:66:b6:c3:72:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0fbd5876613edc56e0f5de468cce5eb2885ff29
        Validity
            Not Before: Jan 31 14:00:41 2025 GMT
            Not After : Feb  1 14:00:41 2025 GMT
        Subject: CN=71b8cbe752a77dba93ba87d9cc5ba2ff6c9d5353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:54:ad:95:c1:52:ff:2e:1c:5f:bf:4f:65:74:
                    21:fa:75:e7:4f:f4:17:08:c7:1c:d5:ae:35:53:f5:
                    b1:5e:fa:bd:1b:31:f8:8b:24:69:3c:44:c5:da:64:
                    6d:d8:da:41:2e:b1:37:1a:07:58:b4:dd:87:ac:1b:
                    7f:9c:9f:0c:0d:e5:25:2b:80:3e:cc:c2:4c:a6:60:
                    13:ea:70:f8:25:e7:c5:25:80:a3:29:55:68:19:e9:
                    2f:b3:ab:e7:d0:bf:ab:b5:d8:37:c4:d8:ff:7c:fc:
                    00:98:d2:4e:9d:ff:42:22:52:57:1c:04:3b:5c:88:
                    88:fc:5a:ce:6a:b5:c7:d8:20:13:b5:29:6b:6a:e7:
                    04:51:5b:17:ec:16:c5:f5:b8:b2:dd:2f:ec:66:a1:
                    47:bf:6f:ef:20:ea:8d:8a:0e:56:cd:7a:d3:c4:e5:
                    34:c2:67:58:c7:4e:f8:66:2a:5b:60:31:f9:ff:b8:
                    db:3c:40:75:fc:a8:4d:dc:28:33:99:88:61:6c:df:
                    9b:d2:72:39:ed:eb:d4:f5:3f:e8:a0:37:d9:b8:1c:
                    ec:48:de:b5:bd:2c:b1:c6:c6:fa:d0:44:1c:23:c5:
                    b7:dd:90:2c:a6:e9:1c:9e:31:48:19:89:ab:9d:bd:
                    57:c0:e4:9b:3f:db:44:ae:d6:5b:c1:3d:7a:cf:ec:
                    07:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:B8:CB:E7:52:A7:7D:BA:93:BA:87:D9:CC:5B:A2:FF:6C:9D:53:53
            X509v3 Authority Key Identifier:
                keyid:C0:FB:D5:87:66:13:ED:C5:6E:0F:5D:E4:68:CC:E5:EB:28:85:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wPvVh2YT7cVuD13kaMzl6yiF_yk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/01ebc2-84d0-4ae3-a2c2-a3b6be4a9e9b/1/wPvVh2YT7cVuD13kaMzl6yiF_yk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:81:0e:59:2c:95:7b:a4:68:be:17:09:a7:b9:bf:0e:e9:03:
         ef:03:6b:d6:39:47:dc:ba:fc:cf:45:f3:2d:8b:db:3c:75:4c:
         ce:a8:d5:59:a8:76:b2:66:ee:a6:d6:08:d1:eb:0b:68:50:a3:
         8e:fd:d1:37:2e:52:f4:dc:f5:70:dc:4f:ae:81:a7:6f:30:d2:
         04:e8:33:93:1c:d8:6b:6c:4b:89:2f:04:af:27:0d:f0:e3:36:
         1f:f8:12:10:11:f4:9c:e9:f3:9c:ef:3e:e3:7a:75:ae:93:ae:
         19:bd:50:df:4c:80:64:0d:61:11:01:f8:4e:26:7e:ef:d2:f3:
         88:23:51:8d:da:65:ff:bc:f7:c7:3b:25:c5:93:ef:2c:a1:05:
         52:6d:32:b9:b9:b4:46:6d:3c:1f:e6:b0:d9:c0:b5:5b:fd:b1:
         d7:a5:ac:d0:80:82:6d:a0:e9:ba:3e:f6:f4:42:3e:5c:29:79:
         4e:1e:ff:3c:de:20:e1:f5:a0:8b:e7:3a:0a:33:99:3c:22:f6:
         ae:97:c2:9c:c2:62:36:4f:cf:f6:c3:de:32:36:5b:33:89:86:
         58:aa:f4:26:6c:32:3e:74:62:f3:46:8f:3e:16:5b:f6:c5:22:
         66:8e:01:ee:32:7e:1c:35:db:35:af:d0:e8:00:76:86:e2:2e:
         ce:9b:37:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----