Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
File:                     yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft (raw, json)
Hash identifier:          IsQB+5k5YJ7byPGFIAmzO9+TLThhezvmBCxBjEqxyMs=
Subject key identifier:   38:80:8C:3E:E8:E1:8C:07:0E:38:C1:16:20:74:24:08:5F:18:45:6A
Authority key identifier: C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94
Certificate issuer:       /CN=c8acf59abd4abbfbf830a060225a96a2179a2694
Certificate serial:       0194BCA9B3C69087BA5503F211612533BA85
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft
Manifest number:          0398
Signing time:             Fri 31 Jan 2025 14:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:25 +0000
Files and hashes:         1: C8L1z84_2r_lzc2Lk6eIdrAoayw.roa (hash: phPZynXPFJJG35B8r3oO6DnbXPe6XC6xJ8y/JrqkIqE=)
                          2: NGUX_wUecUWqzbndlWjKyvgn_L8.roa (hash: 17HMuISkbpyzncjWQXNjl1zx9g2Y5g9g+2mcpzxaFWE=)
                          3: Xa0B9m97ByYphB5XrMGxVdHZyes.roa (hash: mXqV2/vQX57Ww79AIe2GrEvrqiY5gtML1rzRmVpsOdY=)
                          4: gNm_8ubIRnghkX5x5Ecf8j59a50.roa (hash: XP/CkQ+YATIXyfDMuhBgJq4Rpc3X3KQf0SBIa7k3ss0=)
                          5: x1uDU9Zoy9uOw-P8QajIkhafsls.roa (hash: DvZ2AA1RQvmoSZSW5gPnUUBwYA0pEWM/KDqbtkIXCWA=)
                          6: xCnT23Rn0GW_J69HKTBn0CbUrEg.roa (hash: lihRtt/ALF9fF8QJo8U8WnJBS3k3roL75dQ2MUYDSMI=)
                          7: yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl (hash: JGyZQQnb+pqnejAZ5OdSpgt8YXaVqEb72F0b6iFYy/8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:b3:c6:90:87:ba:55:03:f2:11:61:25:33:ba:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8acf59abd4abbfbf830a060225a96a2179a2694
        Validity
            Not Before: Jan 31 14:00:25 2025 GMT
            Not After : Feb  1 14:00:25 2025 GMT
        Subject: CN=38808c3ee8e18c070e38c116207424085f18456a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:ec:f4:cd:32:3d:74:d2:be:b3:b9:04:cf:79:
                    60:b5:0a:5f:45:91:2f:45:84:31:56:3e:49:fe:10:
                    ba:84:52:90:05:af:5e:4c:5b:bf:b3:70:53:cd:dd:
                    2a:55:4e:c3:ef:1a:35:1d:87:76:5d:c8:1c:ca:22:
                    49:50:24:a5:f0:07:c0:bf:08:ae:b6:f1:17:aa:52:
                    73:1f:cb:58:7a:01:2b:61:7f:3c:0c:23:f0:27:a3:
                    e1:61:0c:1d:6e:38:9a:52:84:62:2b:e7:28:87:62:
                    c2:d4:61:ad:43:73:ea:e3:fd:d1:22:0f:c5:52:bc:
                    0d:69:78:5e:15:57:c1:7b:45:2a:d6:33:c7:5b:64:
                    c6:54:cb:22:8e:8f:99:4f:74:74:5f:1f:f2:45:5b:
                    c2:69:f6:82:3b:95:97:8a:20:6b:6e:25:4f:43:74:
                    ca:15:9d:9b:6c:e2:bd:80:a7:d3:9d:af:91:f7:9f:
                    25:57:0c:da:ef:03:e6:67:6d:54:0b:0c:7a:7e:e5:
                    49:8e:b5:f1:f6:3d:99:3f:49:21:77:d0:24:b2:fb:
                    54:f2:72:b6:4d:11:04:56:2d:d7:b1:54:c5:e2:a8:
                    a0:a7:d3:f2:e6:b5:69:c4:ca:7a:1f:63:c9:70:2b:
                    44:1c:bb:61:a5:8e:e9:4b:2a:30:b9:e2:d7:56:72:
                    62:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:80:8C:3E:E8:E1:8C:07:0E:38:C1:16:20:74:24:08:5F:18:45:6A
            X509v3 Authority Key Identifier:
                keyid:C8:AC:F5:9A:BD:4A:BB:FB:F8:30:A0:60:22:5A:96:A2:17:9A:26:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/cf7f6d-b225-4bdf-9504-838ebf412a61/1/yKz1mr1Ku_v4MKBgIlqWoheaJpQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:17:17:14:30:31:5e:85:3b:12:fc:d1:c9:42:ef:dd:a4:83:
         87:11:24:f8:b4:6f:a0:5e:00:a8:92:9f:e3:cb:2d:d8:63:00:
         de:db:ad:7d:5a:67:e3:f2:db:fc:3b:7c:c8:13:40:17:39:71:
         9a:e1:20:16:24:9b:86:92:bd:19:f8:93:b0:9e:90:a6:49:2c:
         17:6d:cb:09:99:bd:3b:18:28:1b:ff:95:8b:4b:48:2c:53:ee:
         29:f1:6b:ba:69:62:7c:aa:7f:d7:9c:22:d7:ba:84:34:a9:90:
         c3:2e:02:f6:64:4d:cf:bc:fd:66:cc:1f:07:b0:89:46:fd:c3:
         11:6f:a8:49:23:51:ad:4d:0f:0a:a7:be:56:05:5f:15:e0:5c:
         43:a7:74:69:34:26:62:96:4e:de:71:a8:a0:73:50:e0:c9:dd:
         17:8d:03:34:3e:13:e2:af:99:0c:4c:57:bc:50:03:5d:dc:69:
         84:48:a2:98:b4:e3:31:02:eb:18:9f:c6:39:72:f6:89:bf:98:
         45:d1:53:8b:d8:b6:44:df:64:77:26:ac:0c:68:88:61:ea:f3:
         a7:7d:94:d3:9b:bf:9c:17:36:6f:e0:a4:ea:07:a9:d9:3a:5d:
         ba:94:3d:a8:4e:36:c9:59:e0:54:33:55:1d:ba:83:13:65:b8:
         80:29:be:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----