Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
File:                     jAYAQO86CCOqlz8NBZKx3agI94I.mft (raw, json)
Hash identifier:          0LrxW47q6FGABlgJ57J9813l5zxZp7pt7rMV8HPKo5Y=
Subject key identifier:   66:E8:EC:92:B6:94:5B:B2:C8:18:60:39:51:B9:73:33:B7:80:54:87
Authority key identifier: 8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82
Certificate issuer:       /CN=8c060040ef3a0823aa973f0d0592b1dda808f782
Certificate serial:       0194BBCE292E8136CB46B556AC893CB0D650
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 10:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:37 +0000
Files and hashes:         1: 8ZbyflawwFLPqDg3BZZLbHwGOLc.roa (hash: VykbJevpFsrAKqlNdZuPgmxNQNlKZ+4+VF7D/J1CQCs=)
                          2: H_TLsPIgEGDD_RE_XHqJUvlqj8E.roa (hash: jVZCYNBVF7woByDpZwClsmu07rKLPUQko61SrEyrK1s=)
                          3: WyA56EA2oxi30uAjF6x_QQYyE00.roa (hash: 4ql8mO5EaYeFUKdK/VU8GBpEW0nvJwvaHkKL+MQY0zE=)
                          4: eJe54pJQD4j2JDWbWUTuFe4Zw4k.roa (hash: RfLVPz0RIAcdPGVp8RcU7sTd+HqCq3IoZWz5cYzagaI=)
                          5: jAYAQO86CCOqlz8NBZKx3agI94I.crl (hash: IwaIA8Svgg94pqt0Dz2WKl0pjjucUywgLEKyY5olq7E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:29:2e:81:36:cb:46:b5:56:ac:89:3c:b0:d6:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c060040ef3a0823aa973f0d0592b1dda808f782
        Validity
            Not Before: Jan 31 10:00:37 2025 GMT
            Not After : Feb  1 10:00:37 2025 GMT
        Subject: CN=66e8ec92b6945bb2c818603951b97333b7805487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6a:03:52:b4:49:40:e0:68:7e:f5:54:10:d3:
                    11:34:5b:51:d9:3c:5c:fe:b2:89:9b:fd:2c:cc:a0:
                    bc:37:e7:8d:fd:b4:6b:30:d9:12:05:f8:ad:f2:53:
                    40:85:f3:3d:d6:48:ef:2a:33:2c:04:6f:2a:80:4e:
                    a7:dc:d4:68:de:7a:60:8a:92:21:f1:cd:2f:f1:b8:
                    72:46:1e:e9:50:a7:58:02:f7:e2:14:ae:d0:8d:d3:
                    d6:aa:23:ad:ba:09:c4:86:9c:b3:7a:80:a3:75:8c:
                    20:c2:73:d7:54:d6:a4:1f:94:36:b1:a4:09:88:03:
                    9d:74:a8:55:4b:89:b9:8e:ae:1b:29:b0:67:ca:f5:
                    fe:6b:fa:58:f6:99:54:8b:4a:07:29:a4:e0:3d:8b:
                    e9:42:fa:5d:19:37:69:26:e5:93:92:30:f9:db:b5:
                    95:9f:61:c9:40:be:fb:66:f7:05:50:b0:7a:ca:ce:
                    a1:fe:d5:8d:e5:59:c4:0e:15:17:72:ae:53:cc:c0:
                    3e:36:40:57:0b:c6:7d:51:33:09:7c:56:57:86:f2:
                    0e:63:a6:07:55:08:0b:08:9e:10:6e:d1:3d:56:de:
                    12:95:16:6f:68:77:4c:38:af:65:2b:68:bb:62:0b:
                    c1:0c:16:3f:24:82:59:ca:34:7e:ec:26:8f:a4:a8:
                    d0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E8:EC:92:B6:94:5B:B2:C8:18:60:39:51:B9:73:33:B7:80:54:87
            X509v3 Authority Key Identifier:
                keyid:8C:06:00:40:EF:3A:08:23:AA:97:3F:0D:05:92:B1:DD:A8:08:F7:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jAYAQO86CCOqlz8NBZKx3agI94I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e7549e-5b25-4200-88b9-4e4a35dd3677/1/jAYAQO86CCOqlz8NBZKx3agI94I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e8:9b:19:52:4e:45:4d:5e:72:64:2e:75:5c:c5:da:44:5c:45:
         66:0a:56:99:f4:6d:8f:a9:33:ed:8a:33:39:93:68:38:b1:6a:
         4d:5f:fd:b5:4c:d8:5b:f3:bd:c0:ec:56:2c:c8:41:52:df:ac:
         96:24:b3:7e:77:8b:5f:9b:ba:3b:83:7e:04:2e:79:77:1c:54:
         1c:06:62:34:0e:7d:3c:6d:1d:f8:bd:9a:b9:b1:63:a2:44:c0:
         7c:59:e3:7e:83:84:28:b1:65:fb:dc:8f:d7:c8:f2:8d:10:82:
         33:bc:f4:9d:7f:dc:10:3c:f7:2c:83:76:0b:d1:4c:e4:d4:0b:
         9e:b4:fe:e4:d3:b5:f0:4e:67:49:ae:db:9f:ac:0a:9c:2c:d1:
         c3:36:75:f7:ba:b7:67:63:54:9f:d1:84:45:94:77:ce:82:ef:
         17:db:83:b3:e3:dc:6f:fa:8a:4f:64:d3:1d:3f:d6:89:c7:c4:
         e7:3c:fe:74:7e:a4:83:5a:54:58:07:45:6a:cb:1e:32:eb:9f:
         a8:a2:45:73:05:90:05:ca:8a:e3:85:b3:7c:4d:96:fa:c1:11:
         c3:53:e3:81:0b:35:a6:ae:7d:5c:fb:de:de:a1:39:82:aa:b5:
         a9:3c:30:db:d7:12:b0:32:90:28:5f:75:54:99:9e:42:d1:24:
         4f:36:98:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----