Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
File:                     xvU8A9L05_B6geqQPs7wHWjGgTc.mft (raw, json)
Hash identifier:          KNDD0zqP8nMc4/T2NO+F7pQSq6dz6QCb49adFGHDBdc=
Subject key identifier:   E3:6B:19:AC:02:CF:6E:DC:13:CF:D2:1B:58:3F:45:94:6A:31:FB:3B
Authority key identifier: C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37
Certificate issuer:       /CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
Certificate serial:       0194BC04F9F4A23AF2611FE40DA89BE3F24F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft
Manifest number:          0554
Signing time:             Fri 31 Jan 2025 11:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:30 +0000
Files and hashes:         1: JPDyuwyAVoJM2Iyx8CZ_ZB6RHCU.roa (hash: QuCzbV3mXtMMCr1dPTRw5qrXtwuzqj3+jKGWKorTdEc=)
                          2: Jm7SMMzLF7_5MDCh5Y02qECnHz8.roa (hash: riP9RQHRkB7J8WrFHbcO6lj526dMWJM+emj0CRiPnlQ=)
                          3: Ou48DrwJus08n3GsGbd-UDVpOCI.roa (hash: bLCIdBEHgXrvByLARx4buUO2V5j3WD8Kgcv0zCDTM/o=)
                          4: R8JsCaWwJlloIphsJ_SUQdItPT0.roa (hash: jdlAQ7N+wj+LUd6XKIUEeWcmdCEJH5KhrOrz0eN8lDM=)
                          5: V3wGcwOVhN0tAMoLaOO8eyDkTKY.roa (hash: LoyanmiphfJJ/rxmnZ49vq4eY1guWePbQk/rQBxZgok=)
                          6: xvU8A9L05_B6geqQPs7wHWjGgTc.crl (hash: 2VmxOsQhwmkq6ZAQznEnFLwam3lDzaYg4y7vmjg9biE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:f9:f4:a2:3a:f2:61:1f:e4:0d:a8:9b:e3:f2:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6f53c03d2f4e7f07a81ea903ecef01d68c68137
        Validity
            Not Before: Jan 31 11:00:30 2025 GMT
            Not After : Feb  1 11:00:30 2025 GMT
        Subject: CN=e36b19ac02cf6edc13cfd21b583f45946a31fb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:4b:69:73:cf:d0:71:76:4a:eb:3c:50:37:9a:
                    28:25:47:45:94:0d:2e:b3:4a:6a:b7:7a:15:ee:8e:
                    94:b5:ac:30:e5:00:9f:65:9f:db:f3:e3:73:3c:59:
                    29:0b:c4:05:70:36:b4:5b:92:a7:92:aa:63:ec:5b:
                    fc:25:43:2f:35:aa:e2:1a:b4:85:36:cd:62:1f:ed:
                    61:d6:07:b0:55:a8:98:1b:3b:8a:05:c4:56:cd:a0:
                    c7:7f:9a:b2:41:32:06:a1:3c:fc:c3:d3:92:a3:6d:
                    d4:fa:94:2b:94:b6:0c:de:05:ee:56:62:04:86:8b:
                    dc:f1:a6:46:a6:8a:68:cd:07:71:d8:40:67:e6:b1:
                    27:85:82:36:b0:ea:83:24:44:d5:00:29:56:09:10:
                    09:c4:94:41:83:4a:98:74:f7:26:12:3b:71:83:55:
                    10:f4:97:e1:da:b5:61:43:3a:63:86:f5:34:f7:c3:
                    f3:b4:b7:8d:b8:66:7b:7e:aa:de:30:d8:c1:33:e0:
                    71:f8:43:6a:4c:fc:b9:4d:7b:d8:cb:c4:6c:d9:17:
                    f5:e9:0e:38:6d:25:19:bd:f1:f1:e0:30:d9:a0:76:
                    a0:d2:17:f6:7a:10:07:b8:07:86:27:b5:e2:41:62:
                    67:37:2f:d6:4c:38:76:66:11:b0:c9:cf:2d:5b:0b:
                    e4:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6B:19:AC:02:CF:6E:DC:13:CF:D2:1B:58:3F:45:94:6A:31:FB:3B
            X509v3 Authority Key Identifier:
                keyid:C6:F5:3C:03:D2:F4:E7:F0:7A:81:EA:90:3E:CE:F0:1D:68:C6:81:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvU8A9L05_B6geqQPs7wHWjGgTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/3c227c-4706-4787-9a07-90ea3729c574/1/xvU8A9L05_B6geqQPs7wHWjGgTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a9:b4:94:10:15:ab:33:aa:57:45:75:46:41:fe:c0:89:6f:
         ef:9b:f3:e4:4c:62:62:9f:a8:a0:94:7d:f8:fe:b9:00:12:93:
         70:76:e2:dc:60:2d:b2:c1:dc:1b:c7:6b:37:16:6b:5f:17:aa:
         ad:50:c1:e0:d1:5a:e1:8f:dc:59:f6:c7:17:c8:ef:a5:cc:ba:
         1d:8c:5a:3e:b9:62:af:87:a2:2b:d4:37:9c:8b:2d:6a:3c:cf:
         5e:fa:51:e4:1a:e7:bf:4f:61:ca:95:6b:15:9b:d1:c0:30:6b:
         14:b9:f5:89:48:4d:ca:d0:97:52:a9:87:aa:70:20:73:88:98:
         6d:1b:09:8c:f1:c1:30:1f:9e:70:a0:4a:c3:c8:d1:64:70:b7:
         d4:63:07:09:38:56:6a:d1:03:5c:76:26:d6:94:1c:53:29:71:
         de:b6:a4:6e:7e:ab:ac:13:98:0c:bf:b7:79:19:53:9e:e2:86:
         76:82:fb:85:4e:12:ac:e3:79:f2:16:af:ab:ec:46:6b:54:ad:
         06:45:6d:ce:cf:25:17:0f:98:75:05:fa:ce:43:d0:95:86:54:
         d0:d5:49:a6:52:f3:c0:85:ba:2c:ae:ee:2c:48:5e:4f:1c:01:
         9a:bc:5b:1b:fb:48:cf:9d:f2:b0:f4:f6:5b:89:27:bd:27:4f:
         95:e5:31:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----