Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.mft
File:                     BKr_h_bcDTaZvCk3o03HF_lPAH4.mft (raw, json)
Hash identifier:          znyHHM0q3UIv7NoGcMdGPQE+A4f62GuLVXbL3Xgz6dU=
Subject key identifier:   21:B2:2A:0E:DC:03:78:AA:15:31:BD:0C:C2:4B:E8:26:60:FE:54:A2
Authority key identifier: 04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E
Certificate issuer:       /CN=04aaff87f6dc0d3699bc2937a34dc717f94f007e
Certificate serial:       0194BC04E30C7FB44EB4D7614E9D047EEF74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.mft
Manifest number:          0185
Signing time:             Fri 31 Jan 2025 11:00:24 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:24 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:24 +0000
Files and hashes:         1: 6_SorJ25G4u7YBwW2zeSokP08Hc.roa (hash: NlgmlGFa+T46F9+6RUbpmORo7iUI0GDNp4IaSTudvHk=)
                          2: BKr_h_bcDTaZvCk3o03HF_lPAH4.crl (hash: ru7R6dFEDmH63M4A7bZHXJZBJxw9oez3unenGDEQBRU=)
                          3: KF4rj8wK1krzl3OrFPy-CqSf5Rg.roa (hash: Uyam0YZMVbS8n8u951YwMNv1LEzQgAQ1BgazVuDTRGI=)
                          4: db7fxSfPWokvsgFjR8LqozSxxoI.roa (hash: RXgT32dAocul6iqlp3swvj1YXuL0zf8bKqkA+u0l2/c=)
                          5: leQX7MTTNCcwwRlk5GrnV6QHByo.roa (hash: wvDWAkjEaXNZoWRBbZ4c0JTlvo1BtLH5Z/mnwlr+NT8=)
                          6: ydZvpx-cTBNzEbeU_ZbQ-vbyUX4.roa (hash: SOlye525/7jdmPwxqBK22yTDvIFdXndznoUXlfhw4B4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:e3:0c:7f:b4:4e:b4:d7:61:4e:9d:04:7e:ef:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04aaff87f6dc0d3699bc2937a34dc717f94f007e
        Validity
            Not Before: Jan 31 11:00:24 2025 GMT
            Not After : Feb  1 11:00:24 2025 GMT
        Subject: CN=21b22a0edc0378aa1531bd0cc24be82660fe54a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:92:4e:a0:81:96:c0:ac:00:e9:31:da:de:4c:
                    e5:96:7b:b3:28:60:84:52:4b:8d:0a:ce:98:e9:0e:
                    d4:3b:99:35:df:8b:2f:b6:a6:d4:95:60:14:e1:96:
                    d3:40:53:9d:f6:41:8d:77:78:bf:89:6c:58:56:33:
                    44:5d:ce:81:d5:f5:33:45:29:33:29:b1:78:2b:3a:
                    fb:9e:dc:1c:d2:de:d5:33:55:70:df:65:06:b2:0a:
                    3f:a0:03:40:86:3c:3f:91:0c:1f:6f:26:e2:b2:4c:
                    4a:6f:6e:f9:1a:30:b7:85:a5:61:95:15:7c:a2:33:
                    99:c3:1b:7d:c2:58:01:99:08:48:82:9e:3c:a7:e3:
                    e1:ff:23:a9:7d:7b:0e:fe:aa:57:18:f2:b8:7c:8d:
                    97:77:c8:71:4c:00:2a:65:20:07:7b:9a:f8:a0:9e:
                    a4:2e:b1:6e:07:3e:b3:d1:98:ea:ce:93:17:aa:91:
                    d2:5c:8d:7d:6b:c4:b4:e9:4c:82:f7:a8:52:ed:0a:
                    72:06:ec:31:84:ec:d9:b7:74:24:26:cc:1b:6c:a5:
                    c2:3c:9a:11:1a:91:55:90:94:d7:f8:c4:b9:8f:41:
                    0c:47:96:ed:18:a4:cf:12:9a:01:b2:77:24:bc:b8:
                    31:d3:b1:2a:be:f3:56:2e:5c:5b:9e:55:28:cd:ec:
                    c3:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:B2:2A:0E:DC:03:78:AA:15:31:BD:0C:C2:4B:E8:26:60:FE:54:A2
            X509v3 Authority Key Identifier:
                keyid:04:AA:FF:87:F6:DC:0D:36:99:BC:29:37:A3:4D:C7:17:F9:4F:00:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BKr_h_bcDTaZvCk3o03HF_lPAH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/5f2e31-9ad6-438e-ad7c-e3e0c2dbf067/1/BKr_h_bcDTaZvCk3o03HF_lPAH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:7f:48:d9:d7:bf:79:28:3c:72:a0:d0:b0:d6:48:a9:68:28:
         7c:dc:d4:09:fd:43:fb:99:a9:f7:a9:c6:6b:c2:6f:a1:ea:d4:
         4b:5b:2c:35:81:b7:1b:71:87:12:c5:8e:0a:47:cb:2f:3d:24:
         68:82:22:7c:1a:32:77:35:6d:d7:96:bd:eb:bb:3c:e2:cd:ce:
         a1:98:59:69:f5:22:c4:62:3e:aa:87:9b:fb:90:fc:2b:38:7b:
         bb:bb:2d:7b:0f:9f:03:aa:5e:86:cd:59:bc:e2:05:42:ee:6a:
         7f:6d:06:21:ca:8e:14:af:b0:d8:21:c2:58:64:07:4e:fc:ae:
         69:00:43:08:81:1a:86:eb:95:7e:6e:0c:93:33:20:ac:86:8d:
         32:2d:bc:6f:a4:69:e8:65:55:a4:da:04:a4:80:79:c4:fe:61:
         da:d6:0f:ef:a7:f6:c1:0e:01:f8:4b:ab:f6:5b:2d:13:f3:66:
         aa:1e:ea:7f:ab:50:98:e2:f7:2d:76:4d:3a:8b:98:20:2b:82:
         72:f4:41:f4:43:18:6d:03:48:f7:74:c8:8c:26:94:92:e5:09:
         13:b8:33:fd:39:e9:c6:b6:47:46:57:43:14:76:ea:62:d1:44:
         dc:7b:23:87:eb:f8:5b:a0:2f:81:47:5a:91:ed:5a:17:82:91:
         b0:c4:83:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----