Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
File:                     3DiEAh0bAujBa1VXQ9_rnajkjjE.mft (raw, json)
Hash identifier:          BT3v+jYiRhumBPUper+8hybEOIO7F0Vsx0sw/PNBqlQ=
Subject key identifier:   D9:C5:6F:0C:64:64:62:B0:A5:22:63:97:33:4E:D4:6A:36:EA:BA:24
Authority key identifier: DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31
Certificate issuer:       /CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
Certificate serial:       0194BCE0AD2F6F35F63B270ED1E0982D51CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft
Manifest number:          142F
Signing time:             Fri 31 Jan 2025 15:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:28 +0000
Files and hashes:         1: 3DiEAh0bAujBa1VXQ9_rnajkjjE.crl (hash: 0UfBvBQTWiIo84y6Ufx4KB/HKvWyKZKmOM5+2AdPDag=)
                          2: Fv3sE2iVskV-mDIZ6tC2kUlGAaA.roa (hash: H3F5XuYvkLtvyyyPb3WNBs3Jib+ztvm2aFiyN79ql3U=)
                          3: Lf6gNW4pB2_3G8WJ1gs4diM2dp4.roa (hash: KsApADDkWth8orQKJUtme8wDWNYjMSX9ur5fZXW4Ab8=)
                          4: MC2jKTT_qt4dQPRJuzCLJkn3dIY.roa (hash: 690YFNoA6dF93SoBbsIHXRbUtNVseAW76vFSFSdgmtM=)
                          5: Y7R0jQTyur7PS79n24V95dokJ1E.roa (hash: kBuKXhAOJMq8DqLXajUVs2ZVCA0WRxqfHOvHHVdd1e0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:ad:2f:6f:35:f6:3b:27:0e:d1:e0:98:2d:51:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc3884021d1b02e8c16b555743dfeb9da8e48e31
        Validity
            Not Before: Jan 31 15:00:28 2025 GMT
            Not After : Feb  1 15:00:28 2025 GMT
        Subject: CN=d9c56f0c646462b0a5226397334ed46a36eaba24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ae:53:69:f8:e4:e1:02:0f:8d:45:5d:e3:b9:
                    5c:a3:2a:d4:bf:a1:b5:c1:b0:69:b6:ff:b4:86:69:
                    cf:d3:a9:45:e4:c0:5d:67:fe:83:60:f5:f2:c7:aa:
                    bd:06:8a:da:41:7e:77:2e:80:92:e5:f8:c0:8a:9d:
                    76:bb:1e:70:2c:c5:ba:39:2e:9e:14:c4:ee:7b:f9:
                    54:32:6a:15:0c:5b:ff:99:d3:bf:3b:ce:1a:b6:11:
                    72:d5:91:ea:3e:39:f2:8f:49:63:1d:f6:b9:4a:c8:
                    5b:c6:81:f7:e6:46:8b:d0:97:b7:f0:c9:d6:cd:3b:
                    7f:76:ae:f4:c3:f2:af:ab:d9:c9:5c:93:03:89:83:
                    ca:97:5c:c0:91:5e:14:0b:7c:13:7d:bc:5f:88:99:
                    45:fd:8e:fb:be:f6:34:33:29:ab:c7:65:4c:58:2f:
                    df:c6:ec:83:a4:27:2e:15:3c:cb:31:07:3f:d4:51:
                    6d:3a:ae:f6:a8:f5:48:f9:b4:87:26:f3:d0:b4:0b:
                    cb:36:65:3e:1f:33:a4:bf:48:7e:13:aa:3a:98:d5:
                    35:f9:80:ac:a9:89:e8:06:98:63:a2:f8:33:1f:f1:
                    c9:c2:ce:4a:16:a4:43:00:cf:43:2f:bd:bf:e0:05:
                    05:65:6c:40:e7:dd:39:b2:03:61:ce:19:df:66:90:
                    04:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:C5:6F:0C:64:64:62:B0:A5:22:63:97:33:4E:D4:6A:36:EA:BA:24
            X509v3 Authority Key Identifier:
                keyid:DC:38:84:02:1D:1B:02:E8:C1:6B:55:57:43:DF:EB:9D:A8:E4:8E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DiEAh0bAujBa1VXQ9_rnajkjjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/0cb2f9-8ef9-4eeb-962a-d8b4e0d0d6d5/1/3DiEAh0bAujBa1VXQ9_rnajkjjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:a2:22:a6:04:b6:ea:ab:d4:d6:e3:39:04:de:8d:9f:67:83:
         0c:ac:a7:28:0d:84:a2:50:ac:33:f2:b2:04:82:e2:47:fa:3b:
         73:8a:4f:99:79:bd:c8:26:63:45:f6:bd:e8:a5:66:9a:e7:60:
         d4:d0:59:73:aa:d2:2b:91:0b:0c:e9:5f:eb:b1:f3:83:3d:68:
         09:cf:96:80:45:37:04:f4:84:b4:0e:4e:16:fe:ed:65:2d:03:
         dc:5e:33:b2:23:ae:46:8d:6a:2c:56:8a:73:a1:eb:cb:08:ea:
         a1:92:d1:49:3d:80:47:32:10:a8:84:ee:be:da:50:a7:90:60:
         30:24:1f:90:ac:36:98:17:0c:27:d8:64:35:a1:df:71:2f:e5:
         95:9c:49:48:0b:65:9f:bc:5f:eb:54:98:08:57:e2:61:cb:e5:
         b1:32:8e:a1:48:3a:04:7f:f0:03:79:5e:f3:b4:38:b2:72:e5:
         09:ae:47:47:11:76:79:5e:a4:41:93:d4:ef:5c:bf:fb:e3:22:
         1a:48:7b:12:e6:84:17:07:67:ad:b3:51:83:0e:94:5e:d7:c9:
         de:2a:22:d6:e5:16:15:a5:9a:77:64:b3:48:75:e5:40:59:c3:
         d1:42:c2:d6:19:cc:94:2c:10:7e:ba:21:10:24:5d:9f:76:9d:
         f2:71:06:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----