Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
File:                     3B_QB9_6UI8wBj--TVOisuHoxN4.mft (raw, json)
Hash identifier:          sy7Dzy/LbO7eCJgQ8OtKHp2DGMz2w4ii6Snkfmi6N5k=
Subject key identifier:   2F:69:78:02:63:E1:91:DB:21:61:33:84:62:7B:31:3B:B5:F4:C3:12
Authority key identifier: DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE
Certificate issuer:       /CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
Certificate serial:       0194BC3C4FF61F11456F5C6B79A86EE6DBFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 12:00:56 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:56 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:56 +0000
Files and hashes:         1: 3B_QB9_6UI8wBj--TVOisuHoxN4.crl (hash: 0WGzDqoN8Wstwszqu296jQ3QgFFWQ1T+4KeCczW/HGc=)
                          2: 7qgaiTo5W1muFdP6MpWa1opzbS0.roa (hash: oB/3LoyawIAIuZTlw98KM6WEQJoxwvB9mX5CJlG5Qkc=)
                          3: 85dcB4vHUu_Vy4eqlKOzrmW4Olg.roa (hash: d3YRcy8kGOgyIH2+yoyF6a5JQlRH1WTLZygkMizzc7U=)
                          4: 8ev_3ecaOE9Xy6P1NIXqcQLzweI.roa (hash: Zj+FSqlWF1bKg6ErvNytlDkNslmJzZbU8Tq384TdAl4=)
                          5: LRmAFx6q6erwroYFlG8E6BiVohg.roa (hash: bRtBOx3Fb0WsS33nQsn4XTP0KNTUlQXCLuBYDXQSf/k=)
                          6: onA5Qj1rH9MGyVQYHgNFggbjtjI.roa (hash: KWPiO4cF+XLCzdYsua/SReatJ6Kfy0LyhbM0N7V5zn8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:4f:f6:1f:11:45:6f:5c:6b:79:a8:6e:e6:db:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc1fd007dffa508f30063fbe4d53a2b2e1e8c4de
        Validity
            Not Before: Jan 31 12:00:56 2025 GMT
            Not After : Feb  1 12:00:56 2025 GMT
        Subject: CN=2f69780263e191db21613384627b313bb5f4c312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e7:68:93:26:5c:c1:5e:44:db:3c:2f:b7:c2:
                    b3:fb:72:92:af:27:bb:cc:6c:86:2f:e2:d5:e7:87:
                    32:fa:b6:3a:df:d0:7b:fa:bb:e6:eb:d0:5a:9e:92:
                    f2:25:ee:84:51:42:5b:09:f3:51:e7:2c:21:50:32:
                    91:b1:f4:bd:66:e5:02:cf:d2:00:cb:c3:98:60:89:
                    6a:e0:8e:0c:d4:68:e1:b5:db:41:e0:0c:96:9e:59:
                    29:68:43:96:9f:b4:65:2d:be:b2:f0:22:63:15:19:
                    81:db:d2:5b:1a:b2:96:7b:ca:81:6c:65:0d:ea:c4:
                    62:fc:93:90:5a:d9:2e:3b:d5:ba:8c:e4:4e:10:a8:
                    3c:fc:95:14:f5:86:2b:15:f6:2a:4d:ce:6a:fd:29:
                    98:db:04:9a:c2:16:d7:f1:23:a1:73:6c:42:24:22:
                    52:a5:ce:2c:8e:48:8e:29:a5:10:2c:cb:bc:5f:93:
                    5e:92:d7:7d:6a:92:9f:34:23:d3:8e:46:72:66:2e:
                    c9:be:dc:31:a8:df:66:df:15:eb:58:a8:e0:15:27:
                    0d:78:b6:f3:c8:8d:20:8e:f6:a6:4d:ad:c3:f1:a0:
                    fb:39:f2:71:25:10:d0:33:b0:b8:81:c8:dc:33:fa:
                    b9:59:3c:7f:91:ca:50:3e:cc:7f:a3:6c:f2:c8:59:
                    9e:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:69:78:02:63:E1:91:DB:21:61:33:84:62:7B:31:3B:B5:F4:C3:12
            X509v3 Authority Key Identifier:
                keyid:DC:1F:D0:07:DF:FA:50:8F:30:06:3F:BE:4D:53:A2:B2:E1:E8:C4:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3B_QB9_6UI8wBj--TVOisuHoxN4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/075377-e426-492f-a59c-ae4c95c94005/1/3B_QB9_6UI8wBj--TVOisuHoxN4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:41:c3:ae:87:bd:62:2c:bf:3c:20:48:f4:56:ff:0d:51:f7:
         51:68:89:ea:b7:6e:fe:79:ad:93:bc:34:a7:11:90:42:64:ce:
         e4:5f:98:46:fe:44:d6:83:db:f6:9c:d1:3d:01:2d:2a:4d:87:
         e8:a9:7a:8f:fe:18:bb:a6:1c:24:49:52:eb:b3:ee:b0:55:59:
         b5:dd:27:8b:22:e4:0e:ac:04:99:d8:d8:4d:f7:56:ee:3e:f1:
         60:a6:3e:50:2e:e1:d1:51:e7:dc:4b:4c:d8:34:4b:a1:d2:37:
         7f:9a:28:59:1e:1c:7a:f5:15:39:a2:f3:3a:f2:f8:8a:f9:8d:
         e6:eb:ee:a4:8c:1b:fd:ca:df:26:aa:43:ba:97:85:4b:a9:6b:
         11:dd:c1:c0:41:f7:67:f2:3d:c4:ac:fe:d3:27:cd:90:d0:6b:
         c5:c3:94:ab:14:9f:b7:3d:08:14:d4:4f:14:fc:17:7f:d4:89:
         92:81:30:94:a7:c8:56:cf:98:89:30:47:14:62:66:1b:de:02:
         3e:6f:91:bf:40:50:10:09:74:4e:a0:e7:e5:5a:cf:65:ea:6f:
         d1:5b:c4:f4:23:7a:f6:45:11:85:82:4d:5e:29:cd:c1:c1:02:
         a5:da:1c:0d:bc:eb:4b:e1:57:d1:98:c1:28:e0:02:e1:8c:68:
         bd:84:49:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----