Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
File:                     q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft (raw, json)
Hash identifier:          BU7zuhg6SReRvHW6kQ9Cu5GFWYbApF8bskSkSe/gc4U=
Subject key identifier:   58:BB:AE:98:D2:07:99:CC:0C:83:BA:37:CD:A8:9B:8B:C0:2F:33:3D
Authority key identifier: AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18
Certificate issuer:       /CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
Certificate serial:       0194BD17DF0A6DA48C63067843D4DFC9B50B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft
Manifest number:          1434
Signing time:             Fri 31 Jan 2025 16:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:45 +0000
Files and hashes:         1: EV5m5XkVlwJiCAVuE-Ap-f7iyzE.roa (hash: 5PDn99juoAn/xETBDuvN6m9sq91U6NavWyjHbCXKOeQ=)
                          2: FAhtWfmDEr62tA8-MdL4s1_WH2Q.roa (hash: GtQmguJ7Q5PK416zswB+RN8W/nrjymWunr8cc+Q6G9I=)
                          3: q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl (hash: zzbM2CIQxCAJIrNXKI8nvNbWJQOsRFA6w+353xfssOo=)
                          4: q_qPSgEpylFC-voOECXeWUWdHJM.roa (hash: jFOGBq/GXOLKGj5Jj8L6FPHFg+Kwe4gyyf67qENLLPY=)
                          5: tS4qFuiX3ntHvDjVyJpnqQIgubM.roa (hash: N7idUn1lSpqbvStbcsN5u6MjxI9pbc7GDDAuvP2mI1U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:df:0a:6d:a4:8c:63:06:78:43:d4:df:c9:b5:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab4f00f5c3ab3df4c674a410d8a0f0182fb5e918
        Validity
            Not Before: Jan 31 16:00:45 2025 GMT
            Not After : Feb  1 16:00:45 2025 GMT
        Subject: CN=58bbae98d20799cc0c83ba37cda89b8bc02f333d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:e6:1c:26:bd:0d:c4:f1:fa:e5:b3:09:7e:44:
                    1b:f3:1e:76:dd:60:f8:66:55:23:4b:6e:c5:a4:86:
                    94:82:42:1c:fe:a7:42:69:7a:63:b2:fd:4b:e8:52:
                    c1:92:5a:05:8b:5f:ea:a1:86:e3:e6:70:ba:2b:22:
                    c5:46:f9:64:16:99:38:d4:aa:1d:06:66:ff:c5:d9:
                    f0:79:3a:a8:12:3d:e4:6f:ce:0e:30:73:ec:eb:01:
                    a2:84:24:6a:81:bb:d0:91:55:5c:4f:c1:35:6b:44:
                    a5:ed:16:b7:fe:16:a5:74:d7:fb:f2:ff:16:4c:a6:
                    66:b1:29:ab:36:ec:ba:91:32:7d:a5:02:6e:52:a0:
                    4d:ee:26:c9:eb:73:15:ad:17:79:55:07:3e:2c:52:
                    02:94:1b:49:2d:e8:61:d5:e8:b0:74:ab:ba:e5:16:
                    94:28:8e:da:ba:9e:94:6c:7f:ec:d3:7e:4a:15:07:
                    93:ce:1d:e7:c4:fd:66:82:24:5e:8b:84:c4:1c:eb:
                    09:8c:ab:b1:0c:f4:1d:5c:ef:71:91:bc:60:04:70:
                    00:ab:3b:59:93:f4:2d:77:4f:ff:20:94:4a:8e:1b:
                    17:75:41:d2:46:e3:1e:cb:09:48:f6:42:47:9f:17:
                    2c:2a:9b:1c:f2:56:f7:39:c3:da:70:ef:3a:d9:7e:
                    cd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:BB:AE:98:D2:07:99:CC:0C:83:BA:37:CD:A8:9B:8B:C0:2F:33:3D
            X509v3 Authority Key Identifier:
                keyid:AB:4F:00:F5:C3:AB:3D:F4:C6:74:A4:10:D8:A0:F0:18:2F:B5:E9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q08A9cOrPfTGdKQQ2KDwGC-16Rg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/a1f212-ba35-466b-b52e-3853d340c9a6/1/q08A9cOrPfTGdKQQ2KDwGC-16Rg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:62:d6:86:3d:fa:1c:39:6a:56:bb:4b:6d:74:45:79:6f:4b:
         0a:c9:50:41:db:df:ab:1a:dc:2c:ba:2d:e9:31:e3:1a:86:a5:
         75:86:96:70:43:bf:ae:87:6d:69:6a:d8:d5:fd:f1:11:dd:65:
         c9:da:b1:92:5c:ce:3d:49:b1:d2:d7:bb:68:1f:24:5c:06:6e:
         be:ed:ef:25:00:44:2f:f9:bd:55:6e:46:d6:c5:46:c4:fd:84:
         dd:d2:43:8e:e1:f9:33:4d:97:de:1f:64:55:bf:5d:d5:bb:32:
         48:0a:da:0f:95:08:ba:9d:3c:79:36:0e:e0:d0:cd:d5:e1:55:
         a0:18:8a:d6:7c:97:24:65:07:5b:3e:53:38:5b:f6:36:5a:d1:
         74:fc:b4:08:34:e6:ef:e5:c4:d6:58:ea:98:fe:77:bf:b2:0d:
         66:56:07:a7:21:76:f7:31:ad:8f:67:c3:b8:12:4c:4d:c4:d5:
         98:37:1c:e0:3c:be:65:ce:cf:03:8a:3a:a5:0e:6e:c0:18:39:
         03:77:be:1a:99:b0:73:cc:a2:06:7d:7d:28:a4:4f:4b:8e:14:
         ec:7c:02:ae:87:f4:21:61:22:a1:f4:80:41:f9:ae:a7:78:c3:
         f3:73:cd:11:c0:8f:4a:12:4b:0e:6e:64:d0:63:67:df:c4:2b:
         64:c4:8b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----