Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
File:                     jYRATl-KSxF65E5z1TxE7N1Xg0I.mft (raw, json)
Hash identifier:          aRiuUBa84+FVOZjiSXZNO7Tws+HUpsKL4Pv3KVpas74=
Subject key identifier:   FB:1E:DC:D0:B8:8A:7E:2A:3E:74:FA:A7:7D:2E:43:AC:3C:7E:77:97
Authority key identifier: 8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42
Certificate issuer:       /CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
Certificate serial:       0194BD859D5433EDAB8FEE30A0B80842DADD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft
Manifest number:          1443
Signing time:             Fri 31 Jan 2025 18:00:37 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:37 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:37 +0000
Files and hashes:         1: 7zJeCOLkCzcAkE6elAmsAfnqBrA.roa (hash: ZBwwSegU4XKbwNTWFofTTBLanZb/lF8bV9B75di1H3E=)
                          2: Mxsf5y7FP3EDBxgdyJxHG-OqVe0.roa (hash: ClWAIpLDh5pnWSp7TABzI9Qk+b3RsHPaiwstfKht6So=)
                          3: dDluN-ZW3m4A2qeeV1wHH5bu8tM.roa (hash: HIE3+ZZu9CT1HGuYfh7TMNitUjpb7aMhEYQpjqcPSJo=)
                          4: jYRATl-KSxF65E5z1TxE7N1Xg0I.crl (hash: Cu97R9+kV7T7e+wB5lds+G1odsRUMsjo9SnUBZN0qjk=)
                          5: kWKzlkscB7daOWDY4oKMbQrvmPM.roa (hash: +UujkJtTO/f34wPNB9YifFEZtv6nz6r4CdVLpks93fU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:9d:54:33:ed:ab:8f:ee:30:a0:b8:08:42:da:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d84404e5f8a4b117ae44e73d53c44ecdd578342
        Validity
            Not Before: Jan 31 18:00:37 2025 GMT
            Not After : Feb  1 18:00:37 2025 GMT
        Subject: CN=fb1edcd0b88a7e2a3e74faa77d2e43ac3c7e7797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1a:05:a4:64:b6:ba:ad:ad:fd:5f:ea:4a:ac:
                    78:b3:f6:a2:d4:ec:11:86:45:f4:3c:0a:12:1f:cc:
                    24:9a:ed:42:2c:14:e1:16:b9:7e:42:0f:00:92:6d:
                    9a:44:98:52:26:38:1b:d7:88:a1:1c:9b:fc:a6:08:
                    ab:de:4f:51:76:d9:46:8c:1d:3a:b9:17:e0:fc:fa:
                    2d:9f:28:63:a8:30:00:0e:18:6b:06:38:58:91:cd:
                    00:3b:23:88:4f:f0:f9:b0:16:d6:3d:d8:17:86:68:
                    b0:8b:ce:cb:9b:ab:da:fc:97:0e:a6:f4:cf:d1:a2:
                    da:0c:5a:46:f3:8e:0f:5f:0c:7d:9b:b3:ea:31:e0:
                    2c:59:f0:9f:f0:7e:d9:ee:38:27:e5:97:8a:75:18:
                    b1:85:20:a5:c9:2f:a7:74:10:c1:d3:5d:ab:ae:bf:
                    f2:a6:ea:d7:1a:0b:52:d9:dd:d0:1f:37:06:03:a9:
                    cd:e7:2c:63:39:6d:57:ba:c7:ec:0d:ee:94:45:80:
                    18:87:c1:43:fd:97:28:41:7f:1f:b7:b4:6b:31:32:
                    97:d2:76:ab:15:b6:12:26:14:bc:4d:05:8b:39:16:
                    69:53:1a:b6:05:ce:b4:be:7e:09:37:78:bb:e0:c3:
                    a9:f8:89:f2:14:f9:64:5b:a0:32:27:70:f2:e3:9b:
                    7e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1E:DC:D0:B8:8A:7E:2A:3E:74:FA:A7:7D:2E:43:AC:3C:7E:77:97
            X509v3 Authority Key Identifier:
                keyid:8D:84:40:4E:5F:8A:4B:11:7A:E4:4E:73:D5:3C:44:EC:DD:57:83:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYRATl-KSxF65E5z1TxE7N1Xg0I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/d51f64-5d06-4fc0-ab69-2cd98ee53569/1/jYRATl-KSxF65E5z1TxE7N1Xg0I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:32:0a:7c:b8:29:2e:f7:72:b5:6b:f8:91:4a:8f:8c:4c:42:
         a7:85:3b:9e:44:47:0f:74:53:a8:52:81:7f:88:8c:ef:e1:8d:
         73:f3:a1:1c:95:71:a4:14:10:76:9f:03:3e:fa:64:9c:cb:74:
         c6:9a:6d:dc:0f:aa:3c:5b:b7:78:a9:99:f5:d1:28:8b:17:98:
         d5:2b:ac:15:e2:5a:23:78:e9:22:6c:f6:5f:5d:15:76:69:7d:
         18:ae:3b:f6:2c:c8:f6:43:0d:74:15:5d:76:9f:d6:45:e6:cf:
         7d:20:57:6e:33:a1:77:61:0a:b0:80:1c:c9:51:14:1c:c5:e1:
         3c:b2:c4:66:ea:1e:3c:e5:0d:b3:82:9b:e6:2b:43:5b:72:9b:
         39:15:05:69:67:8b:7f:07:bc:d9:55:ee:da:28:db:01:5c:80:
         a2:d6:25:f0:57:11:1b:01:07:10:de:9d:93:10:e6:a9:5b:34:
         67:55:7e:7c:98:b8:39:d4:eb:1c:b7:81:a6:04:11:40:5b:a2:
         4f:32:dd:de:02:ab:a3:0c:4c:69:dc:73:6e:a8:2e:c3:4e:78:
         21:ae:ef:b0:70:88:16:35:83:6f:25:67:02:36:17:29:bb:8b:
         d4:63:4c:b4:7b:a5:0b:b8:ef:2d:ba:4e:69:da:4c:d7:33:7b:
         d9:5e:75:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----