Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
File:                     3pDUMpPP6_h-fqsrDVU_0hpulkE.mft (raw, json)
Hash identifier:          K1UCqoXasxm1GOt1oQwehaF3bfaEUju1fqBFiM9XQfw=
Subject key identifier:   04:DF:14:00:D3:E6:15:91:47:D6:C5:A6:39:3A:DD:23:9C:D0:15:C9
Authority key identifier: DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41
Certificate issuer:       /CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
Certificate serial:       0194BC04AE8084357E8AABEC351048669B37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft
Manifest number:          1432
Signing time:             Fri 31 Jan 2025 11:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:10 +0000
Files and hashes:         1: 1-r8ngTnAMIWnigi3kZKRlPxzAEg.roa (hash: 4upInjfh8BMDhZW1GMRFLRcUKFy4sgss61UjVbuCcN4=)
                          2: 3bHFI98fNrO-AI7iYMdoY6Cy4Ec.roa (hash: jNavEGcWKNfNKB84/MmKoUJXT5oHj4PAQhOkM5ErTv4=)
                          3: 3pDUMpPP6_h-fqsrDVU_0hpulkE.crl (hash: LX4YWOUgOVzxBkcPSox2n3XF/0/N6vjDc4QBsleFNG8=)
                          4: DnwRMwBmJzqGVSY9VahPH_kYu8Y.roa (hash: ILOshVNQTHSQA/AU2fXZQpEbr13COQJuZvH/yImCqVw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:ae:80:84:35:7e:8a:ab:ec:35:10:48:66:9b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de90d43293cfebf87e7eab2b0d553fd21a6e9641
        Validity
            Not Before: Jan 31 11:00:10 2025 GMT
            Not After : Feb  1 11:00:10 2025 GMT
        Subject: CN=04df1400d3e6159147d6c5a6393add239cd015c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1f:48:48:d9:bd:3e:e1:8c:2b:b4:65:9b:93:
                    98:14:00:00:14:79:e5:d0:7d:80:ef:f2:91:d5:b8:
                    e4:ec:29:10:01:4a:6e:58:76:51:39:51:ac:35:71:
                    d0:a0:e2:78:1b:12:72:8e:26:b8:63:33:32:52:a4:
                    b0:37:62:83:fc:69:7f:97:ee:24:ba:7f:8e:f4:c9:
                    31:25:62:a0:0f:03:69:73:78:d0:79:49:cb:9a:e9:
                    2b:2e:cd:7f:bb:1d:d7:6b:bb:02:7d:bb:84:fb:ae:
                    b5:bc:dd:85:00:f0:bf:26:96:54:af:3f:40:bd:06:
                    25:b8:93:45:c4:24:f8:f8:d0:33:4b:de:e1:ec:81:
                    d5:a1:c4:3c:e4:77:69:b1:ed:a0:f8:d5:d7:0f:41:
                    89:65:2e:3c:09:26:8b:f3:2f:21:46:85:01:ee:b3:
                    85:81:42:1f:f2:f2:5b:f4:c6:0d:a5:a5:34:b7:2e:
                    8e:f8:f6:b4:51:03:b4:5a:df:5f:77:fb:1c:a8:12:
                    20:46:c0:0e:7e:55:33:fd:1e:7b:b9:09:c7:d3:14:
                    98:bd:26:9b:c5:67:09:8b:02:b9:c7:7d:fc:65:cf:
                    0f:1a:4f:f1:fb:a1:fe:9d:97:18:ce:0b:68:79:5e:
                    e9:d8:6c:8a:22:d9:c7:12:11:7a:71:2c:0b:c9:10:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DF:14:00:D3:E6:15:91:47:D6:C5:A6:39:3A:DD:23:9C:D0:15:C9
            X509v3 Authority Key Identifier:
                keyid:DE:90:D4:32:93:CF:EB:F8:7E:7E:AB:2B:0D:55:3F:D2:1A:6E:96:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pDUMpPP6_h-fqsrDVU_0hpulkE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/647eba-d666-49c7-a089-53edc626b287/1/3pDUMpPP6_h-fqsrDVU_0hpulkE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:84:00:9d:ce:c5:fe:c2:06:53:8b:6a:f4:a7:f0:9d:2e:d3:
         79:a9:8f:9d:b6:c8:9d:78:c6:fa:33:07:77:9d:df:6c:14:99:
         d6:7c:e2:58:0e:4b:58:9a:9f:48:db:4c:23:db:cc:c5:bc:c0:
         0d:b1:19:93:68:fa:5c:e7:31:6d:bb:55:dc:db:95:95:15:21:
         96:8d:ec:a7:ea:b8:d8:93:2f:ce:c0:dd:24:b9:6b:74:44:74:
         03:c3:75:b2:a4:ea:16:45:98:e1:1a:b5:5a:0f:af:73:93:f4:
         a7:cf:ad:20:bc:84:43:18:b8:24:e4:97:a7:3e:93:fa:0a:b7:
         c3:a0:66:39:62:48:69:42:4f:7f:98:53:23:47:b2:0b:24:aa:
         9c:7a:c8:c9:5d:3b:7e:b9:df:c0:0b:01:3b:c0:d0:f1:53:a4:
         bb:ec:b8:f0:67:44:2b:9f:98:78:d5:18:f9:30:b8:dc:76:76:
         26:e0:4c:e0:d0:aa:cd:a8:fb:dd:19:68:72:3c:f6:4c:5a:48:
         2d:42:e0:34:fe:2a:06:67:b2:02:e7:04:65:ae:2b:2f:8e:f8:
         b5:1c:a4:75:70:35:7e:d7:98:7e:88:e1:8d:5f:f4:ef:bb:27:
         1f:56:95:cd:9f:1e:22:77:9e:bd:6d:ea:20:6f:d8:e3:b3:d8:
         93:4b:7a:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----