Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
File:                     syycJt98zYrTjYm9XUk4C5Ox4Ak.mft (raw, json)
Hash identifier:          ijB4H+0hAGwtrVmI1GpZfT7mXLJcGHjSmC5sTczyId0=
Subject key identifier:   7D:79:25:7F:6D:43:64:4F:7B:E0:51:F4:B5:B8:30:E3:08:7C:51:06
Authority key identifier: B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09
Certificate issuer:       /CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
Certificate serial:       0194BC04B8DABE07B3F8769A087E5F7A1537
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft
Manifest number:          116E
Signing time:             Fri 31 Jan 2025 11:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:13 +0000
Files and hashes:         1: 48xH5tEXWZ2vsePNnUQpi1Rtp9M.roa (hash: WHr/LpVgK5v2vj342g/pLR9Q+sJ3hUKQeA6ICsPwqVA=)
                          2: ETntAp8qWJdvAD1JKZJVCJAE9wA.roa (hash: hfJtS+VPVR6qaIkwB60e9Ssm1Fsvf2mGWUvaOy9P8yY=)
                          3: alVgOiGQaygKKfRiNXMQm1ojUWU.roa (hash: aOJQStyVH2msGIdBHorM0kl3RBtrxvSgZcDUWInDqNM=)
                          4: q3J9TtOoI-IBP0Qit4nrBm2KIQ8.roa (hash: 6P7QPyce2/pI9ok7uG9x267locOdLMrJCvEmCKSQLwA=)
                          5: syycJt98zYrTjYm9XUk4C5Ox4Ak.crl (hash: 0+jzyq9+I8sMisq4pahF/slpnghyLpqVIzN6Nn/dX9w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:b8:da:be:07:b3:f8:76:9a:08:7e:5f:7a:15:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b32c9c26df7ccd8ad38d89bd5d49380b93b1e009
        Validity
            Not Before: Jan 31 11:00:13 2025 GMT
            Not After : Feb  1 11:00:13 2025 GMT
        Subject: CN=7d79257f6d43644f7be051f4b5b830e3087c5106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c5:b1:a4:88:3f:6c:59:9b:9e:bd:71:5a:26:
                    1a:a8:63:c8:33:6e:6f:99:a4:8b:cd:df:99:4e:96:
                    ae:1b:6f:95:99:1d:dc:ea:74:15:8c:80:d6:6b:e2:
                    b3:01:44:3b:6c:bd:24:ad:78:4a:81:57:05:c0:82:
                    e8:7b:fe:f7:7d:96:4a:a4:1f:cc:30:85:cb:a9:5a:
                    87:1e:23:13:42:1c:fd:bb:fa:f6:22:76:16:9d:7f:
                    a7:98:35:8d:2a:bd:0c:b0:fa:50:f4:c8:de:3f:cf:
                    86:9f:d9:1a:d8:8f:fc:73:14:52:5d:8c:da:13:27:
                    a6:ed:4e:79:20:35:78:5e:64:51:1d:20:b0:5b:dd:
                    6d:d9:36:d6:2d:86:7e:b4:f7:48:90:15:5c:36:ed:
                    68:61:42:f5:c6:5a:e0:de:47:43:69:e6:26:d3:5f:
                    ff:83:c1:a7:57:6f:c9:5d:38:3a:13:44:0d:6c:3b:
                    f9:1d:b6:f7:17:02:6e:79:5e:d0:ad:05:b4:40:34:
                    88:0b:a7:3d:a0:ec:58:42:78:57:43:02:ef:4a:1b:
                    9d:4e:60:83:f7:33:9e:87:a6:8a:8e:64:4e:50:56:
                    fe:fc:4a:df:d9:86:25:06:8e:51:e3:75:a4:80:33:
                    2d:4e:28:3c:47:56:d4:a4:bc:52:bf:3e:c3:4a:39:
                    50:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:79:25:7F:6D:43:64:4F:7B:E0:51:F4:B5:B8:30:E3:08:7C:51:06
            X509v3 Authority Key Identifier:
                keyid:B3:2C:9C:26:DF:7C:CD:8A:D3:8D:89:BD:5D:49:38:0B:93:B1:E0:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syycJt98zYrTjYm9XUk4C5Ox4Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d5da0c-9cf3-4f8b-a562-cb11bc5b2f1b/1/syycJt98zYrTjYm9XUk4C5Ox4Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:aa:e9:18:05:d8:fd:9a:39:36:ea:55:59:cc:52:5b:f0:8a:
         11:31:15:0d:84:a0:ce:e8:79:8a:88:2a:cc:fd:3d:09:fb:dc:
         84:40:8a:41:b9:00:58:6c:87:bb:e3:a3:79:ff:5b:14:a4:1d:
         00:91:4f:1d:bf:39:84:84:ee:37:b4:e7:19:8b:19:f0:80:ba:
         fa:e5:6e:7c:60:96:ba:1a:73:4a:98:90:06:50:4d:6c:b1:99:
         84:e2:1a:3d:26:1a:d5:ff:55:3a:89:a8:eb:ff:95:b9:65:b3:
         e2:8d:92:f8:30:a6:74:7a:d1:68:38:2a:92:cb:d1:93:a8:c2:
         ad:b8:c0:f2:01:07:fd:99:53:4e:f9:6f:e9:36:e6:e2:c1:5e:
         38:06:94:8e:49:07:ba:7f:51:6d:65:a3:6b:7a:9a:3f:8b:e6:
         c4:42:2a:fa:5d:3f:eb:e1:92:d1:91:e1:de:16:7c:dd:f1:33:
         62:8e:4d:9a:dd:76:f9:e4:51:e6:7a:23:a9:b5:88:49:1c:1c:
         66:cc:09:a8:95:de:26:41:41:97:04:5c:99:7b:4b:2a:c5:64:
         d4:85:05:9c:d5:b2:3d:1d:15:7d:41:35:21:91:9b:57:72:a8:
         52:31:42:ef:cb:0e:dc:83:cd:bf:6d:42:a5:1f:ef:0e:5c:d0:
         cc:6c:23:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----