Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
File:                     kPJzpjxR6vP55a57n6r9spMTQN8.mft (raw, json)
Hash identifier:          7tDrT1mbZGcAZKalYjHV4Nbwhr2AewB9X5/cWsk396o=
Subject key identifier:   18:25:45:D6:EF:48:56:C7:5E:B8:CC:C2:3C:E9:A7:F4:4F:E5:0D:DE
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Certificate issuer:       /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial:       0194BC3BF085361B83D59679486AEC5030A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 12:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:32 +0000
Files and hashes:         1: 6d9Ml28WO2fAjTVW7MUT4p6IuIc.roa (hash: gkVSjCGx8IsHv5K/Qw9S9gdePh2YLb49mTKwa/5dQoA=)
                          2: ZO9mngdXNIl_VPA2Mn28l-sVzI0.roa (hash: hmCSaS0Wu7YEQqY6nNJRdpritFyq3hIDgudp8EuE1fw=)
                          3: kPJzpjxR6vP55a57n6r9spMTQN8.crl (hash: NzJXYEYYytJ3Pff9RU/8IhSR8KijK62N34zb9vSnfcc=)
                          4: rd6hfh2x52BDGiRJllR6149itW8.roa (hash: CEiJf5vw/0k6qBwbBaFAB9ewgzEg3Zx08ds/2EBhN80=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3b:f0:85:36:1b:83:d5:96:79:48:6a:ec:50:30:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
        Validity
            Not Before: Jan 31 12:00:32 2025 GMT
            Not After : Feb  1 12:00:32 2025 GMT
        Subject: CN=182545d6ef4856c75eb8ccc23ce9a7f44fe50dde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ba:ef:9a:74:2b:5b:cd:ab:9f:d6:a7:2c:c7:
                    68:3e:5a:52:ce:fe:b8:a3:ce:e8:d1:40:10:97:76:
                    47:5d:0f:ec:26:e1:c6:aa:16:4a:ee:bf:2f:20:46:
                    01:d5:6e:58:63:f1:c3:f9:62:a2:ad:ba:9c:af:97:
                    36:c6:f2:e6:de:0e:af:e5:34:2b:e2:d5:40:bd:54:
                    75:c7:98:bd:e3:a1:20:8b:e3:1f:84:29:2b:ec:5b:
                    e9:a0:a5:a3:b8:44:95:85:b3:59:b0:3a:1c:fd:d1:
                    5b:2f:dd:2e:b9:58:ee:b3:71:6a:66:eb:ad:b9:b2:
                    fc:86:02:93:b2:65:c7:f3:85:3a:d4:d8:15:96:28:
                    df:4d:40:1f:70:8e:42:ed:d3:18:6e:22:05:18:c4:
                    d5:0d:db:e2:3b:5d:35:da:b9:92:c4:37:da:98:26:
                    d4:e6:44:e2:7c:06:6a:b5:6f:5e:64:d9:9c:54:9c:
                    5a:22:da:5e:99:e7:13:aa:a9:7d:80:ab:51:ae:ca:
                    14:49:2d:86:ca:9b:85:8e:be:d5:71:fc:b9:1d:02:
                    3a:f9:6c:26:94:89:4f:a3:11:b8:e5:ce:67:3c:3b:
                    4f:7d:ff:64:7d:f2:94:d3:c7:0c:9f:08:26:53:43:
                    f7:57:a3:83:77:d0:55:35:fd:92:9a:63:ce:b8:5e:
                    26:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:25:45:D6:EF:48:56:C7:5E:B8:CC:C2:3C:E9:A7:F4:4F:E5:0D:DE
            X509v3 Authority Key Identifier:
                keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:37:60:5e:3e:19:f4:1e:9c:55:8c:5c:16:38:ba:75:79:c9:
         a5:71:cf:a7:33:ed:f0:4e:fd:64:10:62:c1:bf:54:27:4e:e1:
         47:d2:ce:6c:74:68:cc:51:d5:99:ae:f1:4d:fb:a7:d7:ee:36:
         cf:ef:a2:04:fa:c4:53:e1:ec:b9:da:c0:29:a2:70:8d:4a:7c:
         01:8a:18:df:65:5f:80:12:ec:f9:1f:bf:5c:50:a3:84:87:e8:
         c4:92:8a:c9:1e:3f:b0:65:5e:01:8f:37:96:3e:39:d3:a3:f4:
         02:d5:2f:c0:ea:d4:61:83:89:23:66:1d:67:3a:eb:32:6b:1e:
         9f:93:c5:5a:57:cc:ae:e5:b4:ed:93:6e:99:14:0c:36:8e:a5:
         4c:4b:c4:2f:62:13:ca:15:72:33:a9:cd:dd:0a:67:76:c0:83:
         87:11:94:81:42:f5:80:c5:d0:9f:85:b1:dc:27:e8:b0:45:14:
         f4:c6:26:fe:13:58:97:34:59:a2:f3:5a:43:0f:f1:0c:42:9e:
         99:4d:0e:91:6b:1d:41:3d:41:51:6d:e9:57:33:de:ba:60:a2:
         70:41:37:4e:fe:b5:76:de:49:08:4d:9d:be:7a:1d:81:5f:0a:
         2e:79:d5:50:40:f5:66:99:97:c1:e7:85:75:39:d9:16:8e:a9:
         ed:a2:c0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----