Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
File:                     eahD06Z78gLQriPfleFOqHHY8V0.mft (raw, json)
Hash identifier:          fpr514rKGRmH3gKuThOfU+kmruO4BF7JJS+AxukqdvA=
Subject key identifier:   75:46:D3:B5:80:20:20:C9:24:04:89:7E:68:F6:8E:B5:86:15:7F:9D
Authority key identifier: 79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D
Certificate issuer:       /CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
Certificate serial:       0194BBCEC02AF8C36891095B5454B65CEEC6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft
Manifest number:          0C39
Signing time:             Fri 31 Jan 2025 10:01:16 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:16 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:16 +0000
Files and hashes:         1: 03o7NXcv7U3uhmW3vl8ktxXIEVI.roa (hash: uqR7OCO4P5GAQJzWKXoDWdhHBwfEakY01mZT4sBENQc=)
                          2: 4LsGyYiK0sgKkroWjTTFs8_ZHCM.roa (hash: QauhAAEQPIkKYlb83izgi5pzYOnIDRyMVizxEMXIMVo=)
                          3: 7sjN2_HImQcJ9USVUGWMp0CNmPA.roa (hash: CA5FQ+7/XO2sFqAdifwglNJ59I+wJgTcZkMw34QXhR8=)
                          4: N8k2TrCtZegKjjZ-WWd6AMPX5RU.roa (hash: n0kryDikypIQ15lrOig2ttq2l+vMduOB1IWfGgwZy08=)
                          5: eahD06Z78gLQriPfleFOqHHY8V0.crl (hash: VvpbeYbr4f35B657KlFQRAp0mlTjq2yrRexouQB9J/A=)
                          6: vlM_ktUPh9YMyXGP5lWXtK5QYKI.roa (hash: U8y+ivAuQQt5uGM6IT2qpM5NAadxtpu1MJgeCGfGzvc=)
                          7: wp3jap1mni2XXyWB1TdLeNanlYY.roa (hash: dpVy5m/fR2s5CCuPKjVf05/STGRBkjX8a4+Pj4dHCio=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:c0:2a:f8:c3:68:91:09:5b:54:54:b6:5c:ee:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79a843d3a67bf202d0ae23df95e14ea871d8f15d
        Validity
            Not Before: Jan 31 10:01:16 2025 GMT
            Not After : Feb  1 10:01:16 2025 GMT
        Subject: CN=7546d3b5802020c92404897e68f68eb586157f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1a:fa:1e:46:44:d4:a7:59:de:e9:0f:46:ca:
                    87:a2:a9:1e:de:2f:11:95:b3:92:98:55:ed:97:26:
                    f2:bb:9d:a8:b3:3f:3e:60:4e:9c:70:e1:36:21:a4:
                    f2:43:65:89:b0:dd:2a:76:49:23:78:65:b2:7a:37:
                    be:f6:ec:b9:e7:e5:54:f1:84:ac:4a:1a:94:f6:34:
                    58:07:81:24:96:0c:f5:72:bc:63:4f:98:09:e8:84:
                    e3:d8:1e:94:13:9d:99:63:f5:49:e4:b9:0f:57:ce:
                    80:20:b6:1b:08:33:ba:b8:bb:9a:3b:5f:c0:9f:81:
                    e5:35:f7:f2:ed:d6:27:d6:e3:5f:a8:b5:ab:a4:0d:
                    67:78:18:d8:23:01:08:27:bb:52:a0:93:72:c1:5a:
                    4a:07:e9:8d:3a:4d:30:1b:5e:88:7e:da:f6:c5:f1:
                    29:0d:18:dd:fa:2d:b7:21:5c:bc:f3:1a:ea:ce:1a:
                    ba:94:85:87:48:e4:8b:30:2f:b3:76:d8:39:97:08:
                    84:9f:c3:d5:58:fd:c3:33:a1:88:13:40:14:15:d9:
                    23:74:e3:32:bf:e2:e8:85:1a:42:c4:69:40:9e:ca:
                    f2:0b:99:dc:fc:8f:52:91:4a:e9:08:b0:c8:6d:99:
                    13:88:48:1c:e0:c3:d4:60:01:5e:d5:cf:fe:6d:e8:
                    43:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:46:D3:B5:80:20:20:C9:24:04:89:7E:68:F6:8E:B5:86:15:7F:9D
            X509v3 Authority Key Identifier:
                keyid:79:A8:43:D3:A6:7B:F2:02:D0:AE:23:DF:95:E1:4E:A8:71:D8:F1:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eahD06Z78gLQriPfleFOqHHY8V0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/f70c6a-814b-461a-8541-b4dd22758951/1/eahD06Z78gLQriPfleFOqHHY8V0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:73:6c:09:44:c0:ee:27:8d:69:95:6b:9a:26:a1:36:e9:e9:
         3e:37:f2:2b:15:18:fd:f2:2e:a6:2e:8a:df:16:5c:91:51:96:
         00:1b:38:84:36:aa:4f:bb:6f:b6:93:dd:f6:21:66:35:bf:b8:
         4e:b1:78:fa:23:af:d6:b3:1e:aa:60:d8:9e:00:10:e4:a9:3c:
         cd:e4:cb:7a:f9:96:45:b0:c2:45:57:22:c5:d3:3c:27:8c:80:
         63:49:27:4f:5a:a5:1b:e7:77:c2:d9:0a:4e:8a:16:a1:a6:ab:
         6a:76:ad:b7:08:d4:52:ed:ed:8b:cc:97:bc:06:14:06:b7:8a:
         ba:d1:6d:e8:87:f8:74:00:33:80:e6:71:15:a7:73:0a:b5:67:
         13:7a:7f:50:b9:75:bf:5a:61:ba:89:7f:66:83:e3:bf:4a:c5:
         6c:6b:c8:3d:e8:2e:92:78:ac:63:e0:58:15:44:4f:64:6a:51:
         b6:aa:90:85:ed:69:fe:e9:a2:a8:6b:9d:46:9d:78:36:ab:e8:
         18:a7:91:e9:f8:0a:1d:9a:2e:0b:bd:2a:c3:52:b2:06:d9:1b:
         8d:7f:4a:9f:7a:ce:29:4a:4b:25:ba:77:00:d0:af:c3:81:d9:
         d4:65:9d:be:07:87:15:a2:57:cc:56:f8:93:63:7d:fe:6d:dc:
         cc:e8:73:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----