Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
File:                     3mZANXrkrhD8Cz6dmPKgywEYkDw.mft (raw, json)
Hash identifier:          i8v/pgNO+hENBNjz+k2uDfxhw8lz/G+LOU/zjf1bw4Y=
Subject key identifier:   52:6E:7B:48:63:CD:62:57:3C:6C:9D:C2:55:C7:72:48:68:1E:57:67
Authority key identifier: DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C
Certificate issuer:       /CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
Certificate serial:       0194BC72CECF5AD0F9B550B3AF0E03863EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft
Manifest number:          091C
Signing time:             Fri 31 Jan 2025 13:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:28 +0000
Files and hashes:         1: 3mZANXrkrhD8Cz6dmPKgywEYkDw.crl (hash: Ad9TY9AkTEDzRBRYbWajQdYZjMbVxm1HKuZbZOsMzA8=)
                          2: 9Ht1WS_vqd6PGFgJgGHqYQxnzds.roa (hash: jy6H59LUS5waYqQP6Dhp+2VxxeHkS9j62qw0M1cdA/g=)
                          3: HWj4rrIG5yLx-R7YJHriQZkaHlU.roa (hash: w4NJmcaVn2AcPxlAH9mW36Xv6MPv2ne3C9Tmp8J45QY=)
                          4: Ja-mDUtTmKTc_5z3WZikEzgxnO0.roa (hash: OHF3bECjzb4WxileHvkYP3598NMiRQdCX4l/f2//5yI=)
                          5: gizPDPJlnHFMwdNkDj4bjEHwsOM.roa (hash: s+HhHFRsrWXDsklXWcH/16ndefegRFDZvIRvtU1bOnQ=)
                          6: o4UdTzK11yn9790w6aFya-CRsYk.roa (hash: 5gJHsN2PGfagg0XX4Yhkkp3hRI4hmN+LCY9ILQ0xCTc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:ce:cf:5a:d0:f9:b5:50:b3:af:0e:03:86:3e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de6640357ae4ae10fc0b3e9d98f2a0cb0118903c
        Validity
            Not Before: Jan 31 13:00:28 2025 GMT
            Not After : Feb  1 13:00:28 2025 GMT
        Subject: CN=526e7b4863cd62573c6c9dc255c77248681e5767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:70:68:71:2f:ad:90:54:3a:f5:d4:27:01:f0:
                    a5:10:84:07:ac:ba:3c:95:8d:ac:4f:94:15:ae:f7:
                    65:c5:85:c2:cb:ca:23:a2:cf:8f:c3:77:f6:79:37:
                    5f:41:57:e8:b7:c8:2c:a4:b5:ab:c6:47:02:c2:44:
                    d4:65:a7:70:10:e0:81:ae:74:b9:1c:11:98:7f:2f:
                    97:7f:63:d1:e9:ae:4a:b9:c2:84:31:e6:ac:2d:04:
                    9a:d9:71:70:b7:06:d3:d8:ab:66:08:84:c8:11:83:
                    2c:e0:6f:65:b1:86:3b:05:22:8a:01:f9:d3:e0:fb:
                    77:6d:78:c1:a0:8e:12:13:1e:92:fb:63:7f:ce:39:
                    97:da:6d:f9:7f:77:86:46:5c:be:c1:e6:a9:29:97:
                    e1:d6:a9:6f:e6:8a:b4:b0:e7:fd:8b:6f:31:85:34:
                    2f:de:de:99:fe:5b:86:e9:55:ff:9a:79:9d:4b:7a:
                    6c:be:8c:d3:78:18:eb:53:17:8a:01:2c:fb:b4:e6:
                    96:a6:0e:f7:48:cd:87:7b:68:69:01:7e:fe:78:ea:
                    75:c4:30:c5:2d:93:23:f8:7a:f7:f3:df:8f:fb:e5:
                    a8:9e:ea:65:67:aa:aa:5d:83:61:db:7c:76:b0:9e:
                    19:64:7a:5b:78:ba:d7:22:e2:e4:2e:86:8a:a0:25:
                    d8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:6E:7B:48:63:CD:62:57:3C:6C:9D:C2:55:C7:72:48:68:1E:57:67
            X509v3 Authority Key Identifier:
                keyid:DE:66:40:35:7A:E4:AE:10:FC:0B:3E:9D:98:F2:A0:CB:01:18:90:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3mZANXrkrhD8Cz6dmPKgywEYkDw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/ad19c0-0025-4c49-8480-ff97f62a0945/1/3mZANXrkrhD8Cz6dmPKgywEYkDw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:c2:77:7f:de:54:b6:e7:95:c3:de:f5:5f:65:38:42:56:9c:
         f2:21:2f:fa:7c:f7:fc:c3:45:b5:d0:15:24:cd:58:6a:95:f8:
         38:b7:73:ab:74:01:f2:8e:a3:b9:8c:99:5f:24:1b:d4:d7:8d:
         6d:42:b4:3a:14:65:34:a0:54:03:d7:a6:84:d1:14:19:05:f6:
         5a:17:a2:65:9f:67:fc:04:53:b0:e2:4b:e2:a3:98:4b:0d:86:
         90:6d:3d:ed:b9:a1:00:cb:6b:aa:d6:a4:ca:6a:3a:8f:8e:42:
         5a:7d:f0:2a:d5:a7:74:c6:2a:6c:d0:48:c0:7e:ae:f1:15:cb:
         6e:e2:af:b6:8a:92:bc:75:84:52:1f:73:6f:44:32:da:1a:d7:
         c1:09:6d:27:d8:d1:3a:d3:49:39:e2:40:8b:71:67:05:12:9d:
         5f:06:19:0c:22:c8:19:ed:ce:a5:38:ba:80:da:d2:60:d4:3a:
         7e:d1:b4:55:05:2b:44:3a:31:87:a2:f2:b9:3d:53:2a:79:2d:
         b4:4a:0e:66:cf:01:ff:27:e7:ab:a5:d1:51:77:bb:d6:7f:1a:
         2e:02:52:97:f9:57:85:23:f9:9e:22:fa:a7:f6:1f:71:62:69:
         4d:b2:3c:82:88:96:f2:2e:15:bc:4d:65:d3:2a:84:a0:9c:f4:
         6d:ac:2e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----