Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
File:                     hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json)
Hash identifier:          7cDzdVp0V7lUH8G8qKiHen1YH/FivOv6BN5zuEqVIjk=
Subject key identifier:   13:E4:61:D6:2B:D0:15:84:4C:C7:48:15:8C:04:BA:AD:F3:FD:BF:B6
Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77
Certificate issuer:       /CN=8452b03e1b01709638940d9592983cde77ecab77
Certificate serial:       0194BBCEFD19F88B996505C88D5037CD1A48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft
Manifest number:          1437
Signing time:             Fri 31 Jan 2025 10:01:32 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:32 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:32 +0000
Files and hashes:         1: IZeoqEY95eSVV0eYYLX8T3tHlCs.roa (hash: LO4oh4VYMguVhAQpzzJsbYN82/uMVEn2vgRLSpasT1s=)
                          2: LJnxaD0i6KMHQc1A1Myl7JzH7gk.roa (hash: BOqHp3/8Lrk2VNXTgZj56poMzxkbv3v/wNmy6/SirSw=)
                          3: NewZ8pp4liRlRqK_bUM9ux7lUdY.roa (hash: e2V20fh5Bna/npvAqL/4q48RnUBDa1PMa1ud3KkuSzU=)
                          4: OMAWMgjFkntxY9hjh7x9HjopsUQ.roa (hash: fC4Wynjh9RIf9v3k1CSQsuZtxFupNj1veyw3ZlhI/Jw=)
                          5: QHrhoLDtZR3zPElOqqmMq3qzkao.roa (hash: NXLg9El+SZKbOxc9Fad+2P9R3XvjaMUu4aKcgfvxLco=)
                          6: VTgIeAjnu6QDITPutn3ZYiX28hw.roa (hash: 1qNSFP6+K7IEMjkOk6A/QLlgZfO6RHOCGRUYacl+A9I=)
                          7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: 9hPN5Lqdi5hOr8+Ug4eShRrboTR5gsX7ha+879FoLP4=)
                          8: kYOzNphxQuuMN-KEH5LcxfVfKho.roa (hash: ZqTwzdBEFFNTdg6mPtQfwSsq0u9CJRd378DWfNVX+no=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:fd:19:f8:8b:99:65:05:c8:8d:50:37:cd:1a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77
        Validity
            Not Before: Jan 31 10:01:32 2025 GMT
            Not After : Feb  1 10:01:32 2025 GMT
        Subject: CN=13e461d62bd015844cc748158c04baadf3fdbfb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a0:fe:fc:be:79:55:3f:ab:17:2f:7b:91:3b:
                    20:2d:37:03:57:c0:a4:37:74:c6:ab:57:64:4e:bf:
                    2e:28:21:5a:70:a4:9a:eb:cd:de:b4:58:17:5c:75:
                    30:93:00:59:ad:a5:a9:a4:64:2b:08:d4:3d:4e:5e:
                    e5:dd:be:58:c3:8e:ff:6f:ae:b0:41:25:74:44:b6:
                    73:20:ab:3c:94:fe:bc:17:40:0c:c7:01:e6:b4:d4:
                    fe:24:40:58:59:b5:38:a2:1c:2b:dc:ba:42:c1:a7:
                    5e:0b:e3:ed:8d:1f:ea:bd:72:c9:92:f5:03:e6:07:
                    b1:2d:15:30:bc:b7:37:89:e5:75:30:79:a8:ef:b4:
                    c6:89:0d:d9:a8:98:70:c1:ca:9c:13:f6:b1:89:71:
                    95:93:f2:f3:d4:35:35:db:9d:53:b8:c3:f4:e2:22:
                    1a:a1:90:cb:70:ae:d5:e2:77:10:af:76:50:c3:d4:
                    4b:f2:1e:f7:48:f0:a7:e5:4b:c2:34:f7:e7:63:a8:
                    81:89:d7:94:76:ec:75:a9:a0:3b:86:ae:3c:90:79:
                    02:59:7a:b9:b6:80:08:52:ed:29:8a:7e:c2:2e:23:
                    e1:74:e5:43:86:f1:4d:ae:10:67:9b:b1:a7:55:4b:
                    ae:ee:7d:26:ae:50:34:23:70:89:66:b0:25:7a:fc:
                    74:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E4:61:D6:2B:D0:15:84:4C:C7:48:15:8C:04:BA:AD:F3:FD:BF:B6
            X509v3 Authority Key Identifier:
                keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:02:35:79:3f:84:b0:22:10:13:62:1c:ef:5a:1c:62:ee:a0:
         d0:d7:a6:0a:f5:80:38:1d:23:d9:12:ee:be:59:26:f6:dd:2c:
         61:c4:50:f4:1d:74:ac:65:5e:78:b4:c5:b6:f6:7f:18:c3:ee:
         12:cf:32:87:d3:25:9a:66:76:61:cd:ba:5b:a3:f3:97:38:cd:
         06:d3:78:8b:f8:93:4f:74:27:07:c0:d0:53:6b:9f:6b:e8:e8:
         3b:f5:d8:b9:7b:d5:81:eb:08:4a:3c:70:7b:26:5c:76:fc:24:
         b9:b3:15:39:44:17:d5:9a:fb:d1:ab:f4:c3:e4:98:10:a6:a9:
         86:90:e7:c1:3a:d5:b8:f7:2f:e6:9e:0d:eb:6f:a1:e8:87:e7:
         40:aa:94:02:fe:8f:57:0b:ad:07:8a:7e:6e:13:2b:61:74:fe:
         45:d3:8e:5c:4d:f2:7c:f5:8e:0a:f4:c0:2c:90:cb:af:4b:23:
         ff:19:7b:a0:fa:ca:ff:2b:df:dd:d4:af:3b:e1:41:ec:6d:5f:
         c9:e1:3b:26:62:05:11:5c:68:34:bd:b8:2f:95:e6:13:e2:4b:
         f6:ac:99:50:8e:44:05:7d:cc:18:7d:b3:47:d8:73:23:01:15:
         62:b2:96:bc:b5:22:4a:2e:43:19:46:eb:38:75:af:da:f8:80:
         58:19:b9:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----