Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
File:                     vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft (raw, json)
Hash identifier:          Jwjq79+UB/lNp4SvxZoK5eIg7mLA7aeuPMYMbceYz0c=
Subject key identifier:   BA:D0:0E:F3:26:FF:2F:58:EC:E0:E8:E1:D1:EB:CE:CF:34:BF:34:FE
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Certificate issuer:       /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial:       0194BD1779D96391AC6F32499CE1C35A2AE3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
Manifest number:          1248
Signing time:             Fri 31 Jan 2025 16:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:19 +0000
Files and hashes:         1: Ghw61h9q0dZx9p33fCHZwLJ--4g.roa (hash: XENiDzusC8HHdBPr6eoujfkQa5XCC/wJpP0SovK6s5s=)
                          2: W-gPHpmpBiVpNwoTM89LZF-6eKQ.roa (hash: 1KJlUjxdJ+ruVUfDwdtSoFOvk+NECBzB6oYJ432Oeqo=)
                          3: gNsZz63lZz-xYYJApJes6zZtWTc.roa (hash: oq/U8u4Y8U1JtfeAS0wF/F6M4QBJJs7QTcA9o7FJ9go=)
                          4: l-fA27baArnfz8uDdDUN4TrASTU.roa (hash: mDdwZSps/Tm3oeaUYl4v4D4Q07yFttXjrmZKf1wuoqE=)
                          5: uPPM1c3qaDPcgQcMOMUY1UnD8bw.roa (hash: TZFGaoE1GRn/2zGm9yP4VVapPA1t9azRKGFIQqjd5T4=)
                          6: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl (hash: y9oFy1pOJ9EV7obrbVVYZLN4gvPEFCLu69Q9OptONC8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:79:d9:63:91:ac:6f:32:49:9c:e1:c3:5a:2a:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
        Validity
            Not Before: Jan 31 16:00:19 2025 GMT
            Not After : Feb  1 16:00:19 2025 GMT
        Subject: CN=bad00ef326ff2f58ece0e8e1d1ebcecf34bf34fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:da:81:09:52:6f:fe:59:de:75:3a:9a:e6:
                    30:33:85:2f:d4:05:1f:4a:92:b6:ef:3f:ad:6f:db:
                    dc:d4:d2:60:01:5d:be:70:ba:3e:b4:4f:fa:82:34:
                    dc:62:66:ce:9c:a7:4c:61:99:51:ff:90:06:19:11:
                    20:21:88:de:77:1d:80:1b:b6:13:eb:ce:10:f2:26:
                    84:29:39:5c:61:cd:65:c4:c8:15:9e:b7:61:16:67:
                    bf:2a:9e:18:a4:e8:c5:24:0a:62:6f:ae:b7:a1:a8:
                    e0:3f:a3:4f:b5:5a:b0:c2:83:8b:8a:46:eb:aa:7f:
                    fa:a4:cf:31:8e:0d:02:54:eb:aa:b3:43:b8:1d:84:
                    b3:17:95:e1:16:ab:fc:2b:eb:7e:23:a6:a5:8c:00:
                    da:d6:02:1e:bc:e2:b3:a3:eb:00:05:98:6a:70:cf:
                    f2:41:75:e6:75:3d:40:c0:e1:a8:df:af:c2:9f:03:
                    9e:27:dd:b1:cd:1a:ae:56:70:e0:8c:0e:e7:81:e6:
                    e4:75:8e:b9:39:de:86:eb:86:96:72:1c:aa:aa:c4:
                    e6:b9:73:3f:65:f6:43:06:c0:c6:9d:2d:23:74:ee:
                    21:b5:bb:51:2e:2f:7c:1d:8a:28:f3:81:14:df:d0:
                    74:15:ba:80:ba:7c:75:ee:0f:36:a8:db:c9:68:7f:
                    3c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D0:0E:F3:26:FF:2F:58:EC:E0:E8:E1:D1:EB:CE:CF:34:BF:34:FE
            X509v3 Authority Key Identifier:
                keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:bc:df:f4:bc:8b:e5:20:76:65:65:ca:a8:64:93:46:08:ce:
         91:a3:35:47:a0:d2:db:1a:c7:53:80:b5:f8:09:b0:0d:e6:4a:
         22:d6:19:2e:fb:28:3a:6a:9e:33:98:73:36:45:ef:8e:48:a9:
         23:59:80:3f:de:0b:27:a3:57:71:68:f6:52:71:0d:27:fe:06:
         de:29:e0:fe:7a:9a:6f:d8:a5:0a:c3:1f:0c:c8:3c:55:b5:ed:
         f7:50:b0:f5:39:da:b1:aa:41:93:26:31:d4:5b:1c:32:d7:92:
         2d:68:5b:e4:4b:aa:17:cf:78:21:79:41:98:68:4a:32:72:31:
         71:a7:62:6b:2f:e2:ee:63:27:ac:73:f9:97:dd:80:6a:e6:bc:
         fd:41:60:e5:16:b7:ab:bf:b5:b7:34:5c:52:41:17:29:c4:65:
         b6:19:07:62:6a:f1:ca:8f:a0:12:2c:70:90:04:2e:56:f1:17:
         d6:c8:d1:1d:7d:70:6b:11:d0:81:35:8d:b7:88:14:00:24:87:
         9f:ab:ab:ee:15:f2:ee:62:d7:12:fb:c5:78:57:8f:ca:1d:05:
         07:8c:8c:e2:93:2a:5b:29:ff:b0:2c:4d:00:70:2b:2f:ad:89:
         f6:73:73:91:ce:14:8c:75:25:66:b9:1a:91:3f:8b:e4:7a:5c:
         b3:31:d1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----