Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
File:                     r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft (raw, json)
Hash identifier:          KMXKmjXWwW2q95yF0H87RPpTdXTNoCzBoPV4IeEu1wk=
Subject key identifier:   CC:EE:AC:E1:21:8D:3A:5E:02:12:4F:96:AF:63:41:21:6F:CC:CC:49
Authority key identifier: AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B
Certificate issuer:       /CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
Certificate serial:       0194BCAA24AC1E112F65981FD5EBFE711C0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft
Manifest number:          1480
Signing time:             Fri 31 Jan 2025 14:00:54 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:54 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:54 +0000
Files and hashes:         1: 8K2lGgpGXjS00-GcfRjT3a_eJgA.roa (hash: C+7sI9Pyh9Bl/Kj0tjtivklrSn2Sxfv2neZ3RxgZoe8=)
                          2: G4Jxn_aqBgyU9_YGlRiE9ULjWaU.roa (hash: RbL+vfgJwT99KSNM/1Fv+iOzh78qncOg1wBYg2kVVuA=)
                          3: IoD5gau8ca33bX7P3LRLuiKbRZM.roa (hash: j9p5Da+/+Yzr/MRz0NAUAXr0JoA15rp7WE5vGQVI32s=)
                          4: JQA-HarJVevrzVlDDxxLwEh8Gs0.roa (hash: DCqgPByQqjOW1Ld1zDzDgjTePs/q3+t/F+AzIwqXHgI=)
                          5: TkJi6MAHiQpNj2Oyk40aOzqLJ7Y.roa (hash: I/uwWwVqDGThqp+KA/qqLKY8rR+9iLdzyQtCR4yZvrA=)
                          6: r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl (hash: PaBTKQ2sRrnNJ7EfO8Gn8M/iAUen/iqzEr9XUH/6odM=)
                          7: yNtguhxLlGFfI9XOFYXxQMQLlUo.roa (hash: CRlX9/2P79xJ+8xnxa+t5w4SEHZe79te4oGn3OoZ39E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:24:ac:1e:11:2f:65:98:1f:d5:eb:fe:71:1c:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af801984cc38f0a4fc5afe1adeab680c1b89e95b
        Validity
            Not Before: Jan 31 14:00:54 2025 GMT
            Not After : Feb  1 14:00:54 2025 GMT
        Subject: CN=cceeace1218d3a5e02124f96af6341216fcccc49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ef:37:b3:08:0b:c3:5a:9e:f2:e4:2a:41:d3:
                    4f:70:84:fe:b7:b6:46:67:56:bc:6b:0d:a5:de:a4:
                    cd:73:64:cb:a0:67:11:cc:58:60:2f:5f:2e:50:2f:
                    ad:13:62:73:03:6f:59:02:44:33:01:70:8a:26:e0:
                    f3:d9:98:33:f0:5c:94:ad:45:9c:dd:b2:c5:28:19:
                    7c:31:7e:e2:b6:b4:c8:41:2f:0a:94:34:d8:e8:a5:
                    ce:ff:8a:f4:3b:ef:cb:83:45:4a:d3:2f:65:19:76:
                    6b:60:3a:11:9c:e8:cc:23:94:f2:5a:c3:59:87:58:
                    0e:89:8d:d2:16:01:8b:81:5c:2f:1c:fe:80:ab:27:
                    48:5b:0d:50:c5:aa:b2:bd:c2:bb:79:fb:90:d3:db:
                    b7:90:09:fe:5d:0e:b8:c8:b9:a3:01:50:fa:3c:02:
                    d7:a3:f0:e1:3c:bf:7d:1b:f3:72:a4:ee:34:a0:79:
                    79:b8:0e:4f:0c:ef:94:23:1b:bf:16:a1:d9:e6:02:
                    98:4f:82:a4:46:2f:e4:15:24:ed:bd:1d:b4:04:a8:
                    1a:dd:9d:7d:10:05:c8:fb:e5:61:9c:43:8f:5d:bb:
                    9a:e7:e0:fa:a5:54:09:7c:a0:d1:9c:77:67:eb:63:
                    e6:d8:59:b3:8c:23:f1:de:7f:39:11:a0:d6:8d:d8:
                    bd:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EE:AC:E1:21:8D:3A:5E:02:12:4F:96:AF:63:41:21:6F:CC:CC:49
            X509v3 Authority Key Identifier:
                keyid:AF:80:19:84:CC:38:F0:A4:FC:5A:FE:1A:DE:AB:68:0C:1B:89:E9:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bfd37c-cb12-4a9c-8f5d-4021265c39b0/1/r4AZhMw48KT8Wv4a3qtoDBuJ6Vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:06:65:a0:93:de:2c:b1:48:30:c7:d8:0e:78:30:f6:b1:9b:
         11:75:6b:28:92:81:b9:4c:88:0b:2e:ef:9f:0a:ff:45:e4:4c:
         98:dd:15:a5:1f:a8:01:67:fe:3f:2a:91:00:05:fc:45:f1:e2:
         54:47:da:7f:39:31:3e:00:76:af:43:1d:8f:b9:7f:4b:1d:d8:
         dd:54:e2:3a:1a:15:ae:db:11:02:13:64:05:13:69:f4:98:ad:
         32:23:dc:9a:2f:b4:eb:0f:0f:10:5b:73:4b:02:1e:60:3a:e2:
         7f:3f:f8:28:1a:0b:28:e4:59:fe:23:68:aa:da:07:8b:77:3f:
         98:a7:4c:e6:36:4f:e4:4b:99:f7:4b:08:75:7e:d1:7d:8f:6a:
         dc:49:00:a9:93:57:36:2e:cd:d8:df:24:83:47:96:22:b1:68:
         9e:51:05:0e:25:4c:a3:d6:bc:50:1f:09:57:1c:ce:f9:7b:a1:
         39:c6:6d:59:52:6d:3e:d5:c8:d5:b3:0b:32:9a:07:7f:4d:64:
         5e:5b:7d:52:2c:8a:b1:67:9a:4b:4b:5e:9a:b1:51:e5:ba:12:
         5d:f4:10:09:84:39:10:36:58:64:f4:26:a6:b6:ae:64:16:e6:
         ee:d2:6c:2e:87:b4:e4:b7:25:0c:9f:f7:78:1d:3b:80:5b:95:
         0e:ab:5c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----