Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
File:                     cCHXUovnE6S6LLTbXljWTYgutVU.mft (raw, json)
Hash identifier:          KMVjFDrJuhdqE2m4jGYDe3lSZHL//969tLsDvXUBmpk=
Subject key identifier:   1A:15:E0:FF:91:E6:8E:18:0D:9A:2A:3F:DF:4B:A6:05:CF:03:78:DA
Authority key identifier: 70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55
Certificate issuer:       /CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
Certificate serial:       0194BCE0A5798D47F75504D40691B4662081
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft
Manifest number:          03D4
Signing time:             Fri 31 Jan 2025 15:00:26 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:26 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:26 +0000
Files and hashes:         1: Komd5Ms6qIcTUPazhp2KYBREj_I.roa (hash: CnW97+An2rd0iCGWkOmUW+VoUsOuuzcBgbeTYXyF6OA=)
                          2: N-I7atLziy8-qeIjadSqHT5aCyA.roa (hash: V6zqdN9aPhv6jPMMfcX/1JdGJzCCjaFU3hvgfHZaU/A=)
                          3: cCHXUovnE6S6LLTbXljWTYgutVU.crl (hash: W/TcdaXrS/hAY5LWCVD66RHAaIR7FF5te38wErfauVo=)
                          4: dnWQJFvh8VovqX-ZW_3OjmXqCdM.roa (hash: YDFL0RIOKHZxm2CVCgnm9Jc0jri7btWi5/0UvmlJY+o=)
                          5: mUEBMB1gf8BpmkORtWka9GBSSbY.roa (hash: PBzOt+zbxQGmJ9tBRqgYaqkGg70HiRnIKjw3qGAY5rw=)
                          6: uQVUGEMfvHVdv1_YESVkZQZE7PE.roa (hash: OhVC0ZpRFpvtoO4OMxLJb0wiwXx6IP+AnGybXMCFI/U=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:a5:79:8d:47:f7:55:04:d4:06:91:b4:66:20:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7021d7528be713a4ba2cb4db5e58d64d882eb555
        Validity
            Not Before: Jan 31 15:00:26 2025 GMT
            Not After : Feb  1 15:00:26 2025 GMT
        Subject: CN=1a15e0ff91e68e180d9a2a3fdf4ba605cf0378da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:dd:06:6e:5a:a0:87:b4:98:e6:26:d8:76:d2:
                    34:9c:de:0e:61:4b:11:4a:f9:ae:3e:f9:dd:7f:57:
                    a5:cb:9d:8e:f2:72:e0:7d:e1:a8:18:ad:fc:26:ad:
                    67:48:25:40:78:4d:9d:8a:99:25:d4:96:f0:cb:16:
                    8e:b1:9b:52:be:29:e3:a8:cb:70:e1:8d:5f:c1:d5:
                    b3:7e:a3:c0:5f:9a:f6:11:d9:1f:2a:c7:e4:93:d1:
                    aa:42:6f:66:f5:58:bf:b4:a9:5a:a1:bb:9a:ab:d0:
                    de:d5:d5:4f:c0:10:75:40:1e:4c:e1:85:f4:e6:1c:
                    86:31:88:87:a4:a8:fd:ab:13:a2:32:b6:96:ec:e7:
                    17:80:8b:1d:2d:ad:0f:d9:2d:90:6d:7e:29:e8:53:
                    cd:a2:57:9e:c2:7c:ea:e9:35:bf:30:fb:5e:30:aa:
                    02:e9:be:d4:26:57:46:02:83:10:37:1d:07:22:1a:
                    c2:23:35:01:f6:a3:83:4c:ae:8e:4d:d3:ce:60:4d:
                    8d:b3:b9:aa:8e:74:13:f2:78:c9:54:dc:88:e3:29:
                    1b:19:96:4c:b4:3e:17:0a:6c:57:6d:8d:7c:e9:77:
                    de:7c:17:cf:04:1a:f9:6d:38:68:11:4a:22:17:f0:
                    40:b9:71:30:c6:a9:6e:42:2c:92:ec:36:2a:f7:a2:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:15:E0:FF:91:E6:8E:18:0D:9A:2A:3F:DF:4B:A6:05:CF:03:78:DA
            X509v3 Authority Key Identifier:
                keyid:70:21:D7:52:8B:E7:13:A4:BA:2C:B4:DB:5E:58:D6:4D:88:2E:B5:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cCHXUovnE6S6LLTbXljWTYgutVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/01b0c0-1b87-4d6f-9e90-9281f0d23dbf/1/cCHXUovnE6S6LLTbXljWTYgutVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:b0:19:d9:18:cf:b4:67:94:4e:93:e7:ec:42:71:42:09:71:
         99:a2:46:e1:49:3f:31:0b:7a:f7:ff:05:02:2e:e1:40:14:bc:
         da:11:30:c1:9c:ee:16:68:a0:c9:9d:7b:fa:ab:6c:d6:1e:5e:
         64:e1:40:db:22:6f:58:f9:21:fc:8a:a2:6b:70:ff:35:83:cb:
         a0:17:3e:b0:56:d5:26:07:4a:22:dd:f7:ab:99:d8:65:87:de:
         93:61:d7:50:61:dc:31:2f:d7:a1:16:dc:9b:5f:53:64:63:c9:
         82:3d:38:c8:26:d9:99:22:82:a1:a5:ac:bf:1a:d6:27:e5:46:
         32:fa:47:de:38:0e:59:c1:69:e7:3b:72:04:47:e6:db:1b:d4:
         2f:3d:2b:4b:1f:68:6e:de:4d:88:61:b3:b6:2d:01:87:aa:24:
         64:84:af:92:1d:45:84:12:70:e8:39:6a:d8:ec:e7:ac:9c:42:
         09:89:4a:a2:94:0d:bd:ea:81:09:f7:79:b5:88:d3:4c:79:d9:
         e4:bb:3d:14:3d:d6:a1:a8:0d:89:ae:31:2f:22:10:dc:65:a8:
         b3:99:f0:16:01:97:73:59:17:24:be:99:2d:5b:ea:a5:6d:6f:
         32:2e:a3:85:9d:3e:6a:1c:20:69:4b:dc:ea:d1:f1:25:43:57:
         9c:ae:b6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----