Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
File:                     CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json)
Hash identifier:          RO4cnhPH3TvbB+dFhTlybU3Lk+Ks954bgdS8Eh4bkwM=
Subject key identifier:   23:07:D4:58:37:D2:52:4B:C4:52:AA:08:D5:E9:07:4B:1C:83:09:31
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Certificate issuer:       /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial:       0194BCA978CEDC763468D3B3905AE7AC96BA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft
Manifest number:          06F7
Signing time:             Fri 31 Jan 2025 14:00:10 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:10 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:10 +0000
Files and hashes:         1: 1YffucAnrX0zrPGVUVBeyKH78tE.roa (hash: F+0MkZW1rwniUkgJEFMqZDUVPzIQlWc77ANUG11yVk0=)
                          2: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: RoR8LgxUKKXrSG+u7wXlJZBqbF9CCvngEUcDjaD7S/w=)
                          3: HHgp5sq5yc4_sgJa6AXu1wOFQNM.roa (hash: 7azvHrY82JhsqK3mxuoAki0dX0VXyY18Oolw0K+QPEw=)
                          4: QIYUcsbQNAYJ49MS9GSzg6HzMws.roa (hash: 25Ipjti12DAizEBm/x19xImh3kKTX0L8ySHToWXRDaw=)
                          5: b6ZEK46tBFQpFeGihP04dAsRVEs.roa (hash: QgioZFeGRbfakufTGnBIdfmvDS/FUhl+3OYWyWgTaL4=)
                          6: dntaOaxuIDGd8pI8wGTFAJRgyN0.roa (hash: ZmPkwqzAaYGLrLg5+RqVjoLEOwPFE1N2kmesXzCCUwI=)
                          7: pM8VKNSiqXyxvrYM2CF2U0Iw0pw.roa (hash: fs4sKC29dVzpn86XWfZbe24a1J4GrvjTCH4XsQbkw6c=)
                          8: qQrVFVU2zYEeKI_c1sPfgRBsdws.roa (hash: Q0Q6+jTPsyoLSIpvRXxP/rur4NZVUawp72Ly9Y4IL/A=)
                          9: tstTYn_D9Pn-4nRlBfI2UB_WSGg.roa (hash: ZjiObePgXbEPhVg4yY+Q8sRWmDFO/c82OdQ5TNgpPAM=)
                          10: zEb6SCNh9IA2ZcmgZWwsmTznbFk.roa (hash: tgHdlVCEN4GvD5zc3JRTYHWhACpqWoQ7O4VCFRbyik4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:78:ce:dc:76:34:68:d3:b3:90:5a:e7:ac:96:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
        Validity
            Not Before: Jan 31 14:00:10 2025 GMT
            Not After : Feb  1 14:00:10 2025 GMT
        Subject: CN=2307d45837d2524bc452aa08d5e9074b1c830931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:e7:e1:bb:a8:8a:f7:ce:48:00:69:cc:14:9a:
                    13:1b:bb:e5:70:4c:c1:b2:33:e8:10:71:da:20:03:
                    2d:bb:57:42:e0:6e:f4:2a:49:fc:5a:57:bf:0d:1f:
                    65:33:3a:18:cc:2b:79:2a:f1:35:79:ef:61:f1:13:
                    28:13:c0:a2:7e:a4:25:a3:6c:0b:7d:6b:45:8d:bb:
                    6a:ce:d1:51:40:36:c6:8f:57:2c:e5:26:94:2a:82:
                    ac:c6:57:6e:c1:bc:49:9c:59:dc:a8:9f:57:cf:7d:
                    34:ec:bf:de:21:8f:aa:90:5b:26:78:34:70:35:12:
                    ae:2c:d5:2a:61:60:5f:98:4c:16:aa:5d:76:cc:bd:
                    7c:83:c6:53:20:e4:b7:76:32:a8:7a:04:76:0b:d9:
                    cf:fc:98:47:4d:d1:22:4d:39:f7:d5:22:df:ff:84:
                    d6:03:f7:89:21:0f:13:e5:a9:56:24:13:d6:5f:99:
                    9e:76:3a:fd:38:c6:ca:c0:55:d4:61:d5:54:76:71:
                    0e:a7:be:ce:fe:1a:96:2b:83:eb:32:c6:27:62:74:
                    1f:51:38:39:cc:f5:7b:d3:22:e4:4d:da:71:18:87:
                    e8:60:82:ba:bb:70:82:ec:4f:e4:69:3c:55:c1:bd:
                    6b:fa:c3:a2:d6:40:83:4a:35:a9:45:10:6d:e3:56:
                    2d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:07:D4:58:37:D2:52:4B:C4:52:AA:08:D5:E9:07:4B:1C:83:09:31
            X509v3 Authority Key Identifier:
                keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:4b:49:c6:fc:41:5e:75:4a:a4:27:29:c4:b7:40:d5:30:f3:
         c4:4a:0a:9c:7d:e8:a0:6e:57:bb:44:db:40:47:09:e8:be:78:
         7e:aa:19:38:6c:ec:a8:04:7c:f2:98:f6:9d:da:3c:b0:69:7e:
         14:54:83:67:2a:44:9f:10:14:98:a1:e4:ae:87:a0:bc:66:90:
         e8:c3:c6:04:71:f9:fa:b0:aa:f0:c2:d8:b4:23:6e:f1:4c:3c:
         28:e9:73:d2:f3:4f:f1:72:3e:ec:56:f7:3c:00:80:60:1a:6c:
         95:7c:4d:69:09:3c:e6:aa:01:7f:15:e2:db:b7:1a:35:a6:fa:
         b3:c9:50:8a:ec:d8:04:86:e1:2c:e6:15:d6:80:b3:0f:c8:75:
         f2:35:29:5d:53:e8:d2:17:dc:ff:ff:23:2c:db:f8:0b:e2:5d:
         79:14:15:1b:bd:f7:ef:b6:ce:42:f0:e8:63:9e:9f:68:e3:47:
         71:40:9f:e2:61:02:fd:67:f4:86:7e:b5:7f:9f:71:7f:41:8f:
         be:a9:d4:3b:15:ac:75:11:47:95:ca:13:a3:fa:55:e2:89:81:
         8d:81:30:52:68:22:b1:f5:61:4f:a8:28:52:9d:f2:95:56:29:
         54:ae:f0:69:cc:b1:a0:da:51:11:a4:22:99:8d:1f:66:dc:26:
         20:97:af:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----