Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
File:                     xLG0WKv3l97cxmHlSmhfZRg0tdE.mft (raw, json)
Hash identifier:          G4dzMjxWHalgGG9JqN532q96qMahd7kPE4od4xmqdPI=
Subject key identifier:   F9:F8:E9:0A:FF:89:55:07:8D:B2:F5:3C:60:21:EC:A1:AA:58:93:20
Authority key identifier: C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1
Certificate issuer:       /CN=c4b1b458abf797dedcc661e54a685f651834b5d1
Certificate serial:       0194BBCDEDCE323F72BE9315A17F2692E0C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft
Manifest number:          1131
Signing time:             Fri 31 Jan 2025 10:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:22 +0000
Files and hashes:         1: 2O7hTeTBTYQlXrHUGjT-esuiTyY.roa (hash: DN3/NgDDrumPZHYXXX/T0l7uMFZxt8+Z9FjDhPflTwg=)
                          2: QsHNthgc9L7fJ_2Fo_g-CqUIr74.roa (hash: 9xya8h6lnbe7gVjWBZEopxxvdjqjl2fFO+ULpdjenyw=)
                          3: kSQmmeExWfprcCDLfHI_OYJk0ms.roa (hash: 4gXw5KLNPGHoJR1QDpTIZ93gsLn9MiktkPpQtwbbYxQ=)
                          4: xLG0WKv3l97cxmHlSmhfZRg0tdE.crl (hash: yeGVDKMlA3XILI+Qp/E7vJA2t5ajZaXp8rmKsFx94CU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:ed:ce:32:3f:72:be:93:15:a1:7f:26:92:e0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4b1b458abf797dedcc661e54a685f651834b5d1
        Validity
            Not Before: Jan 31 10:00:22 2025 GMT
            Not After : Feb  1 10:00:22 2025 GMT
        Subject: CN=f9f8e90aff8955078db2f53c6021eca1aa589320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0f:31:0c:7b:48:4e:7a:bf:9a:b3:fb:85:10:
                    49:8d:fb:30:88:da:db:7b:0b:34:d3:ec:ef:e3:18:
                    6a:dc:5e:e9:c0:b2:de:11:76:bd:d9:6b:95:15:c6:
                    c4:c5:e1:dd:1a:f4:56:f5:de:aa:f5:a5:1e:ab:3d:
                    83:ee:d4:62:01:0e:4f:90:73:62:da:c5:11:99:b4:
                    ea:35:83:e3:a5:32:84:92:af:eb:61:17:16:85:a1:
                    53:5d:7e:c0:f8:48:bd:42:db:a0:eb:ca:12:dc:5a:
                    30:ba:a6:f3:ac:67:cf:31:71:dc:1b:77:07:67:98:
                    fd:14:47:7f:49:1c:d0:eb:20:75:95:cf:f4:50:de:
                    a2:87:fd:bb:97:d0:6b:85:c7:e3:c6:8f:c7:4c:17:
                    77:fb:c8:1a:87:54:9e:b2:d4:83:53:90:a5:35:1f:
                    26:43:67:35:81:ab:e2:40:39:f1:d7:cd:a0:0a:30:
                    5b:ef:bf:27:46:e1:6a:58:78:40:02:29:3a:ea:b7:
                    06:5b:dd:32:e1:4d:c4:1e:0c:af:7d:6b:62:af:0a:
                    e6:58:8c:11:b4:80:6b:1e:0d:8c:f8:89:89:d7:82:
                    1d:a3:6f:55:fa:b3:bf:20:66:45:6d:fe:8b:ee:37:
                    8d:d4:fa:05:ac:c4:6e:ec:02:9f:e1:0f:c6:39:74:
                    1e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F8:E9:0A:FF:89:55:07:8D:B2:F5:3C:60:21:EC:A1:AA:58:93:20
            X509v3 Authority Key Identifier:
                keyid:C4:B1:B4:58:AB:F7:97:DE:DC:C6:61:E5:4A:68:5F:65:18:34:B5:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLG0WKv3l97cxmHlSmhfZRg0tdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/260e24-2040-4a5c-92cf-ec58a3125ee5/1/xLG0WKv3l97cxmHlSmhfZRg0tdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:14:3c:35:36:ae:90:a9:ae:30:76:70:f1:96:58:71:c2:77:
         28:d2:fe:b3:05:68:75:b5:cb:99:66:7e:3b:6b:ee:9c:44:c0:
         fd:32:04:d5:6a:df:9b:8c:ca:66:f2:14:b5:c0:a5:6f:bd:4e:
         fd:cb:e4:3b:3e:5a:69:b4:be:5d:50:c4:7d:3f:08:82:9e:6c:
         a3:47:e8:91:11:9d:9f:68:ee:85:f8:2e:91:3d:39:29:d0:a4:
         d0:f5:14:ff:57:73:76:7c:70:be:67:23:7a:8a:29:9b:e7:f0:
         b4:85:7a:cd:7a:80:e2:1c:b2:d8:bf:ff:e9:b2:2c:d7:6c:e9:
         55:08:36:68:00:5c:69:b6:a2:8e:26:cd:f2:97:b7:97:b9:dc:
         6a:c0:d8:62:73:a1:52:fc:b1:ae:8a:2e:2f:8c:27:f6:7f:8e:
         39:2d:49:a5:07:5d:db:8e:29:93:b0:25:2b:88:21:1a:73:8b:
         84:e3:81:ea:de:06:3e:f1:7d:d1:04:9e:33:5f:58:8b:c5:c6:
         13:ba:9c:e0:76:9f:cd:17:a5:0e:a8:3b:b6:20:5c:df:3d:74:
         40:f0:77:02:71:c3:63:05:37:da:db:c6:1e:7b:e9:90:ac:54:
         8c:e4:31:6d:d4:14:1f:a9:15:a3:85:d7:39:c5:c5:7c:61:02:
         80:ee:3b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----