Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
File:                     NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft (raw, json)
Hash identifier:          cMi1CdRfx/nzayxjNLkJk+c6LwT02YBvdQ6j08r2Pc8=
Subject key identifier:   67:D9:C1:BA:37:28:82:61:9B:DD:FC:EF:43:1F:97:5B:4C:D3:3F:BA
Authority key identifier: 35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18
Certificate issuer:       /CN=3545a7200164912041bb931efb1feac123b43a18
Certificate serial:       0194BD856127FC0EF8C76C310C17E0831784
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 18:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:22 +0000
Files and hashes:         1: 8s1U0KmUYb897VvjMdVaiCCBr8Y.roa (hash: 5qEC8e4y3KYPBzPpD5dv/300fB0lSnNjSuXLoow+Q8w=)
                          2: LaYkRMNeto2OFZ9VBnU48w_HGgs.roa (hash: 16B1JfqcXDvmz5pVWUS+KsHYpQRrCgD9R9Tg6uXacIA=)
                          3: NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl (hash: /I94BOJhL215/rRIe0aIqaCXWEVFLMmy/GRz1ZoH4Yo=)
                          4: W8oJrry2382XyDpwYu9d1fRM57k.roa (hash: vgOtreWyL8SSvp1wiImWd0ZzLXQJtP4n+ctgbIbJd6I=)
                          5: ZPnSp5toQpthOZvn7vrTi1PIJ0A.roa (hash: 2xJoiopsp/aP4IfMiv71h2CCh2maxmce9cHqGdAd1jM=)
                          6: hDuQO-2O-6Lo8qgrhYqNM0G4P24.roa (hash: WUDxmKQLeVQHlfqkPeKYvZqVqvTuBp11Xfwh/S2zHnQ=)
                          7: rJESdqv17knzJ4wNzfBk8WWWnw0.roa (hash: BdHgAA5eA1A53dV1mMcPmgdF0S7eP4oFR6WHvpTEZ/k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:61:27:fc:0e:f8:c7:6c:31:0c:17:e0:83:17:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3545a7200164912041bb931efb1feac123b43a18
        Validity
            Not Before: Jan 31 18:00:22 2025 GMT
            Not After : Feb  1 18:00:22 2025 GMT
        Subject: CN=67d9c1ba372882619bddfcef431f975b4cd33fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:79:46:d4:89:08:e2:52:88:d8:28:84:27:8d:
                    6e:47:2c:b7:eb:0e:84:ac:2a:fd:fd:e0:4a:d7:54:
                    65:53:35:72:9c:97:66:81:68:3d:31:27:1d:23:4f:
                    06:52:b9:83:26:b2:ff:e6:6b:d4:02:5a:82:b0:6d:
                    ab:73:9e:4c:fc:ba:02:a7:a1:6e:53:ef:78:0a:fa:
                    1b:cf:30:b6:6f:f0:0f:dc:43:88:cc:7e:fa:86:d5:
                    73:3a:9e:0f:73:c9:27:2e:9c:ba:30:9b:5d:fb:b2:
                    ef:58:56:84:9c:dd:5c:00:b3:cb:35:a1:9e:a1:f4:
                    bd:82:36:72:9a:83:44:8e:a6:20:d3:2a:31:df:7f:
                    15:c9:80:a5:23:fb:cf:b7:51:04:9a:4b:98:b3:e8:
                    6c:ed:f5:9e:d2:df:d9:01:cc:a1:bb:6b:b2:e5:73:
                    80:8d:63:53:c6:9b:a5:fe:bc:99:28:1d:46:55:24:
                    23:62:b8:b1:75:14:34:8b:e5:c1:52:21:a6:b4:b3:
                    d3:75:a2:90:52:a4:5a:b5:85:57:75:97:c6:e0:ea:
                    03:d2:84:2d:c7:bb:2b:db:11:65:07:29:77:af:f3:
                    b5:9f:8c:d0:d4:6a:ed:2f:a3:27:bf:d7:53:13:18:
                    d3:83:3d:45:26:aa:72:ea:b4:57:16:ba:b5:51:38:
                    55:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:D9:C1:BA:37:28:82:61:9B:DD:FC:EF:43:1F:97:5B:4C:D3:3F:BA
            X509v3 Authority Key Identifier:
                keyid:35:45:A7:20:01:64:91:20:41:BB:93:1E:FB:1F:EA:C1:23:B4:3A:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/59c4b8-87f4-4f2f-a449-aabb062e40db/1/NUWnIAFkkSBBu5Me-x_qwSO0Ohg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:20:62:ec:90:2a:f7:ab:b4:04:a2:2b:5e:54:14:31:bc:bd:
         db:8e:f1:da:be:fe:ff:23:ce:99:7b:59:a9:62:dc:e8:8e:4c:
         55:8c:8c:9e:d3:06:d2:ee:c0:2d:d7:ab:76:84:a0:99:40:ee:
         65:f8:a1:69:d1:ee:c6:a8:a0:74:c7:7d:a9:60:8b:ad:7f:d3:
         6b:86:4d:cc:f1:36:d7:2d:33:16:43:95:38:ea:4b:4c:09:c8:
         9b:7d:d7:92:aa:3e:9f:15:45:ba:08:03:40:89:67:3d:32:9d:
         f2:48:69:2e:09:11:e8:d0:07:f9:80:b6:f7:51:c2:12:00:18:
         f5:37:93:f7:96:d9:7e:92:d7:f1:11:de:30:83:2d:e3:cb:9d:
         1b:0e:5c:47:d2:3b:ac:8d:42:86:9d:c3:f6:2b:4d:82:cc:5d:
         bc:22:a1:4e:5d:a0:f8:e3:cb:fe:82:4a:e3:7f:53:0c:38:d0:
         f2:f9:5d:c2:78:e6:4a:e3:e3:14:a1:00:53:47:bb:24:a6:8f:
         ac:f4:4a:e4:ef:4c:18:7c:6d:24:19:fd:43:f4:5e:e3:ee:c1:
         2b:87:3c:52:3e:0e:6c:77:c7:71:45:b4:72:5a:ce:b8:c1:bd:
         9c:ab:55:d3:29:81:9c:25:1a:52:6f:dd:6d:6a:2d:6c:4a:52:
         a2:4e:11:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----