Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
File:                     ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json)
Hash identifier:          oAw/MN6BBX6vcxChXDK5rhKiMoezmmftCecbmMpUG+s=
Subject key identifier:   30:55:9A:66:E4:4A:06:94:CC:14:17:CC:02:89:40:10:FF:DF:31:7D
Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3
Certificate issuer:       /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
Certificate serial:       0194BCA9DCD34EAA49A291C05BE059A67D34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft
Manifest number:          12EB
Signing time:             Fri 31 Jan 2025 14:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:36 +0000
Files and hashes:         1: 1-Eladd6sj8Y7vq1mtW5h6ASM_tM.roa (hash: auxhruGljCxtN9ijkL9KZ/K4C+RcNKrzhKvUSRg/9HQ=)
                          2: 1-dpIOgQrHNlMUsxt6C2Ztf5nfuM.roa (hash: pCUJMhojWf39aVt/QyofbsbuGjc8Gizw3ZJ2MSqOsTA=)
                          3: 1-gUTUj2JpuChCvozdxCQFTR22DM.roa (hash: f/2CCyCRw0ujuPO8AP04nbSH6GVLpL5l8bdrrfS8KoQ=)
                          4: 7pYVLfxDyksCdUmiOhbgviOo3x8.roa (hash: QcPN759vJqixjDGU3gmMeZsCeSMWabiqP3hVma37vPU=)
                          5: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: v6hF8K+5hiGiLiycM062ajpqOuvBguyyfxKmRazWDWo=)
                          6: JgMZeAUanuTnCMO5W4WxtNoWnOo.roa (hash: BVGJrmWx20uZpeiVIuLqA9VCxnxpKFPgWew2DOU2kQc=)
                          7: Kk7xKrzHzx6qmDJI5CVBM_Sl474.roa (hash: m5FUWhJ54zbQwUlYkehhIiOw3x1SXokhdxGSIsx1B6c=)
                          8: TuhSGWpWiAR-_CuGAjKur_UHqfI.roa (hash: g694Dtf0skboCvcn1cXKy53zJxoz5Cd0t1C15ptQmrU=)
                          9: up2kz91cwewwgnJlTAK7oG41sQ0.roa (hash: G13dw6FzbNEstTZrAMoSOdOyFIJ5GaqKtbFPgEfYEY0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:dc:d3:4e:aa:49:a2:91:c0:5b:e0:59:a6:7d:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3
        Validity
            Not Before: Jan 31 14:00:36 2025 GMT
            Not After : Feb  1 14:00:36 2025 GMT
        Subject: CN=30559a66e44a0694cc1417cc02894010ffdf317d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:a1:66:6c:8f:70:98:ed:5c:58:64:db:bf:
                    f4:73:d1:6c:b1:2e:54:07:91:3e:92:d3:3a:35:79:
                    78:a8:92:5e:bc:fd:47:67:f2:68:81:be:c0:c1:84:
                    e2:7a:7b:44:5c:16:92:55:ed:ed:9d:fa:0e:2a:8e:
                    41:2a:04:df:7b:e0:6c:69:82:76:4d:3a:23:9e:94:
                    12:31:d7:73:79:03:4f:60:fb:44:9f:fd:47:75:ac:
                    2b:e9:a3:3f:fe:5c:c1:c9:ee:eb:04:8e:24:13:e7:
                    ce:d5:e5:6b:d2:4c:54:9a:a2:70:9e:74:fb:8b:a5:
                    8b:08:a7:b6:ce:0d:5c:96:ea:36:8a:74:fe:20:4d:
                    db:d3:b7:50:d7:8a:0d:3d:5e:31:fb:0b:ef:04:e0:
                    61:53:80:db:93:54:41:3b:bc:72:4a:a5:b5:37:67:
                    69:e6:67:55:d1:91:96:5f:0e:ac:18:8a:bb:6e:d2:
                    4b:dc:5f:7a:f6:64:b4:19:44:e7:22:5d:aa:49:cf:
                    22:7c:8e:65:12:39:7f:8c:3e:2f:20:83:58:ca:fa:
                    5a:8d:f8:6f:4a:b1:01:34:bc:18:dd:f4:55:a1:2b:
                    2a:f0:a2:4c:9b:72:bd:a0:7f:b4:db:9e:d2:44:f7:
                    a4:11:30:66:e1:11:9e:dd:c1:37:ba:b7:75:75:8c:
                    cf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:55:9A:66:E4:4A:06:94:CC:14:17:CC:02:89:40:10:FF:DF:31:7D
            X509v3 Authority Key Identifier:
                keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:48:a9:a2:3c:89:44:25:6e:c8:42:29:a5:b1:58:63:6b:ef:
         e5:a0:dd:bb:5c:d1:ed:20:f1:6f:ca:5f:54:28:33:e7:d0:9d:
         68:b3:71:54:b5:1d:b6:1a:b5:72:f7:d8:39:94:97:6b:77:47:
         e4:a0:00:9d:01:35:21:30:51:e7:e5:a6:da:cc:f0:df:21:37:
         68:6a:0c:85:85:6f:b1:12:d7:4e:87:cd:7b:a5:b1:8d:e8:f9:
         c2:1e:14:3a:84:16:f5:b5:bf:98:10:ee:6f:d5:75:04:24:10:
         c0:e4:54:ec:03:76:f9:f1:da:de:b2:0b:64:8d:79:67:cf:8e:
         89:57:81:c1:4c:8c:b7:a8:19:97:a8:63:d9:df:ae:8f:10:6c:
         8b:b2:c3:1a:79:33:74:45:1c:3a:a6:55:e5:61:2a:0c:d2:96:
         03:37:9d:85:be:2c:1c:b1:7b:04:b5:d3:27:95:d7:dc:b1:d8:
         b9:90:e9:4c:7e:dd:10:e8:ec:e9:04:05:2f:fd:f0:12:1c:73:
         1a:f9:04:79:5d:40:fc:5a:cd:e8:d9:4d:61:20:47:41:c6:fe:
         7d:36:11:7f:17:fb:af:0f:7e:f4:ae:73:0e:a0:af:28:e4:ad:
         b5:5e:82:fc:f1:c0:8f:1c:ca:b1:63:4e:05:24:17:ca:9a:cf:
         0e:a2:3b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----