Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
File:                     kpWx8dzY-mrB73iCeMSJ4V6srnA.mft (raw, json)
Hash identifier:          ur1mPRo01zEwCnlMFA5M1gm61VGo4LoNDE3I5QpBLNE=
Subject key identifier:   D9:FA:41:F2:15:80:60:E8:28:03:46:7A:9A:2C:2E:A8:81:A8:ED:80
Authority key identifier: 92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70
Certificate issuer:       /CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
Certificate serial:       0194BCAA04B3DE0C3C61E294B674653ECF96
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft
Manifest number:          143D
Signing time:             Fri 31 Jan 2025 14:00:46 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:46 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:46 +0000
Files and hashes:         1: 6npgTxI5Fj08aQhqLUstesa74qU.roa (hash: enkyXzDFZ9cSJQ7fnIhqclT0EtGx7IlDRG5jg6xN4Mk=)
                          2: NbGWG3NpLbVIkL-qD8t3emMT-Rg.roa (hash: ypnJ9qrdnarxSUfM3JIVrL+uxFcZGbRNMRTNO5cuWJE=)
                          3: PbFbHAKPLxJYS1QXxrsUxtB4s-o.roa (hash: WcV8ew9W91HI/E1+ymAnsmr3gyEWsOwlvTaJN4weKdM=)
                          4: _kWdENGz02qFbJgsVzh0I7ssKSM.roa (hash: CgY6OFKCaRvJTJIO/HpUioGU0QKLzsGxcD6MJClnWYM=)
                          5: abXbinT-08Wb1H3rBURYIWd5ePc.roa (hash: RW1C7jSfBNsIegUEmy7wEGfJv9gXQvKtk6KvPrEKQ5c=)
                          6: kpWx8dzY-mrB73iCeMSJ4V6srnA.crl (hash: 8K3yKSsQylbCKXGwPOPv1VDhGLXYZjuzfEbZT79Rcc4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:04:b3:de:0c:3c:61:e2:94:b6:74:65:3e:cf:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9295b1f1dcd8fa6ac1ef788278c489e15eacae70
        Validity
            Not Before: Jan 31 14:00:46 2025 GMT
            Not After : Feb  1 14:00:46 2025 GMT
        Subject: CN=d9fa41f2158060e82803467a9a2c2ea881a8ed80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:03:78:3e:57:4c:b3:fe:fe:88:f4:86:ff:
                    7f:2b:cb:bf:b6:a0:b1:55:1d:dc:21:5b:63:bc:27:
                    78:2e:51:2a:02:36:8e:2f:5f:24:87:99:1e:0f:31:
                    88:4f:74:c5:1f:b0:b7:71:b8:a8:ba:e8:ad:9e:60:
                    a7:fc:aa:dd:fc:d6:0d:6c:1f:02:15:4e:32:46:8a:
                    5e:c8:1e:98:68:eb:52:9e:5a:94:c7:4f:dc:48:9e:
                    81:6f:76:62:e6:12:86:d2:e6:c1:ff:b5:9a:bc:53:
                    30:8b:b3:64:16:89:f8:bd:4d:46:03:fc:18:14:9e:
                    65:fd:a0:23:fd:2b:a6:a5:1e:53:bf:67:51:6b:e2:
                    ad:58:5a:4d:30:0d:dd:22:6f:b6:1f:14:f0:65:09:
                    f1:a4:55:02:e0:d0:7c:61:fd:81:c1:a7:f5:8a:34:
                    09:74:51:9a:b6:ca:04:bc:19:4e:9c:8f:89:d8:f8:
                    18:29:d5:3a:7d:20:45:91:8c:b0:83:89:7e:29:26:
                    c4:c0:84:ef:5d:96:16:08:ad:8b:61:fb:4c:af:24:
                    cd:17:65:dc:37:ff:a9:97:25:11:bb:bf:45:8b:05:
                    ee:50:94:fa:03:9b:55:15:1e:a3:05:ca:82:7a:70:
                    af:2f:29:58:39:e6:7f:78:0b:05:05:6e:95:11:60:
                    90:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:FA:41:F2:15:80:60:E8:28:03:46:7A:9A:2C:2E:A8:81:A8:ED:80
            X509v3 Authority Key Identifier:
                keyid:92:95:B1:F1:DC:D8:FA:6A:C1:EF:78:82:78:C4:89:E1:5E:AC:AE:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kpWx8dzY-mrB73iCeMSJ4V6srnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/0fbc2e-fd88-4df2-aae3-9eb40cc5f68b/1/kpWx8dzY-mrB73iCeMSJ4V6srnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a6:ae:68:52:1b:b4:9d:74:9f:fa:69:ce:23:02:41:44:ba:
         fe:c3:f4:fc:55:e8:73:15:ac:d0:7a:e7:3a:86:af:04:d3:a4:
         46:76:7b:37:ef:5b:52:26:e9:de:38:13:1e:6f:51:2f:8a:c6:
         a1:c0:9d:de:42:ee:02:f3:e3:db:2e:4c:dc:23:a0:d0:21:f2:
         92:2e:8e:8c:d9:b1:ab:0b:59:16:ed:08:2b:fc:dd:84:2c:0a:
         58:0f:f0:fd:c4:61:fa:0e:5b:b0:10:03:67:3c:c6:b3:f4:59:
         3c:33:7b:f1:f1:e7:6d:ab:b7:e5:18:58:49:5f:da:12:e6:05:
         b2:5f:02:79:69:95:0a:ec:e2:8d:18:ed:00:a2:2c:1a:72:3f:
         8f:a1:e4:eb:05:89:ba:4f:26:9b:4d:f3:dd:b3:37:0e:b7:6e:
         55:21:f8:30:9f:99:5f:e4:c5:ae:97:60:b8:9c:5f:f8:69:c5:
         40:87:39:09:e1:e6:76:f7:11:e0:a9:d1:cf:0a:a2:80:b9:f9:
         5f:09:fa:e3:40:5b:6f:66:68:29:b2:e5:c3:a3:d4:3b:1b:06:
         d8:6c:9f:93:e4:ba:9d:9a:e4:c3:03:f7:b8:60:d8:4c:0c:fd:
         9e:ff:1a:59:72:16:17:be:5e:03:45:f6:11:a0:0b:9e:ba:48:
         1a:a2:85:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----