Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
File:                     fU0ch5CpE-gyxzPf93je55EpcAo.mft (raw, json)
Hash identifier:          vqh/aTBPTLC+PxbpDQoVDpg6ebbT++ItOFSd1A3adP0=
Subject key identifier:   17:63:AA:FD:07:EF:9D:93:03:5B:E2:B7:12:CF:5C:85:0A:B0:AB:94
Authority key identifier: 7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A
Certificate issuer:       /CN=7d4d1c8790a913e832c733dff778dee79129700a
Certificate serial:       0194BC04D2EF1B62FA53D35A4902A8509256
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 11:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:20 +0000
Files and hashes:         1: KTueJxojN50dmJRK4T-lWfMfx34.roa (hash: MBpn+hP+nk2n4u5ubKswrO39Dq6jBss0XcQ2l50O4uU=)
                          2: P9fynBw8iFPWe2POj98vvDRaPtc.roa (hash: m8Rxo+QbvFH1YWY7cSkBLnzvBIux4jAWF3d5bVoDOqo=)
                          3: UPvQH8NqTEDPXNhWgpYWh0Lf6jo.roa (hash: XstlXZLlwubvWrcgmyQX4gAdUbjlGPeHGy1bUvhLT38=)
                          4: fU0ch5CpE-gyxzPf93je55EpcAo.crl (hash: OAlcD8mLajf8P9qmMz0h4kx/bvLk+c5oAqf8nvI/9yg=)
                          5: z2rex13X5_B3akG_9WMUZ3YUZ_8.roa (hash: FEf9INeCTnfvfEJYFLmPJ0rU6v2IfMIrs4GsjT+Av20=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:d2:ef:1b:62:fa:53:d3:5a:49:02:a8:50:92:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d4d1c8790a913e832c733dff778dee79129700a
        Validity
            Not Before: Jan 31 11:00:20 2025 GMT
            Not After : Feb  1 11:00:20 2025 GMT
        Subject: CN=1763aafd07ef9d93035be2b712cf5c850ab0ab94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:19:2b:27:49:59:fc:63:5f:b2:22:00:ae:f2:
                    12:6a:3e:5d:15:82:3b:4d:e5:e9:de:0f:1f:c7:17:
                    e0:4f:d5:12:99:9b:21:96:48:81:bd:ae:37:e4:6e:
                    38:bd:dd:81:e2:f2:f6:7a:14:db:71:c3:a7:c5:b1:
                    7b:4a:44:56:9e:d5:2b:bc:34:bf:12:06:b2:c9:f6:
                    ac:07:f8:c9:9d:84:fa:98:8a:54:d6:98:20:f2:30:
                    23:00:0a:15:2f:96:f4:93:e6:2c:07:35:27:e0:4b:
                    be:7e:6b:2f:59:9d:c3:7d:27:37:ef:00:53:97:21:
                    22:41:e6:8c:b1:c7:03:cc:be:34:31:e7:56:f0:4e:
                    f9:97:d6:e2:15:3a:24:07:49:fe:16:a5:2e:68:2b:
                    2f:9a:87:b8:9d:29:62:f7:d4:3f:f1:74:82:c0:5f:
                    14:8c:b0:aa:43:16:f8:b3:a4:c4:a8:52:bf:97:60:
                    27:73:c6:50:4b:06:a3:03:9c:ee:07:3f:7b:8c:47:
                    7a:af:90:47:71:d8:ef:fe:7f:9d:b5:a1:d1:f9:65:
                    15:84:6d:ff:09:15:e5:40:db:21:4a:8c:ec:59:d4:
                    de:ab:fa:35:1c:95:8e:02:12:b5:83:cf:e9:21:9a:
                    7a:e2:44:02:4b:28:1d:86:c9:5e:2d:11:e8:e1:d2:
                    c4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:63:AA:FD:07:EF:9D:93:03:5B:E2:B7:12:CF:5C:85:0A:B0:AB:94
            X509v3 Authority Key Identifier:
                keyid:7D:4D:1C:87:90:A9:13:E8:32:C7:33:DF:F7:78:DE:E7:91:29:70:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fU0ch5CpE-gyxzPf93je55EpcAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1c6180-9950-4ce8-811e-f8d662b96dab/1/fU0ch5CpE-gyxzPf93je55EpcAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:63:16:1b:93:f4:72:b9:f1:bb:92:a8:3f:76:6d:be:12:c9:
         6e:33:30:fa:7c:24:a9:1b:e4:2e:45:58:a9:fa:4e:06:39:fd:
         e6:bb:14:d9:66:cf:15:a5:95:0e:b9:7b:f0:e3:d2:ba:c9:4e:
         e1:10:be:5b:3f:3b:f0:03:7d:54:a4:97:93:5c:a7:9c:88:d3:
         98:e4:8d:39:21:46:e4:27:f7:0a:ab:26:11:13:a8:1b:00:d9:
         3a:ae:82:20:92:6d:4c:ba:5f:d1:37:6e:52:af:0c:58:0f:84:
         eb:f0:0b:d4:a0:89:09:a8:de:62:13:ae:03:f3:a7:84:6c:ce:
         57:b3:ea:44:f0:b9:ee:72:f0:c5:7f:0c:ea:92:87:59:3f:ee:
         b0:77:b0:a9:1b:e5:87:9a:8c:e0:ba:25:2a:63:ab:f5:64:15:
         2e:f0:b3:43:6a:b8:b8:5d:72:c7:b4:40:06:9e:d5:fc:28:bf:
         f7:3e:b4:4f:59:e5:eb:4c:24:91:57:ab:4e:89:e0:fd:3f:2a:
         f7:f2:62:87:6c:c4:ef:0f:f6:4d:84:00:64:59:e0:76:d1:98:
         54:67:78:5d:64:de:1d:33:31:3f:c9:60:ab:c9:56:aa:c5:2b:
         43:b8:e4:2e:38:2d:89:78:a9:87:6a:6e:b4:c0:78:9a:64:df:
         f3:76:62:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----