Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
File:                     o2dNWISlCoTgfb32eY3cu5zCAy4.mft (raw, json)
Hash identifier:          H+MizHkFZR+yMuACSbWeQSFRjGWCieNfHOL/Y34WRBs=
Subject key identifier:   61:E1:96:0B:D5:2C:3E:49:9A:8E:A1:05:72:47:02:BA:01:28:C5:26
Authority key identifier: A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E
Certificate issuer:       /CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
Certificate serial:       0194BC72957B4794BE6B2F9703584B470803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft
Manifest number:          117A
Signing time:             Fri 31 Jan 2025 13:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:13 +0000
Files and hashes:         1: DsyqwESYp4bmMSs9uCFJzZRR7bA.roa (hash: E3RC3t5fdJdmxwazPUOCHAze3MC/dZe6+l07MFZq2yo=)
                          2: SFuqJn2DzpiEwmJBsRfw9_GaM2E.roa (hash: +vZ9yeoCyMalYsdF7K+e902XvcsekiSx1I5xtnBl3PU=)
                          3: URz6VBEBARWru2pwN9on0fqVD_8.roa (hash: 9b/lI/zwvoC+7Oni/t6kARR6u3owQnT+bWIMpu3veFA=)
                          4: lab5J5RcCtas1L2Y7YMr6FyHoxc.roa (hash: N6A8KQuXMFwbmov+/kvLYo4potH2uakqtbpTY9DXAJc=)
                          5: muNpJENCGJ0J_DTMRNj99Wufntw.roa (hash: rlTQFNlHRqLDCrFKsl2Oqf+npVqRQ0yuhfH2dviuMA0=)
                          6: o2dNWISlCoTgfb32eY3cu5zCAy4.crl (hash: xFYEvXtoAWPgS/nB+zjwE0nnw7odkbo0qESTLJogblw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:95:7b:47:94:be:6b:2f:97:03:58:4b:47:08:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3674d5884a50a84e07dbdf6798ddcbb9cc2032e
        Validity
            Not Before: Jan 31 13:00:13 2025 GMT
            Not After : Feb  1 13:00:13 2025 GMT
        Subject: CN=61e1960bd52c3e499a8ea105724702ba0128c526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:7c:d8:cd:69:57:76:22:01:06:93:81:3f:
                    26:c1:a8:ca:de:60:52:71:6a:69:3e:ca:ac:a4:54:
                    1c:e5:08:a9:66:cf:f4:ed:2b:e5:ea:a2:75:26:34:
                    48:15:e1:68:26:30:6a:81:37:ea:89:c1:76:45:54:
                    1f:cf:4c:29:29:ad:a9:10:54:40:7c:49:e8:da:34:
                    02:77:a3:a0:56:e2:36:39:9a:8f:28:e2:bf:0a:b2:
                    28:8f:61:d7:f9:09:92:f9:fa:e7:83:e5:c2:ff:28:
                    a8:27:36:1a:db:2f:63:94:9f:6d:ac:c6:a9:1b:ab:
                    93:6b:29:6e:bd:65:d3:ba:07:35:9b:e9:a0:84:16:
                    18:3a:52:77:2c:ac:31:68:dd:76:de:df:60:63:ca:
                    8e:86:73:fa:ca:ec:8d:0a:68:a5:8d:ab:04:d4:1e:
                    f3:ec:96:dd:78:6f:ad:59:a7:c8:4c:c4:4d:c5:3e:
                    a3:0b:18:f9:9a:e0:0b:05:2f:ca:cc:6b:d4:3a:e6:
                    d4:0c:bc:fa:51:70:49:ef:d3:6d:bb:a6:04:10:af:
                    bb:ba:16:e3:4c:fd:e9:e7:56:2d:b9:e5:12:a2:d3:
                    d0:e5:a4:89:08:44:6d:21:8b:a9:f1:b3:34:3a:d3:
                    08:1f:f7:40:fc:51:ed:de:95:de:65:b5:d8:44:02:
                    02:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E1:96:0B:D5:2C:3E:49:9A:8E:A1:05:72:47:02:BA:01:28:C5:26
            X509v3 Authority Key Identifier:
                keyid:A3:67:4D:58:84:A5:0A:84:E0:7D:BD:F6:79:8D:DC:BB:9C:C2:03:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2dNWISlCoTgfb32eY3cu5zCAy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/806532-54e9-4b49-b8a7-9e220f04a901/1/o2dNWISlCoTgfb32eY3cu5zCAy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:5f:3e:fd:57:69:23:fa:d0:92:0e:12:97:c1:d9:bd:78:49:
         6d:95:f3:3e:64:4f:5d:ff:32:38:21:73:10:95:77:9f:82:80:
         38:12:fd:90:f5:18:75:02:49:db:37:22:40:32:11:ba:01:81:
         3a:be:ea:86:0e:44:c2:db:8c:09:fd:cf:57:f5:8a:ef:9f:bd:
         73:f9:03:f2:18:8a:c7:be:bb:6e:d0:6a:ba:39:1a:5f:eb:15:
         20:55:14:4f:7c:ed:0d:70:ff:45:d2:30:b0:a4:f9:c1:ad:7a:
         c0:4a:39:be:25:89:29:25:d3:5d:bc:8b:b3:62:97:d2:3e:52:
         64:83:b7:40:48:69:df:26:96:86:52:8f:b1:09:57:33:3b:c1:
         0a:c7:14:2d:75:47:c7:20:82:af:0e:59:0f:77:e2:d4:59:8b:
         06:0c:89:8e:55:b6:43:a0:78:f9:28:0c:a4:ef:7c:ef:a9:0c:
         45:92:63:73:05:98:7b:10:02:23:32:8c:b0:6f:4c:1c:ad:66:
         b5:94:ca:3e:6b:b6:24:46:4c:3a:b0:7d:75:1e:eb:ee:8d:f4:
         d3:1f:0b:0d:fc:41:23:13:09:19:bd:04:e9:6a:71:ea:1b:8b:
         6d:0c:03:7b:57:a0:59:fd:a1:68:56:bc:c5:00:8e:56:e6:e8:
         e0:2e:db:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----