Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
File:                     xqJJoOrNiry-oNgu9xAW04bo75Q.mft (raw, json)
Hash identifier:          Fnfc09bN7LLPFTivEQDVegL/Rdi1mpibxFTyJjbFzKw=
Subject key identifier:   2A:FB:1D:2D:93:41:EB:65:5D:B2:08:0E:AF:77:D3:05:F2:9E:F0:07
Authority key identifier: C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94
Certificate issuer:       /CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
Certificate serial:       0194BCE0947181E0B08AF730FBDD0EB9A705
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft
Manifest number:          1434
Signing time:             Fri 31 Jan 2025 15:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:22 +0000
Files and hashes:         1: 5zc-Crb5aoCnZJgW8FLSKZdyvmQ.roa (hash: 2NGAlI2hdHDlD8sS8ypuBUMUFfaks46LhBx0UYSSPaA=)
                          2: LLhwUpHqz22GnC5TEmimdFlrtqk.roa (hash: fvLKEFRwIYrK/dNIazKMMzJzXGAsDgMXq4phPeziOkU=)
                          3: MqhH7LZrBnXXGBOARTaALjBOu0k.roa (hash: eb5e3IYtX1JLVkPpTH90MSfTGSJlQRW4w6AkJQsqHDE=)
                          4: P19E_mZ30tdEHCoKWD_RBelIVm8.roa (hash: wn50ZQD7mmlSVGQuWKsydCfGSzOAX4sma0GjvM42Xlc=)
                          5: TsuT9Vw01G7XqqTGmTLgG8Nw8uM.roa (hash: ibCOP7I9k1NxSVR0Ud+oed1vqdJZQQbZepYSXJmVuOo=)
                          6: b_Rjl7l5s2ruXfIZC3d6OBIlvjw.roa (hash: RN1eBvJ7M9cQIHDZtgB/+TlsTuYLflAWSHeZCPPxyMY=)
                          7: xqJJoOrNiry-oNgu9xAW04bo75Q.crl (hash: QplDr5dr++b5K5PfivKyi4faIt/fiSxKx4ZEax+idGQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:94:71:81:e0:b0:8a:f7:30:fb:dd:0e:b9:a7:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6a249a0eacd8abcbea0d82ef71016d386e8ef94
        Validity
            Not Before: Jan 31 15:00:22 2025 GMT
            Not After : Feb  1 15:00:22 2025 GMT
        Subject: CN=2afb1d2d9341eb655db2080eaf77d305f29ef007
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a6:4a:30:19:e6:43:d8:58:e0:bd:0f:c7:3c:
                    04:9d:36:a5:8b:68:54:d4:6c:ea:ab:97:37:ad:d5:
                    06:62:ad:65:3c:44:53:3d:76:da:30:f3:70:a5:0d:
                    96:bf:2e:5a:42:6f:12:2a:6a:15:ef:5f:b1:3f:08:
                    6f:20:50:62:da:98:2b:b3:2f:f2:d7:61:dd:e3:50:
                    11:b0:1b:57:30:8b:91:62:d4:6f:09:c0:82:b9:6b:
                    c8:1b:9b:f6:98:5a:ea:66:ad:a4:23:bf:00:d4:74:
                    5e:e9:88:49:0f:ff:9b:76:32:ed:d2:11:d5:6c:86:
                    56:00:39:c3:e8:23:b6:5f:28:77:14:2d:b5:8b:49:
                    54:51:97:4e:a2:f5:41:c1:1a:b6:28:ab:85:61:1f:
                    93:4d:5b:9d:86:70:ff:80:84:d9:bf:95:e7:49:6f:
                    58:58:af:c0:ab:9a:ab:c9:8d:a8:cd:7c:74:f7:0f:
                    18:4a:f3:e1:30:e4:e9:cc:3c:cd:73:b5:95:66:71:
                    a2:0c:cb:03:cd:ea:1e:01:c0:d0:d5:73:ec:f2:6f:
                    1e:39:e9:b6:99:72:1c:4f:0e:91:68:ee:b6:85:71:
                    6a:d7:0d:d8:00:c3:2c:8d:23:cb:87:b8:5f:80:2b:
                    3e:c5:4d:bc:ae:5f:b1:82:52:e8:c2:4f:c8:ea:c9:
                    10:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:FB:1D:2D:93:41:EB:65:5D:B2:08:0E:AF:77:D3:05:F2:9E:F0:07
            X509v3 Authority Key Identifier:
                keyid:C6:A2:49:A0:EA:CD:8A:BC:BE:A0:D8:2E:F7:10:16:D3:86:E8:EF:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xqJJoOrNiry-oNgu9xAW04bo75Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/30f186-90e2-4ca6-917e-21057d228d05/1/xqJJoOrNiry-oNgu9xAW04bo75Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:5d:47:45:cf:ea:b9:49:6b:11:d3:a6:68:89:16:5b:57:8e:
         85:0a:75:ed:eb:98:19:37:b8:53:2c:25:8c:ed:fc:9b:df:8d:
         49:28:5a:32:0a:c8:16:43:ae:e0:27:b5:85:c8:e7:78:74:31:
         e5:c5:58:a8:ae:88:a6:77:36:da:82:28:f9:59:71:d3:69:d7:
         ee:e7:14:73:8e:b5:13:9f:15:d4:f7:12:4c:53:d6:42:53:6f:
         3c:c5:d0:c0:cf:ea:f3:22:26:f8:09:8e:7c:00:ac:03:82:e5:
         49:4f:ce:3a:07:16:7d:f5:4f:21:5f:67:81:f2:04:5d:50:ab:
         03:63:b1:08:16:ef:b2:f8:90:04:62:96:d9:97:b3:75:4b:a6:
         d2:fc:9c:71:b8:fe:49:ce:b2:4f:c9:cd:7a:ed:4a:3d:15:68:
         e0:b8:42:10:d8:31:93:7c:3c:80:42:9e:17:a4:ce:9c:b0:7e:
         93:14:58:63:bb:68:9b:dd:72:1e:a1:85:02:f5:27:9d:ba:f3:
         a3:23:c1:3f:bd:f2:50:14:6b:a4:34:a7:6f:b6:ac:9f:92:e7:
         5a:62:73:e8:ab:57:b7:28:90:63:b3:dc:6d:28:8a:37:9b:f9:
         01:64:c7:4d:1f:4c:17:07:9a:44:63:a7:8f:cc:ed:c3:65:c3:
         9c:30:b6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----