Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
File:                     61E1nJmJuWPpWUwZKcggNn3jIt0.mft (raw, json)
Hash identifier:          BkNJSYm5mHZGmIKyqTWrEdj3HyDQkipsIDzIQNDHzow=
Subject key identifier:   3A:6E:CD:FF:5F:B0:3E:FF:9A:C6:16:05:00:EB:D8:04:D0:2E:4C:07
Authority key identifier: EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD
Certificate issuer:       /CN=eb51359c9989b963e9594c1929c820367de322dd
Certificate serial:       0194BC3CC544AA69FA3157D50469B8649CB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft
Manifest number:          0DBB
Signing time:             Fri 31 Jan 2025 12:01:26 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:26 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:26 +0000
Files and hashes:         1: 61E1nJmJuWPpWUwZKcggNn3jIt0.crl (hash: kh6qjgZ9bm/d5qKNATVC4mLDDumgs7qoMh5RkATZeuc=)
                          2: RNGBIcy26YwkLmRvqwWnod98dHw.roa (hash: 1chB1LaT432Rfh7J104MJnAPyL20nkhH0rEwOvkmqjI=)
                          3: avVrdRPNFcMtwTGR2Zab9qIvEIs.roa (hash: B8YMI/WajLnQclAWhZ2JVb5JaRJxPn4UkZ5gdPRrKXc=)
                          4: xvJJCJmfitiZoRrYzWugczL4VyQ.roa (hash: UrxIyZ/4qn/YP7b/SzV5GX2KUOXeEfz4V6Bha/YX2bk=)
                          5: xyTpJytoxvfRC1JuuZE55vlvpVw.roa (hash: pSf6Tfcl7fvUBPO0OcEa6L2J3bwaxMhwUDqFkg86IIo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:c5:44:aa:69:fa:31:57:d5:04:69:b8:64:9c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb51359c9989b963e9594c1929c820367de322dd
        Validity
            Not Before: Jan 31 12:01:26 2025 GMT
            Not After : Feb  1 12:01:26 2025 GMT
        Subject: CN=3a6ecdff5fb03eff9ac6160500ebd804d02e4c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3e:69:bd:8d:22:af:64:c6:29:09:e2:45:d1:
                    c8:5e:19:5f:63:d2:de:4b:f0:21:46:44:a3:38:f8:
                    3e:4c:d6:b6:70:96:78:17:f6:5c:a0:5f:4a:ee:7e:
                    87:78:84:cc:30:80:5d:37:5e:83:b0:6e:6a:61:71:
                    94:ae:dd:12:6f:f0:4d:24:95:05:90:df:20:b3:4b:
                    65:e6:51:24:45:80:5f:9b:c8:5e:98:00:4f:bf:f9:
                    c9:d4:25:57:bd:92:7f:42:a0:15:8f:63:d2:d2:44:
                    2e:f1:14:5c:fc:41:bd:7b:0b:c1:24:ce:3e:07:7c:
                    a8:e3:85:1f:d3:a7:1d:2e:d2:f8:a7:72:be:d8:bf:
                    d4:1a:ed:cb:3d:91:c9:7f:b0:58:82:7d:9e:15:58:
                    f7:a1:e5:69:af:51:cd:90:4f:01:60:45:a9:89:ac:
                    cb:97:1a:87:36:fb:94:6b:45:a6:02:ed:d1:9d:f4:
                    3b:8a:e2:04:bb:33:51:c7:f2:a5:70:1f:54:16:d1:
                    69:b7:23:4d:1d:96:91:88:24:70:e4:9e:6a:bc:d5:
                    47:2f:e7:da:34:d4:44:8e:c1:d7:2b:b6:1e:67:c9:
                    31:4f:64:26:dc:b6:6c:2f:6d:19:4b:df:ad:db:14:
                    d6:7c:ed:69:76:52:15:69:4a:65:e7:6f:56:be:25:
                    67:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:6E:CD:FF:5F:B0:3E:FF:9A:C6:16:05:00:EB:D8:04:D0:2E:4C:07
            X509v3 Authority Key Identifier:
                keyid:EB:51:35:9C:99:89:B9:63:E9:59:4C:19:29:C8:20:36:7D:E3:22:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/61E1nJmJuWPpWUwZKcggNn3jIt0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/d97d28-a2e2-401d-8ff0-59fc73d60322/1/61E1nJmJuWPpWUwZKcggNn3jIt0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:1f:8d:8d:96:20:de:ef:62:b1:74:0b:65:76:98:e2:8b:99:
         64:bd:a2:ff:5d:23:d0:44:ec:c9:c7:57:d0:93:c7:0b:a1:c2:
         be:92:76:56:4a:c0:ef:7e:36:ea:94:5e:9e:6f:b7:53:cb:3c:
         3c:93:14:e6:b2:8d:6c:20:65:77:16:18:07:62:74:28:74:b4:
         ad:9b:32:9f:59:7e:45:d1:0d:1b:b3:50:ad:f5:de:f2:65:cc:
         e0:95:6c:e1:08:dd:b6:ad:1c:d8:fe:fb:b1:92:b7:b1:6b:2d:
         63:9f:09:d0:8b:5d:ef:e0:98:64:47:a8:ac:e1:81:2a:e0:16:
         7c:ca:0e:3f:e4:7e:57:25:b7:d5:05:03:6b:68:53:f5:c6:73:
         50:3b:bb:23:3e:76:80:16:2f:6e:e2:8e:c1:35:e8:fa:54:5a:
         08:ca:be:37:bd:ad:11:ea:fe:54:36:d4:35:ca:22:04:7e:4a:
         c4:f9:60:6d:95:a8:8d:ef:4b:53:53:eb:a1:59:f6:fb:c5:67:
         0c:90:b0:f3:10:74:26:43:8e:35:4d:b3:c2:37:aa:cd:ca:c9:
         b4:ac:7d:83:35:90:71:98:8c:0c:ee:d7:da:d0:ea:0c:be:48:
         70:9f:0b:3a:a3:3c:2f:31:84:7b:09:5b:b1:74:33:ea:bb:4c:
         a0:26:94:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----