Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
File:                     lyQtuibtiCs4DavrqzxfOUIAbsw.mft (raw, json)
Hash identifier:          U8u2hcJeP8DuBUAEhSJL3/c8Wz7lJoC1p1TjmZvNGns=
Subject key identifier:   D5:75:89:F0:FA:66:F4:E4:0C:27:DA:B3:AD:F8:16:1F:34:43:2F:EC
Authority key identifier: 97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC
Certificate issuer:       /CN=97242dba26ed882b380dabebab3c5f3942006ecc
Certificate serial:       0194BD4E90ED6FD95AF4734E4D20C734E3C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft
Manifest number:          1430
Signing time:             Fri 31 Jan 2025 17:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:30 +0000
Files and hashes:         1: 7j6bG7_YdSr6Y19IR2zhq0TXX5s.roa (hash: iyRklEIGnBKMGPTWXMxj+TNA/gm1otxr7P6qH053kbo=)
                          2: jGDq7XeDL7xgNWWN5nOoMROqQIw.roa (hash: Tsbtaggnsoh2k3FJiZTeWi5sX4XInrd8kefha+mCSm4=)
                          3: lieerIGfYoiifslff7xL15T0Vwk.roa (hash: kWGMBjCLxR4cTqqxTU+We9gw4Dbl6ligoaFGrjIgARg=)
                          4: lyQtuibtiCs4DavrqzxfOUIAbsw.crl (hash: RlDu9zAjWpUVYYeRc6cevaif2YBX1Rha+c47ZCU9ips=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:90:ed:6f:d9:5a:f4:73:4e:4d:20:c7:34:e3:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=97242dba26ed882b380dabebab3c5f3942006ecc
        Validity
            Not Before: Jan 31 17:00:30 2025 GMT
            Not After : Feb  1 17:00:30 2025 GMT
        Subject: CN=d57589f0fa66f4e40c27dab3adf8161f34432fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5e:f8:99:34:c7:3a:a8:7b:d2:90:3f:75:e6:
                    bc:63:eb:d9:06:54:27:73:1e:3f:a8:07:ee:d6:90:
                    26:2d:62:1d:49:cd:33:f7:8d:31:7a:35:ba:b6:49:
                    f1:1d:68:c5:d2:79:f1:f3:d7:a2:47:eb:f6:24:45:
                    cd:3a:41:13:6b:fa:05:f0:bc:38:29:87:86:74:c2:
                    4f:ec:ef:17:2d:8a:f3:7f:f5:c4:82:ff:ce:13:5c:
                    d0:c7:08:0f:c0:7c:e3:a1:58:1d:d6:9c:d9:6f:1f:
                    52:49:72:63:2f:e8:f6:b4:cb:fd:d9:b9:d8:7d:57:
                    76:bd:85:56:7c:16:0b:c1:b2:27:50:f4:9e:8f:bb:
                    80:42:1f:a8:9c:39:dd:04:b2:06:6e:dd:a7:4a:8f:
                    eb:31:a6:d4:d0:0b:11:ef:0f:9d:0d:75:83:1b:e2:
                    69:ca:97:e3:a5:38:ff:06:e5:bc:b8:ab:42:32:8a:
                    6f:5a:d1:1a:d6:fa:3b:c7:f9:fa:d3:95:ba:83:0a:
                    77:02:c8:3d:eb:53:89:b5:48:11:62:7b:a2:3d:ca:
                    31:02:19:fc:12:2f:da:c5:72:dc:e5:17:42:c4:3c:
                    48:3a:3d:dc:1b:1b:c8:9c:68:90:5f:d0:94:3e:2b:
                    f3:01:2c:75:cd:90:37:a9:08:2e:9a:67:b8:46:f1:
                    d2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:75:89:F0:FA:66:F4:E4:0C:27:DA:B3:AD:F8:16:1F:34:43:2F:EC
            X509v3 Authority Key Identifier:
                keyid:97:24:2D:BA:26:ED:88:2B:38:0D:AB:EB:AB:3C:5F:39:42:00:6E:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lyQtuibtiCs4DavrqzxfOUIAbsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/4cb687-87fd-4af0-a36b-607272d737cb/1/lyQtuibtiCs4DavrqzxfOUIAbsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:74:18:01:51:96:4d:39:c7:b8:d7:73:87:6d:94:ea:7b:87:
         f8:86:ac:ba:12:55:fb:8b:aa:ee:54:4b:4c:f1:e3:21:d6:4b:
         2f:7c:35:8b:64:eb:92:92:8f:9e:a3:6d:b7:be:87:96:c0:40:
         04:21:e7:4e:c3:fa:e2:7b:28:e5:1d:2b:e3:7a:6b:0a:a7:13:
         57:6f:e4:d8:23:b9:0d:51:0c:89:e1:bf:56:79:df:24:65:25:
         28:cb:ef:00:46:91:cf:c0:cb:7a:aa:e7:da:24:8d:38:21:76:
         6a:9f:e2:7a:ed:f0:76:2a:a8:31:79:bf:84:4d:1a:d6:13:2f:
         9f:4e:39:9c:2f:54:84:e0:09:4e:42:8e:55:67:e5:33:7a:87:
         4d:d8:2e:a2:9a:24:eb:98:c5:83:ea:6f:b5:68:b8:6a:75:cd:
         05:bd:c4:49:49:8c:5f:f8:6d:c1:ba:e8:e4:94:a8:d5:45:5c:
         5f:ad:99:96:3c:7a:fb:e4:e6:f1:83:a6:6a:9f:a1:22:7b:2b:
         7f:4f:4e:34:3e:91:29:59:e7:93:1a:bd:c5:62:4b:40:05:71:
         30:32:8c:a1:c4:5d:be:4c:bb:f4:14:67:8c:8f:61:34:68:b2:
         7d:bf:d4:73:9f:1f:bc:37:c5:60:99:9b:87:c9:2b:11:bd:61:
         db:18:dc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----