Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
File:                     6HVGTomBbvALA2lQIBin5Zzi02w.mft (raw, json)
Hash identifier:          Fey3OJBlGK09B0A7Lc/dX1r73n7wlr07b4takO96w70=
Subject key identifier:   3E:9D:30:D5:2D:CC:E4:8E:67:85:30:4F:D3:DF:34:47:4F:95:27:5B
Authority key identifier: E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C
Certificate issuer:       /CN=e875464e89816ef00b0369502018a7e59ce2d36c
Certificate serial:       0194BC0519B2D46F296A2B91C8E171DED316
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft
Manifest number:          120E
Signing time:             Fri 31 Jan 2025 11:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:38 +0000
Files and hashes:         1: 1K9FnI645Yqoqp7v7ivnFFVcKlU.roa (hash: h6hzrhT4kJEWC7V4ecnqwx0o1Jw9Qh9TGp5gYGQjVLY=)
                          2: 6HVGTomBbvALA2lQIBin5Zzi02w.crl (hash: 28hTkjMYES+DrLoRPBtLcufnqH9HHHh9uQxMfJGultU=)
                          3: E4_z-I5S9ncgaaSljqVssc0s8uk.roa (hash: qL0QuMiYtX65hwE3RBedT5Hnno1IGD+mzQYraz5OhWU=)
                          4: OuTJvGgTKVnEZq7gCAEHXIiEW0A.roa (hash: YXkZ09I/fBc9Mmxb3/951nvIEdnGhT1gbWVM1wiVQc8=)
                          5: TTqnLj3WpKYvdn_3GVellbdKkvo.roa (hash: pyP10mZYKwVtG3Ir/Zb6+G0oU3PtknfdfIV9uEh1OQ8=)
                          6: e1cwbcDkdgSRu6n5KfpwkuDdmxQ.roa (hash: aIDnnp2yTdzDu5j4SrtTH/gBGFH3XCan8aEwWj5RxWQ=)
                          7: i3rHyXPusCVWKugIUURPj5Z_2oI.roa (hash: 1gfDfF2rTo/9YCI3+WwxH/uMujAutjvVMJoVtYw6quc=)
                          8: r3ev4zBDd_GC35s0Kz0Ij7H3LQM.roa (hash: HdkG2O8mQ9D6IO4Hyed6rak9jpN8qftAs7DiwRIQwXk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:19:b2:d4:6f:29:6a:2b:91:c8:e1:71:de:d3:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e875464e89816ef00b0369502018a7e59ce2d36c
        Validity
            Not Before: Jan 31 11:00:38 2025 GMT
            Not After : Feb  1 11:00:38 2025 GMT
        Subject: CN=3e9d30d52dcce48e6785304fd3df34474f95275b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:72:2b:22:59:a2:5a:d6:74:1f:d0:54:67:5a:
                    4f:7e:2d:b4:2c:f2:07:95:bf:82:00:f0:b3:55:76:
                    95:f6:3e:0d:61:0d:12:5c:87:30:de:1d:00:ad:33:
                    67:9d:a4:75:62:1c:45:59:93:ae:6a:93:0c:01:5d:
                    d1:b1:70:fb:0d:db:2f:a6:7a:14:eb:d6:a5:37:78:
                    2d:a8:32:c9:72:9c:85:b7:17:74:56:56:91:49:ab:
                    4a:2e:ce:46:f8:7e:31:b0:5d:bb:ba:8d:0c:e4:43:
                    58:46:ef:d9:b9:e4:ef:12:45:1e:e9:8b:6c:9a:22:
                    8c:31:61:68:c6:59:8e:ff:49:ce:ad:f2:cb:9d:d9:
                    11:47:a4:37:17:5e:ba:51:e9:be:ee:fa:1c:ce:25:
                    79:21:1f:44:61:0e:08:9c:07:ae:f3:95:4e:8b:5c:
                    5b:0e:e8:cf:de:87:11:0a:c5:75:bc:f0:cf:01:53:
                    b4:5a:ce:f3:89:4a:bc:86:41:a5:6c:e3:2a:0d:63:
                    06:a5:b7:1a:c0:3e:a7:b3:4b:e6:c5:87:08:6d:a3:
                    26:e2:9c:34:95:1f:25:5a:1c:9b:56:69:c2:55:86:
                    98:48:cd:71:80:c2:2a:47:fa:a6:72:58:97:2c:46:
                    5f:53:98:13:7e:46:37:c5:17:7f:a5:16:e6:59:77:
                    77:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:9D:30:D5:2D:CC:E4:8E:67:85:30:4F:D3:DF:34:47:4F:95:27:5B
            X509v3 Authority Key Identifier:
                keyid:E8:75:46:4E:89:81:6E:F0:0B:03:69:50:20:18:A7:E5:9C:E2:D3:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HVGTomBbvALA2lQIBin5Zzi02w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/c3069e-5ffc-4c8c-91dc-31d197f139d8/1/6HVGTomBbvALA2lQIBin5Zzi02w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:e4:07:6b:fc:d3:93:9a:0c:7c:c6:51:c5:5a:88:1b:94:6b:
         a8:62:60:04:ec:2d:53:68:1d:3f:a8:4c:9a:0e:22:df:6c:76:
         de:8e:46:e4:b9:f6:83:37:69:ea:26:e4:aa:2b:b2:aa:7a:84:
         0b:94:0b:e3:8b:20:54:cc:7a:5f:ac:69:e8:7c:fa:d4:91:42:
         f2:88:a7:8e:7f:33:03:c2:1e:45:7c:6c:1f:e9:11:63:41:29:
         2b:67:86:fe:0c:f6:18:e1:b9:34:9e:bd:42:b1:79:0c:44:ca:
         29:60:95:8f:46:d9:04:19:fd:23:ed:cc:f8:81:73:c1:61:e2:
         18:ba:d8:92:67:51:b7:52:bf:d2:81:1e:38:63:03:8d:e0:df:
         3b:89:a2:ae:79:69:78:0d:05:27:e1:dd:8f:e3:f3:be:3c:ac:
         86:ad:ee:30:62:2f:07:0d:00:a0:cd:e5:35:7d:1f:c7:b8:4f:
         b0:f9:87:fc:ed:6a:29:4a:da:ca:52:45:84:85:72:bc:07:95:
         3d:88:33:5f:4a:11:a9:3e:59:e3:4f:72:47:25:e9:a0:5a:d0:
         66:cd:71:ed:9d:89:77:b1:bd:37:05:c5:c1:87:74:a8:2e:3d:
         b1:13:1e:db:ea:ea:41:ba:01:f2:89:d8:3b:dc:7d:2d:66:b9:
         33:52:75:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----