Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
File:                     TEA7xgtKE8Pao0EaySPGNy1CPrg.mft (raw, json)
Hash identifier:          +oAxXRJERnF+mMDYVa7XSraoDmunn5cI+1hauCFxfLI=
Subject key identifier:   C3:05:D3:5F:54:4F:C7:97:84:D3:0B:38:F7:B4:C2:5E:5B:9F:EA:8F
Authority key identifier: 4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8
Certificate issuer:       /CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
Certificate serial:       0194BD4EA6AA52878E7A5E7FFC2D4C36B3F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 17:00:35 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:35 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:35 +0000
Files and hashes:         1: 2T0ylluLZU5IRXTIsZCaSueUWbM.roa (hash: udIR5t7k2pJaVqMVtuXWgauNi5zcnt5mr94dfqv8MFY=)
                          2: 3HLBnkXtu06Yvfysal3d65x1XK4.roa (hash: 0ad/9ecLvEc9DbEtJjYjCQwDopmxQ2S5mXrCZefzQ6Y=)
                          3: 6XBAxRu2vxsYUwDkyUyt114ocMQ.roa (hash: eGNmL1OUFrA09FqL5JQElO3Jmjf1hQtWEl+MS56G7Vs=)
                          4: TEA7xgtKE8Pao0EaySPGNy1CPrg.crl (hash: nbD/GngEcWUbFG5d6pJ0vbz4bneXaCmC4V1LLDQ9mR4=)
                          5: cOWofKyb3NN8nv4CWZV7MLxAcXc.roa (hash: LjkxNR+VtLN8pFku0A8FzCtI0cGNobOpe7LNW6GMeZ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:a6:aa:52:87:8e:7a:5e:7f:fc:2d:4c:36:b3:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c403bc60b4a13c3daa3411ac923c6372d423eb8
        Validity
            Not Before: Jan 31 17:00:35 2025 GMT
            Not After : Feb  1 17:00:35 2025 GMT
        Subject: CN=c305d35f544fc79784d30b38f7b4c25e5b9fea8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5d:d0:40:b9:75:05:f4:93:0c:da:e0:62:07:
                    ba:5e:8c:35:3b:9c:02:6c:f8:aa:cc:d0:e3:fb:ec:
                    b6:d6:87:92:e9:e8:1a:8a:47:e4:ff:8c:fd:65:57:
                    7d:74:7d:07:c5:68:2f:99:50:0a:1f:88:5d:14:3d:
                    75:4e:8e:c8:26:c9:5d:25:e5:06:b5:d9:3a:01:72:
                    a7:2f:51:85:aa:e1:47:01:23:2b:8f:6b:4f:c9:6f:
                    7a:9d:e7:41:d3:6f:38:36:27:3a:72:cd:88:c1:94:
                    74:03:85:48:0b:bb:08:43:60:0f:fe:9d:ae:1d:fd:
                    93:6f:96:7f:59:f3:c7:1d:ea:33:0a:57:77:01:8c:
                    e1:72:90:4c:7a:70:cf:61:b6:08:6f:9a:79:15:0b:
                    c5:04:23:92:cd:17:ab:3e:d5:6a:13:09:60:9d:ed:
                    bf:41:16:5f:e6:f4:1f:e9:09:6b:db:d4:96:38:a0:
                    59:f2:c3:b4:5f:17:d5:4e:09:8f:c2:7a:60:76:27:
                    bf:04:b9:85:94:41:02:dc:40:69:a2:29:a4:51:7e:
                    6f:7b:35:df:29:f0:14:7d:97:a6:71:17:26:7f:22:
                    7a:28:81:01:5c:b4:8f:31:63:a2:ae:97:83:ef:d7:
                    82:0a:4b:8c:4c:c8:99:9c:bc:d9:7a:e5:4f:e4:05:
                    3b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:05:D3:5F:54:4F:C7:97:84:D3:0B:38:F7:B4:C2:5E:5B:9F:EA:8F
            X509v3 Authority Key Identifier:
                keyid:4C:40:3B:C6:0B:4A:13:C3:DA:A3:41:1A:C9:23:C6:37:2D:42:3E:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEA7xgtKE8Pao0EaySPGNy1CPrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/08b9c4-0afd-4876-9ef7-2e84b8d18e4e/1/TEA7xgtKE8Pao0EaySPGNy1CPrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:9d:a8:00:89:2b:8a:d9:0a:53:70:d8:49:85:68:aa:30:d2:
         f4:db:d1:ce:a9:fc:b1:75:1c:76:d0:26:e8:a3:08:87:a3:40:
         a2:0a:c6:97:b0:21:c2:e7:d5:8f:54:ee:e2:e3:26:6b:ce:4e:
         67:6c:6a:3e:68:d5:46:14:65:46:0b:92:75:4c:e7:e0:98:a6:
         0f:ec:c9:1a:15:2f:9a:41:61:06:a2:67:04:c1:df:2d:2c:fe:
         02:62:28:d2:d6:3b:71:a1:76:02:d7:c2:cd:98:b3:48:40:f7:
         76:b6:c1:0f:18:26:6f:92:e4:69:b5:97:22:df:7e:8a:06:5e:
         6f:1c:a5:cc:f8:d3:3e:57:70:9e:4d:a4:64:83:83:df:3d:d1:
         00:7a:b1:6e:0a:28:8c:cd:6c:7b:b3:9e:64:2e:4a:a5:ad:bd:
         52:23:dc:9f:55:b1:2f:b5:49:5e:12:d3:30:1b:ac:77:71:1c:
         6e:41:25:b4:af:ea:42:1d:68:d8:0c:22:6e:7e:de:c6:23:be:
         db:05:9b:db:b6:8b:5c:da:df:6e:eb:13:96:72:c8:cb:d3:ba:
         76:d7:69:da:a7:77:6b:f4:a7:49:73:bc:85:bb:b9:9e:37:62:
         be:e0:f3:f9:40:78:4b:50:9c:7c:19:6f:52:62:c9:21:f5:fa:
         15:f7:de:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----