Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
File:                     ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft (raw, json)
Hash identifier:          2b9IcYEgKF5tP62RPmN/JkzrBU+VcyfpMmNo9QYUZj8=
Subject key identifier:   07:D3:9B:95:BC:8C:BF:B9:3A:8D:9A:8A:8E:04:94:5A:EE:86:45:4C
Authority key identifier: CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61
Certificate issuer:       /CN=ced755733e91203a17c3093ca5d9cb0392d94f61
Certificate serial:       0194BCAA00A5CF6685D29AD366D414CCC0DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft
Manifest number:          142C
Signing time:             Fri 31 Jan 2025 14:00:45 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:45 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:45 +0000
Files and hashes:         1: Ch5O5Blqh1qLTfKnLW_PxeqErmU.roa (hash: MQWABCmJmPzBZuvJm1UdXrqjK/z2moIohkG/Rp3fZtA=)
                          2: E3ZC-IKUFV8dsLuSPPYjoVWBSBk.roa (hash: /bl5hl4kqSXgSNneJaVMs/G9S7DHiQCDWl5lO8OIAgk=)
                          3: nBzRioAspYogjhuqMfmeJKfieBA.roa (hash: zMCnSjaFE4ydwmXDRAVpua0IoyMIX5RMql4K/75vlGo=)
                          4: ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl (hash: PsmFOLYTVp0B+S36rQZ7pB6kUftOOqzLvCGMapPeKZM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:00:a5:cf:66:85:d2:9a:d3:66:d4:14:cc:c0:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ced755733e91203a17c3093ca5d9cb0392d94f61
        Validity
            Not Before: Jan 31 14:00:45 2025 GMT
            Not After : Feb  1 14:00:45 2025 GMT
        Subject: CN=07d39b95bc8cbfb93a8d9a8a8e04945aee86454c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:a9:3d:17:a6:7d:44:fd:28:63:22:b2:07:59:
                    2c:01:c0:19:3e:97:66:e7:0b:6b:41:bc:30:17:0d:
                    1d:6f:58:b5:28:4c:65:46:7c:e9:99:97:da:1d:c4:
                    d0:7e:21:4e:54:8b:4d:6b:2a:f5:6f:f1:7d:ba:c2:
                    28:2a:67:7a:70:0c:7f:a4:b8:88:84:79:ae:5d:73:
                    eb:c3:82:fc:60:56:28:9e:be:be:38:67:d6:aa:7d:
                    62:92:8d:73:2a:11:e5:93:99:52:05:2f:ce:8c:36:
                    2e:b3:ed:c7:98:4e:67:b7:0d:53:8c:4e:78:85:d7:
                    f9:8c:54:f7:94:b9:c5:4c:b1:db:5d:13:00:16:2a:
                    23:e1:59:27:8d:f9:e7:fa:2f:b0:fe:15:07:4d:7a:
                    1b:95:04:47:e9:d1:89:6c:d9:7e:78:62:e1:5d:99:
                    48:7e:fa:8c:be:30:ce:9d:e2:3d:7f:61:7d:fe:cc:
                    20:cf:5f:95:57:8b:f5:b7:31:37:a3:e5:6c:ff:b6:
                    1e:47:72:98:5b:cb:2a:7e:96:b4:eb:93:e2:32:72:
                    4e:2e:9d:48:3b:13:04:d6:31:b7:4c:67:a1:91:e3:
                    25:ec:06:eb:b7:a3:cb:44:9e:c4:6a:e5:86:30:9b:
                    05:4b:d2:ea:ba:13:e5:10:a8:1a:27:7e:94:76:01:
                    59:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:D3:9B:95:BC:8C:BF:B9:3A:8D:9A:8A:8E:04:94:5A:EE:86:45:4C
            X509v3 Authority Key Identifier:
                keyid:CE:D7:55:73:3E:91:20:3A:17:C3:09:3C:A5:D9:CB:03:92:D9:4F:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ztdVcz6RIDoXwwk8pdnLA5LZT2E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c2f61a-15f9-4c6b-90e5-ef4b659eff8d/1/ztdVcz6RIDoXwwk8pdnLA5LZT2E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:33:8d:91:f3:2c:df:58:a7:42:82:65:08:d7:c8:3f:f9:99:
         6b:df:c1:1f:0e:9e:64:6a:46:e8:e3:f5:1b:fc:6e:37:f1:86:
         01:23:36:a7:06:68:cb:ea:d6:3c:d9:a3:88:03:a0:5d:1f:b6:
         07:2f:f3:15:02:5b:c3:8b:82:ca:27:52:73:46:32:3f:9d:6f:
         f3:5f:0a:cf:00:79:11:38:65:a5:45:32:91:ad:ff:99:16:9e:
         52:4d:17:23:24:fd:e3:38:ec:1e:a5:c7:da:19:a5:7f:3e:c0:
         7f:08:0d:d3:22:ea:e1:de:90:70:5c:08:71:93:3b:61:57:57:
         b7:42:26:ab:10:9b:ea:d0:ba:22:60:63:65:bb:aa:ed:e0:9c:
         2a:95:56:da:cf:f0:d3:23:62:6f:2d:2e:7d:fe:66:5f:c4:2c:
         04:5d:12:98:f6:ef:f9:3f:c2:3c:06:47:b0:cd:87:f2:ba:11:
         0a:f3:fd:88:f0:ea:17:21:d8:57:be:29:c3:4f:2c:31:1d:2f:
         6e:16:ca:3e:39:d2:08:ed:f8:28:b2:00:46:99:9d:b0:f0:61:
         67:cd:52:67:17:3e:f6:93:5c:4d:0e:a0:11:27:f8:d0:33:39:
         07:d1:c9:2f:79:cd:f0:38:6d:42:5a:38:ee:89:6f:9c:73:7c:
         49:6b:b4:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----