Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
File:                     sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft (raw, json)
Hash identifier:          H+5lBO6YY2Jh8owhBmWctS2U+xQx7DCdQLjO5S0eEpI=
Subject key identifier:   3D:44:DA:4D:2C:F7:77:DA:43:8B:40:7D:1B:95:EE:38:75:2F:0A:E0
Authority key identifier: B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60
Certificate issuer:       /CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
Certificate serial:       0194BCE0632C87EBD1EDFF1AC370FD576C8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft
Manifest number:          142A
Signing time:             Fri 31 Jan 2025 15:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:09 +0000
Files and hashes:         1: 3XfxhYPaNkk8RYgtHf2GQ9-31bw.roa (hash: IyuGzJvfjXAVgnfQEKPJlaaX+BmI0xIhxqPUz3ur7Ug=)
                          2: K-1wTW4J6sLpv-6DuCiwUF12vdI.roa (hash: n2u+VQEAXcWUcGFe9BbTAMBCmji0TY4jRMY2BGuQA34=)
                          3: sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl (hash: SmMVliXXKNUEB2vSfcj7pZCFPIgiEV6FwOTyc2XaGNA=)
                          4: tC9oEvPrRK3aKuK17Fq_gw6oxGU.roa (hash: V3atHxuVAp6RmJ/WmMRTwEnC2jY5957dy0nURReA0co=)
                          5: zeoM8BTDMIvmahMcB90qnpwzClY.roa (hash: kC/8T/vBTQ+SF6IsbbebB8UCkgdezLGje3ANXS8WqT4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:63:2c:87:eb:d1:ed:ff:1a:c3:70:fd:57:6c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b19f07669e58ec32b9d9132e2ca6d19c2e949360
        Validity
            Not Before: Jan 31 15:00:09 2025 GMT
            Not After : Feb  1 15:00:09 2025 GMT
        Subject: CN=3d44da4d2cf777da438b407d1b95ee38752f0ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:87:9e:23:25:f1:ee:d3:00:47:84:15:3f:3f:
                    8b:16:23:16:a1:d9:5d:00:30:28:fc:31:6f:d6:36:
                    6a:52:19:d5:2e:18:e7:1d:74:a8:1b:3d:f4:52:c6:
                    02:0b:ee:63:b2:76:e2:96:30:ea:28:5e:ad:fd:69:
                    5e:5a:57:3c:de:83:c5:8b:68:2a:ef:e9:cc:26:a0:
                    6a:fd:ee:7f:62:9c:54:4b:af:e0:43:e6:76:cb:bb:
                    b5:b3:78:3b:6d:92:d0:12:38:8a:33:a6:ff:72:97:
                    a9:29:46:a5:d5:e9:77:11:4c:e8:26:3b:48:49:24:
                    ae:9b:e5:5c:ba:97:67:00:0d:fe:a8:ed:22:6a:c3:
                    92:00:bd:21:7b:cb:47:ec:96:bd:65:fe:dc:4e:87:
                    01:cd:e9:2f:9f:e7:f3:1d:c8:e6:b2:db:31:49:58:
                    54:af:2d:e5:af:4d:5d:bc:71:ba:cf:21:b1:66:16:
                    4f:66:5f:81:aa:67:f3:b7:f9:91:a4:22:e1:1d:11:
                    f8:55:f7:09:f4:a3:03:1b:46:be:7e:25:c4:9b:34:
                    ba:c2:05:81:ec:7a:2d:32:4a:7e:0c:5b:e3:a3:db:
                    3a:54:cf:dc:c3:da:7e:a8:30:52:7d:be:60:4f:f4:
                    27:ee:59:52:d7:45:61:47:6a:62:44:80:b0:a6:5c:
                    9d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:44:DA:4D:2C:F7:77:DA:43:8B:40:7D:1B:95:EE:38:75:2F:0A:E0
            X509v3 Authority Key Identifier:
                keyid:B1:9F:07:66:9E:58:EC:32:B9:D9:13:2E:2C:A6:D1:9C:2E:94:93:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/626eef-12d0-47fa-b633-641dd4288c40/1/sZ8HZp5Y7DK52RMuLKbRnC6Uk2A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:ec:78:39:5d:02:39:d0:99:aa:db:ab:58:05:e2:6a:ed:3f:
         dc:86:e4:f1:13:f6:0e:3a:b5:6d:f8:90:02:61:56:82:9b:92:
         35:d5:59:46:6c:15:53:b1:11:06:78:d8:94:9e:36:8c:a3:fe:
         41:19:a0:47:79:9f:f2:60:83:39:af:72:7c:9e:6b:14:36:8d:
         25:0f:60:f3:77:c2:c2:18:a3:af:7b:c5:cb:8c:06:01:67:67:
         a3:e7:f9:6b:87:b6:e3:32:c8:80:5a:b3:ed:a5:3e:53:1e:91:
         c3:05:1a:be:e7:d0:1d:8d:5d:0a:52:33:a2:b2:b5:cf:15:9b:
         7b:6e:32:eb:e7:d8:55:e4:c7:8f:c6:47:6a:75:0a:67:1b:b5:
         b0:88:91:31:7e:75:3a:65:ad:2e:f3:9e:c2:e6:be:3d:a4:1e:
         8f:78:f8:fd:f2:79:11:50:b5:59:1c:8c:42:da:b3:c4:40:97:
         f5:27:21:22:63:2e:cf:09:90:7e:04:6f:a8:7d:be:ee:4d:1c:
         94:d1:09:1c:51:8d:8b:7c:84:18:1c:5d:85:e9:c4:44:f1:fb:
         c7:ba:77:05:0b:4b:d5:20:c9:34:69:17:6f:b8:49:24:f1:17:
         10:c9:13:82:d3:1f:8a:8e:36:88:89:dd:52:1d:2d:4a:fd:88:
         e9:14:71:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----