Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
File:                     8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft (raw, json)
Hash identifier:          +hlndaL3eWFmwQ0BqcfH9jvinISlBljEOH2XN3+aP+E=
Subject key identifier:   B8:FD:7F:60:5C:E0:CE:F4:2A:C9:8E:3E:62:C4:EC:52:D6:2E:F7:70
Authority key identifier: F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55
Certificate issuer:       /CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
Certificate serial:       0194BCE0691282AE8821DA6BF88109B665C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft
Manifest number:          0ECE
Signing time:             Fri 31 Jan 2025 15:00:11 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:11 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:11 +0000
Files and hashes:         1: 5ZNnU0ul1PvuB6V3S-Y8qQNgW4Y.roa (hash: RgXKHj2HAygr87kEjLFNnsJCWJ6hg9g9jGeFNERw+T8=)
                          2: 8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl (hash: lYwinE7Ylqcpiq4LJnkbfOtOqDONSKbIcgjjqeImw2Y=)
                          3: 9c9IMdwPViHHlGIXa-EYvM5rE2c.roa (hash: Y48jer5SEM8eKuN0ygvkfPpOfOkBQ0uV7/NANNuOcto=)
                          4: DYGgwKgBr-X-UJNWrHRoiByEE0k.roa (hash: 0UcPzEKGR92DACoKDDn5wkyZ0r0HCl4oapCFAXQREB8=)
                          5: Xi938_LG0fo08PcIDueZffuVF3Q.roa (hash: 5cOzoa9nCO1ZRf33mVdI0qSK+ZoAQbsBPtAf2Kylv28=)
                          6: oAsyO0CJws2AMTge7-6JSychHyY.roa (hash: OT9pAjZ/E5OdooOn7gC+YSxibLo6Rf5dBxQdNRyss9s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:69:12:82:ae:88:21:da:6b:f8:81:09:b6:65:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1bd02ea44a9bee35b63d1ab3e25b14f19a35a55
        Validity
            Not Before: Jan 31 15:00:11 2025 GMT
            Not After : Feb  1 15:00:11 2025 GMT
        Subject: CN=b8fd7f605ce0cef42ac98e3e62c4ec52d62ef770
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:de:36:71:26:ac:22:14:c5:06:f2:d8:94:39:
                    75:d1:de:4f:9c:8f:12:f8:ca:d5:c6:7b:8a:01:10:
                    90:c1:f0:1e:24:15:87:13:0c:85:fc:7a:e5:c3:07:
                    5f:8b:36:de:a8:6c:a6:22:c1:8d:92:87:fd:fe:b0:
                    59:66:d1:bb:74:fb:43:6f:3a:7b:e9:56:80:2b:77:
                    00:d1:f9:18:ed:43:82:7d:49:ff:69:ba:04:4d:f9:
                    d7:d9:ad:67:bf:ac:57:98:c5:7f:43:71:1b:dc:8e:
                    63:85:99:46:7f:0a:8d:89:bb:ca:44:63:40:f9:9a:
                    5d:4d:33:ac:33:87:5e:fa:36:e6:18:90:00:0f:1f:
                    4b:24:2e:e6:0d:85:f3:8b:0c:fa:a0:d3:ee:34:55:
                    8e:b7:a8:19:97:f0:71:0c:b2:c0:b6:f4:65:cb:b5:
                    6b:f2:06:e8:14:a0:c0:11:6d:8a:0e:cf:cd:b0:bf:
                    d5:d6:5d:90:d6:24:38:db:51:95:8c:2f:f8:05:d5:
                    dc:82:6b:2e:2c:22:82:ec:ed:cc:16:d8:18:f9:ce:
                    f8:4d:0a:02:8d:71:68:7f:4d:18:d8:49:e4:8c:20:
                    47:a0:84:b5:90:4f:1d:ec:30:6e:6f:6a:b7:b0:a9:
                    08:10:ba:79:83:bd:8c:24:22:75:25:22:e0:34:14:
                    5f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FD:7F:60:5C:E0:CE:F4:2A:C9:8E:3E:62:C4:EC:52:D6:2E:F7:70
            X509v3 Authority Key Identifier:
                keyid:F1:BD:02:EA:44:A9:BE:E3:5B:63:D1:AB:3E:25:B1:4F:19:A3:5A:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b0C6kSpvuNbY9GrPiWxTxmjWlU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/b69bba-7200-4f52-b631-fe0a658d9ded/1/8b0C6kSpvuNbY9GrPiWxTxmjWlU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:b2:5b:a0:c0:7f:e3:52:b1:d7:f9:b6:8f:b9:ab:0b:fb:02:
         50:c5:3f:53:47:c7:27:58:1c:80:22:9b:6b:ac:79:17:74:04:
         59:6f:61:33:a3:be:79:3f:58:7a:60:91:9b:8a:9b:aa:f9:ce:
         1f:2c:cd:aa:bf:21:d4:a2:1f:78:25:e5:f3:83:32:68:9a:2b:
         31:9e:2e:7a:1c:52:df:68:cc:31:12:57:1b:f3:09:1d:c2:ca:
         dc:43:67:c6:ff:0b:93:bb:31:f3:f4:f3:6c:8a:5d:03:a5:30:
         94:f2:61:fc:0d:0b:3a:76:a9:b6:88:d4:93:f9:cc:6b:31:cd:
         f8:a2:22:f3:4d:31:aa:38:19:42:bb:ea:1a:bc:00:9d:fe:fc:
         a1:0a:c4:4d:81:65:78:9f:8c:12:49:e8:d4:81:47:ee:26:57:
         ab:57:9e:88:ea:8f:3d:78:e2:a1:90:3c:ca:09:37:89:1d:5e:
         0b:aa:26:df:b7:a0:22:0f:ed:fe:1a:26:61:54:73:2b:9f:3c:
         07:02:26:d0:0c:56:eb:c0:9c:f4:c8:99:82:77:10:1c:12:71:
         03:67:55:33:89:42:c3:59:25:35:52:cc:8c:52:2d:93:95:fb:
         fc:03:95:3a:da:9c:bc:ca:93:6a:e1:a8:3e:3c:2d:65:c7:20:
         12:63:be:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----