Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
File:                     eH4xzl1QHRqUr9q71OAkzCp4jvU.mft (raw, json)
Hash identifier:          6Nb47zTYBEDUdFPyYH6tIaelmPjQ+XnGaVr+Mq2KjWE=
Subject key identifier:   9F:79:54:9A:41:AD:51:3E:CB:C9:9B:E4:61:78:D1:CC:D5:0B:8F:C7
Authority key identifier: 78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5
Certificate issuer:       /CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
Certificate serial:       0194BBCE86FD99C9074030085D01AB936251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft
Manifest number:          142D
Signing time:             Fri 31 Jan 2025 10:01:01 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:01 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:01 +0000
Files and hashes:         1: GrkcftVthMbuFOuUmrwl5HnX76A.roa (hash: vQYdY8EKtEz2Hu89OKKocq2BRdvKpSXmSdv2pqjq+sg=)
                          2: JGZf0kINrFpmjWepb2PsAYcmWTs.roa (hash: U1eRU67s2DvJxllsDjz9sUyozODDDexgknm9DQzTkEA=)
                          3: WRR5LY8_1pJUgURwLaVmIo-E2-o.roa (hash: +qrg2tL2ng6DI1UCOg4tOsQWLYbjmu9xrdicU5ox5vQ=)
                          4: aTmEQc7rZSqiS9xlo8D5J910hiA.roa (hash: gp8EnuKJWDEH/vTaQx7oV8ya6rcqLHa/Gr9Zkh0GUXA=)
                          5: eH4xzl1QHRqUr9q71OAkzCp4jvU.crl (hash: 9mHm+np9vYHP87hx66h3jt/ogr3ZHovi/iPE7Prc6aY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:86:fd:99:c9:07:40:30:08:5d:01:ab:93:62:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=787e31ce5d501d1a94afdabbd4e024cc2a788ef5
        Validity
            Not Before: Jan 31 10:01:01 2025 GMT
            Not After : Feb  1 10:01:01 2025 GMT
        Subject: CN=9f79549a41ad513ecbc99be46178d1ccd50b8fc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:3c:ff:d8:14:3d:8f:c6:98:1f:0e:43:4b:a0:
                    6a:a6:a8:a1:99:c8:a0:fb:56:ae:e3:7e:4c:96:5c:
                    10:dd:06:fa:e2:71:cb:5c:fe:a1:a3:f2:47:85:01:
                    f7:c5:f9:b8:cd:cf:13:a9:e4:1e:9f:87:76:02:0a:
                    11:42:bc:5d:fb:86:a2:e7:1b:3f:2e:4b:c2:6e:3c:
                    51:1a:4e:a7:b6:a1:91:b1:d1:27:84:94:38:18:d8:
                    90:47:fa:02:d1:12:a1:e6:77:9f:0c:27:5e:0e:5b:
                    0e:eb:8d:4f:49:a5:65:c2:12:5a:da:e0:d6:8c:97:
                    c5:fe:35:fc:d7:74:62:7a:2e:94:60:a4:ef:95:81:
                    1e:7d:a5:4b:1b:37:eb:c2:69:b3:41:6f:53:5f:0c:
                    4e:f4:81:a4:1b:a6:64:93:87:7e:14:91:79:a8:52:
                    ab:28:19:a8:16:5e:11:25:10:74:7b:dc:49:af:16:
                    77:43:ac:67:af:e9:09:70:59:49:43:13:e6:80:39:
                    82:37:dc:24:74:ae:9b:e7:0f:b3:6d:ab:bc:a5:02:
                    3e:11:b3:03:64:93:5a:d8:f2:fc:38:31:f7:a4:b2:
                    3e:41:27:2b:18:2c:b4:90:b7:14:1b:ee:c3:1c:84:
                    73:27:60:4d:b0:3a:9f:2f:f3:17:cb:dd:3f:5a:70:
                    04:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:79:54:9A:41:AD:51:3E:CB:C9:9B:E4:61:78:D1:CC:D5:0B:8F:C7
            X509v3 Authority Key Identifier:
                keyid:78:7E:31:CE:5D:50:1D:1A:94:AF:DA:BB:D4:E0:24:CC:2A:78:8E:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eH4xzl1QHRqUr9q71OAkzCp4jvU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/7c55d2-381c-4e87-8ca5-2307bb59225f/1/eH4xzl1QHRqUr9q71OAkzCp4jvU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:34:a5:80:f2:db:15:b3:4d:6f:9a:81:f4:3d:71:ac:51:2d:
         9e:0f:61:f6:9f:7a:89:70:07:43:a9:21:85:50:f0:54:41:4a:
         93:f7:a5:8e:4e:d2:66:39:5a:03:6d:79:10:71:3b:84:b1:a1:
         f4:e3:a7:6d:51:98:65:90:7a:a2:23:69:13:98:fe:cc:f7:20:
         67:35:ca:e1:76:bc:4a:6a:39:32:6d:e4:fd:b2:25:8b:8c:2b:
         3a:a4:b8:7f:5a:79:42:ec:57:79:0e:7f:01:39:a7:0c:54:8c:
         ca:ba:73:9a:3e:ea:ec:7f:36:83:06:2f:7d:eb:ef:c4:d0:d3:
         10:ae:bd:cb:8d:4a:d8:6d:83:d8:5f:cf:6a:6b:f5:0e:62:d1:
         ea:77:cb:78:e2:49:dc:96:1e:50:be:99:06:a8:16:ba:20:00:
         ff:0d:63:fe:9e:1a:e9:0d:59:2b:0f:e2:e0:87:e3:de:0e:fc:
         ad:49:18:ad:dc:4e:0c:f0:0a:be:e7:46:ba:e5:e4:cc:50:bf:
         af:38:02:3d:e4:13:48:09:fd:d7:6a:cc:90:69:bc:a6:48:f4:
         6a:cd:0c:3a:a3:6a:2a:2d:6a:86:05:ca:fd:4b:0c:15:3b:0e:
         13:b0:a7:0e:4f:a3:97:72:a9:ea:a4:2e:7c:2e:b5:88:38:ba:
         fb:47:98:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----