Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.mft
File:                     W9dOOd2kANE2Em5sPvsc-TRCd-8.mft (raw, json)
Hash identifier:          u8EazEQfVHFvDNO8j/0kncxsrBic08Ux2AnFri3aVJk=
Subject key identifier:   82:77:AC:DD:A8:84:5F:E0:87:41:13:5D:D9:96:CE:69:D6:1C:46:88
Authority key identifier: 5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
Certificate issuer:       /CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Certificate serial:       01941626C08EED363DFF04DF69662884A75E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.mft
Manifest number:          0B00
Signing time:             Mon 30 Dec 2024 06:00:25 +0000
Manifest this update:     Mon 30 Dec 2024 06:00:25 +0000
Manifest next update:     Tue 31 Dec 2024 06:00:25 +0000
Files and hashes:         1: JFWNXzHlo-eIbF9lxQC8enqRziM.roa (hash: k0Fq8ZV1HqrTC607W+UkYloGn9zOwL1qAz+7WLFd8H4=)
                          2: LYkiDJ0yD3DDXewjrrST8s3cvSc.roa (hash: 2WJ4qleQGScjM0I0Fp4K78ncrjK2fe4YjYZDo+juQ4E=)
                          3: OAP9a4fuoXqHOPNhJii0jlh3DWY.roa (hash: SWtc00u8mYNEaVD8GfOhyeCfLqhqs85iiHyKgf6xvkg=)
                          4: W9dOOd2kANE2Em5sPvsc-TRCd-8.crl (hash: 97i5oJQia9AhIJcD9Cg+gdEAB/GfKQphQSLg5dSKtzk=)
                          5: YJSFq7kyxvUcN9PXIjBzLP5bcBw.roa (hash: djcugSr3u7SNUEFx9qvMONsqVlImvmPbP1C+z06Ua2I=)
                          6: g0Mq21pitBaJFNJ2Rv76lap1Hp4.roa (hash: Ke6igV9j3ZmlWj3szxkvv3fh0g763qTS2VjRfwIiGTs=)
                          7: zEdUBqRFIsyqc7wpfOyC9XuKuw4.roa (hash: vPDjXd657jTXeciD/SrxznGOd9/oItCvLVn0G6cktoI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:16:26:c0:8e:ed:36:3d:ff:04:df:69:66:28:84:a7:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
        Validity
            Not Before: Dec 30 06:00:25 2024 GMT
            Not After : Dec 31 06:00:25 2024 GMT
        Subject: CN=8277acdda8845fe08741135dd996ce69d61c4688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e8:81:99:32:1f:8b:6b:db:47:0d:ef:d5:52:
                    df:c0:e1:ed:12:4f:1d:b4:7e:f4:84:be:d3:8e:7d:
                    b4:bf:b9:d5:9f:58:d4:5b:24:cd:20:ad:d8:ce:5e:
                    2e:ca:36:28:64:7d:a2:ca:96:42:71:d9:14:fd:60:
                    e2:67:d4:97:98:25:0e:da:d8:9a:de:5a:9a:84:94:
                    6c:11:dc:90:7e:49:0b:cf:11:ef:68:e1:f9:fe:8e:
                    46:1a:92:91:5d:55:3a:86:34:f7:65:3a:c0:a8:ba:
                    bf:b3:44:48:03:a7:80:43:52:00:a8:43:24:48:23:
                    b7:8e:dd:2a:2b:d7:35:8a:65:a2:0a:08:5d:8b:b0:
                    fa:41:e7:ab:e5:ae:ff:09:dd:7e:2a:a6:68:34:63:
                    7a:1b:d8:6a:7f:c0:c0:7f:d0:a0:36:f4:32:27:d6:
                    f9:76:ec:b8:97:88:d0:a4:66:43:a7:0b:a9:7e:cb:
                    2e:2a:8f:40:c7:76:ea:b5:19:17:be:d6:76:46:a9:
                    01:d2:5f:b0:d7:1e:39:4c:28:03:58:f9:16:4c:93:
                    f6:cb:7e:5a:68:fd:5c:02:1c:23:97:92:e4:95:5c:
                    46:57:46:fb:97:80:49:a5:b5:20:37:b6:4a:07:fe:
                    b5:7c:f9:9f:1c:8b:84:14:0f:f5:89:eb:88:5c:51:
                    a3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:77:AC:DD:A8:84:5F:E0:87:41:13:5D:D9:96:CE:69:D6:1C:46:88
            X509v3 Authority Key Identifier:
                keyid:5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:9f:43:ae:57:a8:0d:bf:6e:13:f4:43:43:c0:c9:6b:f2:56:
         bc:0e:80:6f:89:61:be:a7:63:5a:f6:00:2c:c2:04:4c:4c:25:
         27:e6:92:b7:54:9a:da:07:e0:53:51:96:06:4f:8f:1a:fc:77:
         c6:0c:28:51:90:52:9f:32:2f:ed:75:ab:9c:78:6f:9d:41:0e:
         2a:97:9f:2f:fd:02:bf:ae:54:8e:7a:de:9a:21:ea:20:6e:19:
         63:23:b5:a3:75:e0:20:32:f1:31:56:e3:38:0d:b0:24:0c:57:
         0a:f4:94:56:ab:b8:a4:68:8d:05:74:7f:73:18:b4:17:ac:a3:
         c0:6c:29:7d:81:1b:5f:3f:fd:53:ad:21:44:f8:76:1a:f6:b9:
         bd:25:fa:66:16:8c:dc:d3:c9:b7:bd:dd:fa:4c:9b:62:63:85:
         8a:5e:b0:15:a4:5c:2e:15:59:5e:13:00:38:b4:6d:a5:59:2c:
         20:a7:4a:8b:a4:9c:d7:7a:d1:e8:0d:34:da:a0:ad:df:76:86:
         84:70:b6:a0:12:19:70:b9:14:40:30:be:24:2f:bf:40:f6:f1:
         a1:5f:e1:a2:7a:b5:e3:e3:11:db:71:79:5e:b7:d6:64:65:3b:
         91:e4:75:59:70:98:0a:4f:6c:dc:bd:75:5c:80:3d:e7:d7:13:
         fb:a2:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----