Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/bAXPnDJ7L8h3votWGCKwZeCWkMI.mft
File:                     bAXPnDJ7L8h3votWGCKwZeCWkMI.mft (raw, json)
Hash identifier:          5AIIbvqul51pN4Ojg1yJL5s8qHYxlnRRdhPapc/BE3k=
Subject key identifier:   77:F1:B5:5A:37:E4:49:CE:9E:2D:78:28:F5:A4:23:90:68:81:55:DE
Authority key identifier: 6C:05:CF:9C:32:7B:2F:C8:77:BE:8B:56:18:22:B0:65:E0:96:90:C2
Certificate issuer:       /CN=6c05cf9c327b2fc877be8b561822b065e09690c2
Certificate serial:       0193E314FE168C62B58060A4B3041136EA64
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bAXPnDJ7L8h3votWGCKwZeCWkMI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/bAXPnDJ7L8h3votWGCKwZeCWkMI.mft
Manifest number:          13BB
Signing time:             Fri 20 Dec 2024 08:00:24 +0000
Manifest this update:     Fri 20 Dec 2024 08:00:24 +0000
Manifest next update:     Sat 21 Dec 2024 08:00:24 +0000
Files and hashes:         1: 8v1nXt4dVR9J0FKdRUKlv_VZvzQ.roa (hash: sewwdkF8529VZjQgg9QpkP6t2kFTBrX/b0hJNV9eKUs=)
                          2: LKPzTE1hqqd0Z1Ylu5XHzUGQ154.roa (hash: O801WZy6lNWM6flq4HLiuhIaASbT6kqfSPwoJoa3RUg=)
                          3: _4rK3YJSIVmYu7Zsp-R-UmMbzXc.roa (hash: f5L3PNxAWNJ6yYu02b7AgdVbzC7Eq4AY7J5SKieKE4s=)
                          4: bAXPnDJ7L8h3votWGCKwZeCWkMI.crl (hash: Dc4PemqJlEmPke5xHN3ijvtJN/jxb6Vv9fA4/9vm2Zg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:e3:14:fe:16:8c:62:b5:80:60:a4:b3:04:11:36:ea:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c05cf9c327b2fc877be8b561822b065e09690c2
        Validity
            Not Before: Dec 20 08:00:24 2024 GMT
            Not After : Dec 21 08:00:24 2024 GMT
        Subject: CN=77f1b55a37e449ce9e2d7828f5a42390688155de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:73:a3:02:6c:bc:b9:69:75:85:59:5d:84:35:
                    15:89:c3:22:27:73:12:8a:0b:ab:c3:59:f1:30:7f:
                    a4:5f:fa:8f:34:ea:b2:42:8f:e1:36:67:d0:c1:05:
                    68:da:6e:ca:af:9c:1e:74:1e:0f:2b:ad:b7:73:92:
                    aa:55:92:0c:25:ab:c0:c5:51:d6:10:7d:76:49:93:
                    8a:58:1f:78:87:5d:a6:ba:7f:2b:ed:1b:a0:d4:39:
                    f0:7c:ff:b2:bf:96:06:0f:33:f8:27:08:9d:ba:70:
                    60:77:2a:4c:2e:e5:a4:ca:dc:ef:cf:b1:12:e1:84:
                    f9:31:15:21:ff:f4:ea:78:d6:09:83:40:83:66:7e:
                    1f:50:d8:ba:93:0d:cb:dd:95:c3:41:c7:21:ea:4d:
                    dc:be:ec:5d:bd:44:ce:56:e7:6d:bf:e8:55:54:f6:
                    a1:91:67:56:f0:76:2f:96:16:e8:80:d8:14:25:95:
                    cf:d0:d7:8c:ba:88:93:87:f6:07:68:70:0a:ac:39:
                    55:76:07:d3:98:43:f3:8f:6e:55:6d:9b:f3:b3:e7:
                    67:6c:9f:c1:d3:f9:09:58:e6:5f:b3:54:98:ad:2b:
                    c4:52:d3:61:d9:b0:64:df:93:90:7a:57:d4:82:1c:
                    bd:c2:01:dd:33:71:79:41:60:ed:a0:e6:32:3e:65:
                    b4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F1:B5:5A:37:E4:49:CE:9E:2D:78:28:F5:A4:23:90:68:81:55:DE
            X509v3 Authority Key Identifier:
                keyid:6C:05:CF:9C:32:7B:2F:C8:77:BE:8B:56:18:22:B0:65:E0:96:90:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAXPnDJ7L8h3votWGCKwZeCWkMI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/bAXPnDJ7L8h3votWGCKwZeCWkMI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/2f5ec7-ac2b-4c66-9364-9a61831869ae/1/bAXPnDJ7L8h3votWGCKwZeCWkMI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:2f:b5:97:44:cd:13:e1:92:0b:05:cd:bb:34:42:ed:e0:82:
         14:fb:df:b3:0a:f8:c7:f8:ec:62:e9:0b:03:cf:11:5f:85:88:
         92:6e:b9:34:b1:27:9c:67:9c:5b:11:3d:32:f8:4e:8b:d8:f5:
         51:de:d7:72:93:7e:91:f3:c6:ae:e2:5f:8e:a1:db:7b:fb:35:
         88:95:32:75:68:93:90:b7:e0:9b:a7:7b:8e:2c:1e:5d:81:61:
         e5:40:1e:7a:25:99:03:b2:f3:64:dd:56:33:9c:93:12:5f:3a:
         1f:12:8d:6e:94:24:06:7a:38:ca:99:9a:05:cf:35:86:27:bc:
         86:e4:a4:2a:ab:c6:d1:24:de:1d:36:66:d1:2b:58:4f:55:92:
         0c:0a:13:bb:5a:de:36:9f:b8:d0:17:08:98:36:6b:9a:e9:98:
         c1:d2:20:c0:a2:df:2a:84:33:03:31:3c:9b:0b:d4:63:bb:10:
         55:b3:0d:37:8a:c9:a8:f0:e4:3c:32:3d:86:29:06:e9:54:42:
         09:d9:47:18:0b:43:49:a0:37:88:1c:93:4d:e7:5e:74:81:01:
         60:43:3d:39:79:5a:20:69:0f:33:92:63:95:74:d4:19:ff:ad:
         f6:dc:63:ef:ec:ce:e5:84:37:46:ac:8c:13:9c:15:45:56:e6:
         cc:28:b8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----