Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/bcDQX47p6Vj8ld5l3FmiFBxfHv0.mft
File:                     bcDQX47p6Vj8ld5l3FmiFBxfHv0.mft (raw, json)
Hash identifier:          tar79TD7GwIniTzlGZKtb0JM9z0VmLIpWatnS6fqvsY=
Subject key identifier:   A7:7B:2C:91:E3:39:B3:49:D6:AF:67:7E:EE:3B:F5:38:02:E2:59:65
Authority key identifier: 6D:C0:D0:5F:8E:E9:E9:58:FC:95:DE:65:DC:59:A2:14:1C:5F:1E:FD
Certificate issuer:       /CN=6dc0d05f8ee9e958fc95de65dc59a2141c5f1efd
Certificate serial:       0194978B33E1B893A2D68B64E78F06980760
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bcDQX47p6Vj8ld5l3FmiFBxfHv0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/bcDQX47p6Vj8ld5l3FmiFBxfHv0.mft
Manifest number:          141C
Signing time:             Fri 24 Jan 2025 09:01:09 +0000
Manifest this update:     Fri 24 Jan 2025 09:01:09 +0000
Manifest next update:     Sat 25 Jan 2025 09:01:09 +0000
Files and hashes:         1: 0uN1IrDa2eHWnvtb7KMgQp7nPd4.roa (hash: a//pwChknU221zS1t/N/7lHWhe2+pDu9+gy9m8WxO1Q=)
                          2: Z95Ygi89f8LPJ06butvXFWvZK_U.roa (hash: o6HwkfxYMUCJNVk0nfNy6db7pO3BIH4cTe1hsU4m0jI=)
                          3: bcDQX47p6Vj8ld5l3FmiFBxfHv0.crl (hash: z1KivbjSc/v3wh9VquWrmCARvujN7p57x+t2e1dj9Sc=)
                          4: tiyXMKkh1c00WsEaw1I-tE1-ImI.roa (hash: A3wieewQW3Kix1vMGs+UTMXhUvBDH87xFIuGyxaYKk4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:97:8b:33:e1:b8:93:a2:d6:8b:64:e7:8f:06:98:07:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dc0d05f8ee9e958fc95de65dc59a2141c5f1efd
        Validity
            Not Before: Jan 24 09:01:09 2025 GMT
            Not After : Jan 25 09:01:09 2025 GMT
        Subject: CN=a77b2c91e339b349d6af677eee3bf53802e25965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c1:6d:33:15:4c:64:3e:ca:09:81:e2:81:91:
                    55:97:3b:4a:ed:c1:97:42:8d:f3:4a:c4:d8:a7:be:
                    2f:ba:8b:5a:57:4a:0a:b1:a6:6b:84:9a:07:f1:9e:
                    33:25:05:cf:54:a1:91:06:ae:34:74:0e:6e:38:8b:
                    7d:2a:99:d7:7e:0c:ab:71:a2:75:cc:c4:d0:e6:17:
                    4f:56:00:b2:c3:ba:78:82:47:31:d4:63:79:77:4f:
                    e3:e3:a1:6c:19:ad:db:2c:1e:a0:cd:5c:32:26:64:
                    67:a2:21:bd:90:4a:ce:59:d0:00:e7:3f:3a:7c:c2:
                    dd:27:09:5d:a4:01:d8:a4:51:4a:76:dc:fd:7f:fd:
                    b7:5c:a1:6c:a5:c5:d0:e7:95:2c:03:7a:62:af:c3:
                    bd:c3:64:25:e6:d8:5d:d8:3e:e2:2f:16:be:52:5e:
                    2a:c5:f1:a4:a9:53:ed:90:d0:c5:58:ab:6b:1f:3a:
                    67:17:05:d6:de:89:89:1d:c9:46:58:df:3d:91:1b:
                    45:9f:a3:3a:6f:20:a8:8c:e2:bf:d8:74:d3:87:36:
                    15:55:60:2c:87:e1:91:ab:c2:52:72:b2:52:a1:82:
                    e5:b7:6a:df:46:e8:36:28:1f:eb:e8:9f:fa:a7:da:
                    7f:30:57:81:d3:40:22:5a:e1:98:0d:45:27:5d:28:
                    d2:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7B:2C:91:E3:39:B3:49:D6:AF:67:7E:EE:3B:F5:38:02:E2:59:65
            X509v3 Authority Key Identifier:
                keyid:6D:C0:D0:5F:8E:E9:E9:58:FC:95:DE:65:DC:59:A2:14:1C:5F:1E:FD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcDQX47p6Vj8ld5l3FmiFBxfHv0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/bcDQX47p6Vj8ld5l3FmiFBxfHv0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1d57dd-5599-45a7-ab03-4d6ce0766eb5/1/bcDQX47p6Vj8ld5l3FmiFBxfHv0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:6f:c1:82:e6:c5:e3:67:ac:bb:c7:35:a9:69:d6:75:ff:d7:
         17:21:ba:7f:2d:3a:df:dd:2d:ec:22:ba:62:e3:d3:1a:aa:e3:
         a3:b8:a2:47:57:74:f7:5b:e8:36:4b:13:f8:16:5a:50:3c:ee:
         58:6f:d6:c1:10:d8:0e:74:4f:3e:6c:99:47:ae:69:26:e9:8f:
         81:d3:28:cf:bf:3e:73:34:47:8c:1a:1d:ce:50:15:21:3a:86:
         d1:36:b7:76:36:70:16:93:19:b1:fe:55:4d:61:4e:d3:d9:b0:
         a5:50:63:33:f2:d5:c4:88:f5:8b:67:03:a4:90:be:f6:c3:38:
         4f:e0:6b:ef:a9:f0:3c:0c:54:4e:96:29:1e:84:e4:2a:14:7f:
         40:a5:e7:04:ce:e8:11:41:2c:e4:a7:25:96:f8:d9:be:f5:d2:
         f4:ae:ae:83:54:2a:31:d4:47:12:e8:de:24:31:e4:08:e9:d4:
         43:68:25:ba:66:f6:57:69:fb:dd:75:22:e2:45:b9:aa:18:5c:
         48:c7:83:41:a6:27:d6:4a:8a:a9:84:9e:d2:d8:f2:0a:2e:27:
         9f:92:8c:61:1f:f7:ef:a6:2e:cd:a5:42:fd:d7:57:6d:61:ce:
         c8:31:da:a9:46:db:37:a1:df:bc:3f:b5:c4:9b:6a:d9:75:e5:
         2f:f0:48:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----