Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d4dfd6-d240-4b0e-9a01-e1d69fa908ca/1/SoC70IQDhxBo_fH8teEBIUf2Fhk.mft
File:                     SoC70IQDhxBo_fH8teEBIUf2Fhk.mft (raw, json)
Hash identifier:          xReALpNuu51MlUqRk+AuHYwcg9YmrhLAHzT6hqrGM6g=
Subject key identifier:   85:EE:FD:B9:26:43:0D:F9:19:E5:F0:63:4A:8B:45:18:3D:C8:35:63
Authority key identifier: 4A:80:BB:D0:84:03:87:10:68:FD:F1:FC:B5:E1:01:21:47:F6:16:19
Certificate issuer:       /CN=4a80bbd08403871068fdf1fcb5e1012147f61619
Certificate serial:       019005E253384781565C63BBB22458471EC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SoC70IQDhxBo_fH8teEBIUf2Fhk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/d4dfd6-d240-4b0e-9a01-e1d69fa908ca/1/SoC70IQDhxBo_fH8teEBIUf2Fhk.mft
Manifest number:          0971
Signing time:             Tue 11 Jun 2024 06:00:36 +0000
Manifest this update:     Tue 11 Jun 2024 06:00:36 +0000
Manifest next update:     Wed 12 Jun 2024 06:00:36 +0000
Files and hashes:         1: LEpgeVi2CnzsZn8EBbKAGokZQdc.roa (hash: EHpshAopjLiC3DDyviC4zCd0PIyPTf7R5b2kdVDfKZI=)
                          2: NX1i_LGq0gblWnqIV5LjYFC5xCw.roa (hash: udSGXJvGkkySW2pGS8ns6npqEKMW/3zF4+L7NMWRAQc=)
                          3: SoC70IQDhxBo_fH8teEBIUf2Fhk.crl (hash: frpUiVyU/iXDcQdl2y3obFSufMuMyNrIGsy59nd/170=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:05:e2:53:38:47:81:56:5c:63:bb:b2:24:58:47:1e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a80bbd08403871068fdf1fcb5e1012147f61619
        Validity
            Not Before: Jun 11 06:00:36 2024 GMT
            Not After : Jun 12 06:00:36 2024 GMT
        Subject: CN=85eefdb926430df919e5f0634a8b45183dc83563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7a:c2:b6:7b:de:b5:a5:4d:75:72:c4:2b:2b:
                    fd:c2:32:26:da:83:03:b7:db:68:a6:78:7f:0f:b8:
                    28:29:b7:a6:9a:47:c9:9c:8f:d5:76:54:aa:7b:8b:
                    4c:b3:18:eb:32:62:9c:c6:dd:c9:5a:73:70:d0:bf:
                    07:7d:9a:58:32:e1:7b:9b:bb:c2:6e:48:22:b3:fb:
                    ca:97:b4:99:3d:35:4a:55:3d:ee:e6:73:1c:15:07:
                    de:a8:8e:16:45:97:14:57:28:48:2b:f5:a4:76:a2:
                    26:f3:b1:28:ca:7a:39:64:4e:1a:88:3a:4b:66:28:
                    12:61:98:cb:6a:a4:70:e6:25:e3:fa:aa:cb:60:79:
                    29:ab:b8:f7:a1:98:a8:ea:17:22:ed:1a:43:56:05:
                    5d:ec:cc:cb:a2:59:a9:93:80:a9:49:a5:3b:90:31:
                    6e:2a:19:28:c6:f3:fb:e4:c9:33:b0:4c:f5:fd:4c:
                    f8:03:e2:46:37:27:4c:d1:37:31:c8:45:53:57:a8:
                    84:91:eb:7b:bc:78:0e:b6:4e:4d:9b:c6:fc:ff:d1:
                    4a:c8:12:98:f6:66:5d:5a:ec:3e:25:88:7c:c4:ec:
                    3e:2d:2a:b2:d0:c2:7b:bf:8d:78:4e:af:ab:46:77:
                    f0:5d:db:2e:4a:12:f7:7a:b4:ab:bb:32:8d:d7:13:
                    ba:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:EE:FD:B9:26:43:0D:F9:19:E5:F0:63:4A:8B:45:18:3D:C8:35:63
            X509v3 Authority Key Identifier:
                keyid:4A:80:BB:D0:84:03:87:10:68:FD:F1:FC:B5:E1:01:21:47:F6:16:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SoC70IQDhxBo_fH8teEBIUf2Fhk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d4dfd6-d240-4b0e-9a01-e1d69fa908ca/1/SoC70IQDhxBo_fH8teEBIUf2Fhk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d4dfd6-d240-4b0e-9a01-e1d69fa908ca/1/SoC70IQDhxBo_fH8teEBIUf2Fhk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:47:df:a5:cf:e5:f8:9f:61:87:40:04:d7:80:dd:f2:4c:f7:
         71:4f:49:d2:52:f7:fa:9f:51:b9:53:bd:73:5f:bf:be:10:58:
         e9:cd:29:66:bd:40:e5:47:5f:3f:ff:ef:34:99:2d:de:a9:f7:
         76:e4:2d:e8:03:1b:7b:08:81:98:eb:e4:b3:fa:5b:f5:16:66:
         d6:a8:01:21:03:40:d5:f7:55:35:55:c2:66:7e:38:86:16:f1:
         54:94:db:76:95:08:c3:8b:d2:ff:d9:03:34:fa:20:77:4f:31:
         ed:63:bb:81:4e:4b:7b:3e:e1:a7:0b:dc:fc:f2:58:d8:5b:4f:
         8a:4e:da:9b:9c:17:26:3d:42:9c:85:e0:3a:ce:bf:ac:64:6b:
         06:8e:75:08:f6:4e:fc:2b:91:b7:b2:d2:f0:0a:5f:27:73:e6:
         65:f2:40:08:d4:e7:5a:e2:33:19:0a:31:f6:3b:fd:4f:6f:8d:
         c3:e4:26:fd:83:a7:57:c3:ef:74:e8:bd:3d:f7:c0:a9:de:44:
         5c:b2:30:ab:d5:ec:45:86:95:c4:35:d7:c9:6c:2e:76:8f:28:
         ef:bf:ff:97:55:a3:c2:36:29:33:08:dc:6c:8c:5b:e5:22:df:
         b3:68:c7:72:ba:c0:66:b2:25:ee:ec:48:34:eb:e8:4b:8f:af:
         25:b0:61:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----