Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.mft
File:                     ry8uht18yRAWWP-NWlJBRF_NHWo.mft (raw, json)
Hash identifier:          75XJf6NCXObNo1RxQClyG9mSA+A4ulvbBLiPzrx5gKc=
Subject key identifier:   50:50:78:31:80:D5:39:2F:BB:4B:63:5F:93:F6:77:12:8F:28:7D:35
Authority key identifier: AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A
Certificate issuer:       /CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
Certificate serial:       0193AA020A9788228C9DC91ECAAB5DED6ADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.mft
Manifest number:          130D
Signing time:             Mon 09 Dec 2024 06:01:20 +0000
Manifest this update:     Mon 09 Dec 2024 06:01:20 +0000
Manifest next update:     Tue 10 Dec 2024 06:01:20 +0000
Files and hashes:         1: 77uLGNcnoUguJvnX2MnDufeu_W8.roa (hash: ApZNoqCbxWwtgEHdHBD2cuIp4hk8KdCI4tCD3Fubme0=)
                          2: K8N0yqu1VFWB7yBXtQ2RQoX6dMs.roa (hash: 69CYY95Yxi4cSSpcMZQk1EAQYBon/yI+Af+d2/WmPE8=)
                          3: KSSYQZn_wGHzg5GY1ibpYm32WJM.roa (hash: /ealf7ESvxzCrylhRdz3rBN6i+7pLmueKtVo5z87Ubk=)
                          4: Ngago5xydQXn8EljYnQRJsPfPSQ.roa (hash: awb2Qqqf5jTME6Mi/k48AB0AFWHo4yAHTfMjcn+P6Bc=)
                          5: OnSzQzHYH3rKBbQZRmh10lN7Tn8.roa (hash: xaFDPRJs6LQhs7k7DhbVrRBqZ1AjepqeB8qSCngxHG8=)
                          6: PF2QWCZ-w6UlB3T03zhThI0wBPE.roa (hash: u1K8Z27vsVLdO6a1L6pG2gXB1j0sbC8bjn4I/OUwsp0=)
                          7: ZgRVU36XGxqiFzQw2MZcw0BSY64.roa (hash: S4af1wfe6FB/Akb8MpUOCV/EF5hJCyXWvOfUnOmWtfo=)
                          8: hfsefRxnGudqHbW6y0bHRLVNl_o.roa (hash: /CfY/vE3/Z1Hgy+qr3ur72G646E8LquABGB9MwW4l04=)
                          9: ry8uht18yRAWWP-NWlJBRF_NHWo.crl (hash: Hi68cJe1fK8uJuWnJaTqKmo1iDdCbjKkQB6/kUbRVfM=)
                          10: uYFQ73u1JvOXQm0svWQQIL7NBHs.roa (hash: 57cZW6sQxZ7FQTZoThWTZT+2bjo3Th6YQEU7JmriD3U=)
                          11: z-Ow7GqvyxPAglI0GLCxv1XnsAc.roa (hash: VKvrH2sx50ruQQBPzOvXtNTtYBwSt2p/HJn5MXNkvro=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:aa:02:0a:97:88:22:8c:9d:c9:1e:ca:ab:5d:ed:6a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af2f2e86dd7cc9101658ff8d5a5241445fcd1d6a
        Validity
            Not Before: Dec  9 06:01:20 2024 GMT
            Not After : Dec 10 06:01:20 2024 GMT
        Subject: CN=5050783180d5392fbb4b635f93f677128f287d35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e1:5c:ce:96:e7:3f:dc:cb:e5:3e:3e:aa:eb:
                    4a:b4:bb:27:bd:bd:52:62:87:83:b7:01:a4:40:17:
                    68:0b:4f:8d:a3:66:4f:14:23:b5:70:dd:87:bb:39:
                    2c:ab:a7:09:c1:c1:72:4d:9b:d2:25:13:53:6c:2a:
                    69:64:62:c1:df:79:e3:75:e0:2c:a2:f6:19:16:f6:
                    da:77:bc:d4:d9:45:d1:14:83:1c:d1:f2:37:cd:5d:
                    eb:bf:4b:45:7b:9b:3c:23:99:99:33:96:fa:ef:a2:
                    6b:70:7d:86:7b:eb:85:cb:5c:12:5c:62:82:6e:72:
                    1f:d9:ce:76:98:64:b2:ee:8c:53:eb:4e:8f:90:2a:
                    13:b2:3d:85:91:28:bd:00:5b:90:2e:11:13:67:47:
                    50:e0:99:75:d2:44:9d:86:21:ed:ed:ec:7c:8a:c2:
                    26:07:47:83:05:99:3e:fb:8e:38:b8:78:95:91:d6:
                    fa:15:2c:8c:70:83:4d:15:56:82:18:ec:c6:da:11:
                    50:21:b7:49:f1:cc:34:84:3b:a6:74:5a:cb:bb:d4:
                    53:f0:c0:e5:e3:af:73:18:b2:1f:24:cf:11:6b:fa:
                    4e:0f:38:b2:01:9e:0e:29:2c:49:4a:8a:53:88:41:
                    00:c6:11:a7:cd:74:c4:fc:a9:5c:86:75:f9:76:b2:
                    db:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:50:78:31:80:D5:39:2F:BB:4B:63:5F:93:F6:77:12:8F:28:7D:35
            X509v3 Authority Key Identifier:
                keyid:AF:2F:2E:86:DD:7C:C9:10:16:58:FF:8D:5A:52:41:44:5F:CD:1D:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ry8uht18yRAWWP-NWlJBRF_NHWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e08b8e-bf22-435c-8b1f-46bb7aec1f30/1/ry8uht18yRAWWP-NWlJBRF_NHWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:1e:45:ce:f7:17:ac:66:e3:01:99:a9:75:6d:fc:f1:59:36:
         27:b4:27:a3:f0:37:e4:00:ed:9b:68:d6:36:f5:bc:63:a5:b7:
         73:59:34:ee:36:d8:c0:bc:d3:7a:cb:f8:66:0a:06:c2:30:67:
         b3:e6:ba:98:5e:88:ad:fb:92:1f:43:c9:f3:82:c4:d9:04:d6:
         09:53:4d:2d:ee:de:78:ca:1e:63:8b:0a:ac:d7:19:fe:67:5d:
         9e:4c:be:89:c1:be:3e:be:d3:96:bb:a5:05:5a:e4:53:eb:cd:
         e2:c9:8e:33:3f:0f:41:96:d6:fe:54:38:80:a9:07:bb:83:95:
         4d:96:5c:7c:fa:15:1e:42:c0:41:74:a1:46:aa:a3:2c:23:2c:
         8f:8f:9f:2c:35:fc:0b:8f:41:d4:57:8f:66:1b:c2:d6:07:a7:
         00:6e:09:b3:a0:e3:df:41:bd:81:f4:ed:81:d7:a0:56:2c:af:
         39:47:52:09:41:e1:da:7d:6c:e7:d7:56:8b:c1:70:e4:63:a1:
         34:c6:3c:eb:cc:b7:bd:18:a2:82:47:eb:b5:2c:c1:91:04:1a:
         78:c9:12:ed:bc:fb:f4:1d:2c:f0:46:cb:1c:a0:24:2c:53:92:
         f9:08:40:5d:07:db:87:18:50:c8:31:20:5f:40:af:0c:c8:ac:
         63:65:72:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----