Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/KYeKKIjJrDEjx5X_loHxlXyg-WQ.mft
File:                     KYeKKIjJrDEjx5X_loHxlXyg-WQ.mft (raw, json)
Hash identifier:          8GUjQeVte37ytrpKQj6BOVgfQREncv1dA0gIq++Y2zk=
Subject key identifier:   8B:DC:19:B0:3B:6A:1D:22:50:BE:B9:1B:E4:05:57:5D:E6:27:99:88
Authority key identifier: 29:87:8A:28:88:C9:AC:31:23:C7:95:FF:96:81:F1:95:7C:A0:F9:64
Certificate issuer:       /CN=29878a2888c9ac3123c795ff9681f1957ca0f964
Certificate serial:       01909B73039CA4D57195EFC106AEBB03826E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KYeKKIjJrDEjx5X_loHxlXyg-WQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/KYeKKIjJrDEjx5X_loHxlXyg-WQ.mft
Manifest number:          1207
Signing time:             Wed 10 Jul 2024 07:02:04 +0000
Manifest this update:     Wed 10 Jul 2024 07:02:04 +0000
Manifest next update:     Thu 11 Jul 2024 07:02:04 +0000
Files and hashes:         1: 2LznWitOwJw0nrlmleIR1SjucLc.roa (hash: g0Tg/Ae6mIhD/x99yf7a4KS7V41tfypZQeh0BI6YDJI=)
                          2: KYeKKIjJrDEjx5X_loHxlXyg-WQ.crl (hash: wrd3Tios1mjamvIDjFy3vIaX1/2G3m+/j4bNKUn5IJQ=)
                          3: VPNe19xvXzWoRGMIFX7-3BDvCy4.roa (hash: Xjgf+vzurd/vncL7NiVWDAtL7P/PLCpabCTrIajDNzg=)
                          4: _RunQ5O74rbmNkV2HgwlyC4u7CQ.roa (hash: myNebH1OQScE+Kro/UAlzsQoAoqNjDnyZVpYC3wqp5g=)
                          5: eSHOLEOW0ZT8f0zX3SE5relMhZI.roa (hash: 6R155v8lntee4rE1CGDeUcgNWoFhZyqonWuqCr4M730=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:9b:73:03:9c:a4:d5:71:95:ef:c1:06:ae:bb:03:82:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29878a2888c9ac3123c795ff9681f1957ca0f964
        Validity
            Not Before: Jul 10 07:02:04 2024 GMT
            Not After : Jul 11 07:02:04 2024 GMT
        Subject: CN=8bdc19b03b6a1d2250beb91be405575de6279988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:f2:1f:0b:55:60:20:b7:2c:e3:92:ca:cb:65:
                    8e:31:e0:ee:e4:64:c2:a6:a3:a1:80:fd:de:85:05:
                    61:95:a9:cd:3a:e0:2e:fe:b4:24:34:09:0d:18:c3:
                    cd:a6:a6:3f:52:85:8d:f2:03:8f:be:23:ae:33:c9:
                    c9:97:6f:70:08:b0:2f:79:ea:02:73:84:93:09:0c:
                    dd:bd:f0:bd:78:c7:7f:8b:c3:48:d8:fe:69:5d:13:
                    97:57:af:11:4d:51:99:5d:6a:77:78:69:a4:bb:76:
                    b8:9a:e2:0f:c7:d2:83:cc:81:c8:8a:e7:4e:63:31:
                    b0:cd:77:05:9c:73:e6:c0:1d:e1:ff:e9:b4:66:e7:
                    c2:19:b3:be:d3:fb:a0:28:aa:79:65:92:c0:c2:e5:
                    c9:e7:b0:58:c9:0d:0d:a3:6f:4b:54:37:31:36:51:
                    95:6b:ce:1a:98:d1:a2:15:40:b3:56:2d:29:9f:f6:
                    82:cb:ef:f3:72:97:41:98:f1:72:ed:4b:cc:6c:78:
                    84:2d:fc:fe:e7:54:f7:98:ed:5f:3e:d5:31:a8:8b:
                    4a:59:64:f3:4f:6e:88:5e:32:cf:28:eb:25:d8:d8:
                    3a:be:1e:ae:4a:8f:30:ae:c0:48:62:85:c7:fe:c9:
                    7a:ad:53:70:7b:e0:5a:18:43:8e:1a:a3:54:8f:32:
                    73:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:DC:19:B0:3B:6A:1D:22:50:BE:B9:1B:E4:05:57:5D:E6:27:99:88
            X509v3 Authority Key Identifier:
                keyid:29:87:8A:28:88:C9:AC:31:23:C7:95:FF:96:81:F1:95:7C:A0:F9:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYeKKIjJrDEjx5X_loHxlXyg-WQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/KYeKKIjJrDEjx5X_loHxlXyg-WQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e3aa51-6129-493d-91d2-51751b29f8b4/1/KYeKKIjJrDEjx5X_loHxlXyg-WQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:3c:8f:ce:43:11:b4:0e:f3:89:f9:9b:80:4e:1a:73:0d:cd:
         31:3c:58:f2:97:07:49:30:51:94:ad:1e:90:bc:e4:2e:52:4f:
         3b:41:af:10:c8:74:a8:81:45:e1:61:e5:37:ea:f4:31:ee:c2:
         b1:15:83:cd:d6:b2:0e:c6:83:a5:1b:9f:5e:52:a7:0d:e6:91:
         af:b3:cd:3d:54:1f:8f:f3:48:21:6d:1d:34:2b:25:0c:a0:7f:
         e2:2a:1e:46:21:13:c3:10:9d:a1:ef:ce:35:f4:0c:19:f3:fc:
         09:0e:87:ef:ba:e9:cf:d2:44:30:fa:1e:4c:33:a8:bd:48:84:
         9b:52:c4:ef:91:8c:b2:84:6e:4c:6d:d0:48:c5:13:de:5d:6d:
         4e:bc:36:67:07:ae:68:31:9e:70:25:a4:1f:04:ea:74:3c:50:
         0c:f5:b0:5a:a6:6c:4c:56:37:14:97:2d:53:11:d7:c7:d5:7f:
         40:f8:40:33:94:a2:c0:56:fa:04:9d:b5:fe:ac:4c:c8:c4:37:
         c8:33:1d:66:05:97:08:26:6b:73:04:f0:48:fa:e9:dc:aa:d7:
         05:75:36:41:ac:73:97:8b:99:26:33:a4:1b:71:ba:75:15:99:
         78:8d:ea:32:ed:d4:98:2a:55:38:ab:0a:ff:30:77:89:c8:bc:
         61:1d:b2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----