Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
File:                     tVfM1Dr-gW5JUyKL8Up13CkBS40.mft (raw, json)
Hash identifier:          ZqY1yQrsokZkSABiIRQ41fBMRoLgdRv5BnnMKU2/dfU=
Subject key identifier:   1B:E5:42:34:97:9E:BA:FB:B7:25:BD:4F:53:7F:D8:85:01:82:57:CE
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Certificate issuer:       /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial:       0194BCE0826EBFA00CCD4541C4311F483116
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
Manifest number:          14F1
Signing time:             Fri 31 Jan 2025 15:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:17 +0000
Files and hashes:         1: 3B7NNbeKRnZEKDmHNY1KeC1srmc.roa (hash: b9ZXFcLIXXCFjVrGvvhUY9iQ4k5SaEKXRcy7m/BXZ+U=)
                          2: 5C4YA50fBN7vcdBY1HqNC2bmMjc.roa (hash: sc/YMsXU3PgkkGc1oSkpeF8aFtzCCD0ar7drCdMUnQA=)
                          3: 5s5qGQoGev1jAV5c8T8dWS5HMq8.roa (hash: Br7JXU0oIeq94AWaj70g/oHJ4lU7FSYUKqT+ZWnKc5Y=)
                          4: 8IPQNKsJPkOpGC12sFlkQtMsYXw.roa (hash: Xs5ZWXQSLJ1Z58EHx7MQM3/jp/D+3KjEPCMs5TWn1es=)
                          5: 9XV7PV-zT0NQ3uZmMVwK2FfVyc4.roa (hash: u+icYkT6O1GXqZHgV8iFPlgLQe9AYTs46MWAhb+d+n8=)
                          6: AJXSyfymc0ZNXaBD4wQ_CXojrNU.roa (hash: IEKfVlGCNO0k9/PEwkKVpaVd+QI7iET2CIAUyaqWhoM=)
                          7: Bby1ejbV1djGYSim4HEmAHCiD_Y.roa (hash: aZSf68W1ZGNJVTU1oTBsygHYsnrmM5pFMvGKFYKiV4I=)
                          8: CS3fkAwQa6jbpAuBFjvlkhT4QM4.roa (hash: B07gzww+qg1cGY1+Noy7EqGS0qu6LsylkSmHxbsB5UI=)
                          9: CihCYCcRfHmYDycxhVRrCslM7wU.roa (hash: 8EK8gvioDzV5jlwA4y5lAA/cSLy5nx2+QcBlr4T3sHc=)
                          10: D8Npx5yQG7Ze4tcNJRq2T-3oN70.roa (hash: oSyETx06tyNiiNec4JR5AXYmY/qLJxXp2+L6i3DOKho=)
                          11: DEhGC8Iq7VJD9gFuEv8DsWxYOqU.roa (hash: o3ShOIsnXI28tDC5pFvykxIa2VwVahLeCwa8wlbzJfc=)
                          12: DNBsRV7t2HVO8env59jVAjOxkhU.roa (hash: u04P8i3SwISYkJ0oEkWX35FdtSG4l2gXii7MGpdcKHE=)
                          13: EC8RWNFJCuwwTQncl5DfzFYSaJU.roa (hash: /nklMpYhc5zKONNBtCKuXizg/to5ABQr9axNt5+yLCw=)
                          14: ElR1tFIaY2PsVDpiTByrXvXqpxo.roa (hash: iq5gGlEdNdHsXyZVWv/MPVHohphUvsytP0Ty+022UbU=)
                          15: Etosmvk5KGtbL-t0j1106LMKuKk.roa (hash: 7jlcFJvBe6+YwKQ3LtjezYx2qlBvClTLeUDdk08RdPw=)
                          16: FwaLh_XWuDJap-mUnxiKXWwAdkE.roa (hash: wfCRNedVrJxedkZTpykJPKkqB4bxtaE/AEv4nmUBlvI=)
                          17: GBtoLswuxuT9q-Ct6OXN5vwQ_j4.roa (hash: /r6B9YtsSkz5HiiZQ3D0LND5TwPnz38Pp1G53PkZKrg=)
                          18: GMmKt-5baeZVQ82hbvBrxYFlQXM.roa (hash: s5iUX/ExHm3pVTZBNgXMVP9bcmV8hfTJwbyd8w5AgEI=)
                          19: I6fa7upvk-8lxJh8Xg3J12wgh5s.roa (hash: bov/2d/GEEG2qFtvTVuW6lrqmm4nh/Cfgdq8NX02hTc=)
                          20: J8GObnTu1PFCSugCMrdLKf5mq1E.roa (hash: 1jZHxip7J51Fyv9OdxTBDrCovZy+VZSI9+3ycSgbnw4=)
                          21: JYfhLlnnbkNyoJf2jUaj_jWUp5s.roa (hash: j9Lqvmu7XCYD1vZZbd0oUqTAmQk9qK6hB3sojaAQRAQ=)
                          22: OkxhKGO3hHLaH6qZ2vA9JlrGREw.roa (hash: ytFzHiABycaJCtimxiXolzufiSd4PWYGRqD/u4TM94w=)
                          23: PegLLGDkYvs3XF-Lv9hiNho74dc.roa (hash: Vpb3C6Es4ErLDrckTZZ10f34MzLAYRtZRdftTDQsoSA=)
                          24: RMWbYdHceZbtSP3kPPphiVqhjKU.roa (hash: ZmPZq83tjvYdJrT/qGKDeRtwLFHx3yIuGdy+p00AfUY=)
                          25: S-O3TbcstTKMug___VSvS3cgrog.roa (hash: 3ebQ/8RxqwDIFEsCdZKDawRwthwgLIDNt8oqNlSOX+8=)
                          26: T3DHso2DgcgzSGeGCdNcHguj0bs.roa (hash: KCI6UzKi7D6G3w7EbBpxT/krna8j1J5HsGmbLXpPAns=)
                          27: TeTlCFhRmBWsP7NVZyOUSwULl_M.roa (hash: mg3r9BXAscolOOydLk1rXM5DK7srxmHtjMbydFKmjt8=)
                          28: UiJFgj53HRUljcsaPw_C3xHQ8sw.roa (hash: jdXS9rwe9fXCo5Cr0EwDavykrLDXeQzgKvuqbRIkEqg=)
                          29: Z4Zhy8JvUykV3nU0hftVOUjOL-8.roa (hash: rWWNSNbf0TpPeCx9vIr9DCtT6kmAFEPWocJVPgJZlfk=)
                          30: cfR-hVEEWkEUwMw2M1V8-p4d8xk.roa (hash: wz/4Xbt1g81a52SFupsdpkNdqPVC6kO1L1AiSoDnAFg=)
                          31: hJ_BTbBrrE1DP__8DDhe52SVKU4.roa (hash: vQOjBEpXapD1L5OKTFCIZsaTYTd3BkhoB3Yz7me/w6A=)
                          32: j4X9hBaVyPVDHygvq-fZETVve70.roa (hash: z5G+VRr3oGmuSXVR1HckqXgI/DsnIY/XOw0j8sDgvBc=)
                          33: jnf4iXKOk2Sb3JF4fAvZEna4oZ0.roa (hash: /ylqB7KyfpIhWFWFpFGMmmVvMNfolX67eNrbZDEUJW4=)
                          34: kZoxclDODrqno7bzuwJo5kd5EC8.roa (hash: HR4k2gGsfr+vjhIPEGTk4xuSSHYkt/91zGBLji1+jIM=)
                          35: mYW0ZahOVTcrAzTqNxYilfPfhxE.roa (hash: BwKgVg49yd12fGRJhBfLrcNhvxj8bT+foLtZZc8PITk=)
                          36: okLiPnx_37wLDBmkCPiMjbS6_g8.roa (hash: ASj3E5a6QDi3UoVchGVURUpzI7Z729JGPp26Uv4mP4w=)
                          37: q7b7nVWpkVbr40N_Opdu9wphH-A.roa (hash: qMPucfrLKsdpwIUrrq74FwUiMd/2EJmaJ5bJL+xDKak=)
                          38: sLqJ03Mzd2paUSWl89cFwcc4aoc.roa (hash: BdXE5xoW2k/8wUIc6tmTtpZOZ6amVghYGgF4PwTsgmo=)
                          39: tVfM1Dr-gW5JUyKL8Up13CkBS40.crl (hash: p/G3ar3eKrqRrgHMAc9FOJk/LuwPIWnqVeld2PkAuyA=)
                          40: tb3kec3C_AdEd3PbwhtotVTRyPE.roa (hash: 4jjavH36yHIelt71HPqT5lLNi8LGIY/f55sh9UE2dJM=)
                          41: vZ4v2lo2-sXeStle6vqKr87Cnyw.roa (hash: iuW5h9zDLSCcSeiWR+xV0dE4RiZoDLZqiq7ZP9qa/2g=)
                          42: yQlRBrLDeyn3TTj8ZtGhdV1-yK0.roa (hash: H5Od3PkOreooagwKDaRNuaNY56vK6MXBcQKy60Zytts=)
                          43: zbIR0kzSnqsQppAEnVlytUjNxzs.roa (hash: A5R4DtRsqGNnQjc0WtD6M5DgyLoDVTlkGrAxxgOsLFU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:82:6e:bf:a0:0c:cd:45:41:c4:31:1f:48:31:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
        Validity
            Not Before: Jan 31 15:00:17 2025 GMT
            Not After : Feb  1 15:00:17 2025 GMT
        Subject: CN=1be54234979ebafbb725bd4f537fd885018257ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:74:ed:59:98:7d:4f:44:83:9f:63:ca:a2:50:
                    07:c8:75:bf:b2:73:b4:0b:1d:76:ba:27:21:fe:f9:
                    d2:10:ca:3f:97:cb:00:ac:d6:92:31:37:68:9f:11:
                    68:7a:ea:6b:81:37:9a:91:5a:48:f6:8e:bc:d0:a6:
                    c4:b4:fb:4a:ad:d8:61:ef:0c:37:fc:a0:e0:81:99:
                    42:0e:42:9d:cd:57:1c:d6:d7:72:1e:e5:a1:e0:57:
                    b1:9d:54:09:c0:c0:39:76:44:1b:ec:8a:d4:a3:5e:
                    e1:79:d2:47:14:0b:70:56:ae:a6:1b:49:02:a9:f7:
                    db:d9:07:2d:fa:76:63:53:de:66:e7:67:d2:dc:c6:
                    7a:56:2d:72:05:d3:9b:78:be:4a:26:8e:f6:f2:4d:
                    7f:ea:2c:d7:97:11:10:00:1c:fe:67:f1:d6:e5:f1:
                    34:3b:12:52:01:62:8b:3f:45:28:0c:d4:43:3a:f9:
                    99:01:01:29:a0:2b:01:29:88:e6:72:10:c0:84:83:
                    16:88:12:f9:16:4d:3a:42:40:bb:99:a0:ad:86:2c:
                    fd:e5:9b:e0:85:9d:7a:ba:13:22:36:9d:7d:cc:e8:
                    07:ae:1b:39:f0:64:71:4d:8a:22:b0:02:a5:ba:db:
                    f9:68:82:51:0d:32:a9:82:b0:73:ab:2d:b1:60:46:
                    02:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E5:42:34:97:9E:BA:FB:B7:25:BD:4F:53:7F:D8:85:01:82:57:CE
            X509v3 Authority Key Identifier:
                keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:eb:f0:0a:db:23:b5:41:f7:cf:52:63:1e:b1:9b:b8:3c:fc:
         84:b8:6d:58:46:a0:ba:e0:52:9a:48:2b:41:78:b3:38:7d:53:
         44:d8:48:29:cc:78:61:1c:79:1c:87:76:8b:1d:0a:20:52:85:
         c6:12:2f:82:e1:b4:fc:5f:fb:61:cf:70:8e:34:45:51:88:92:
         53:c4:ee:d3:62:df:e4:25:09:f5:f3:5e:0d:ab:51:68:50:b5:
         b7:f4:19:37:ef:f7:2a:c1:6b:1c:5e:13:85:bc:f7:2c:75:56:
         7b:a5:5f:d4:80:e6:86:87:21:86:54:4b:ed:30:41:c3:f5:b9:
         ca:d4:b7:e4:4a:a2:53:44:d3:97:a1:25:65:71:09:69:10:21:
         a1:7a:8a:d8:8a:e3:54:2b:fe:f1:48:ec:e7:21:88:ec:44:2b:
         71:8f:d7:e7:b6:be:7c:a9:10:2f:73:b0:5d:a2:20:0f:c5:f9:
         9f:0b:c8:da:83:90:88:7d:5c:a2:8a:1d:57:c0:7f:77:f6:12:
         28:20:f2:52:78:c8:b2:7e:bb:48:03:54:91:3b:64:e6:14:ac:
         f6:63:00:20:d6:44:b1:95:0e:d1:9b:2e:cc:ef:52:cc:e8:78:
         73:27:aa:cd:13:62:5c:27:7c:08:ea:70:52:81:22:1d:84:b4:
         cf:48:0d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:57:43 2025 by rpki-client