Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft
File:                     520NqzR6OOK4e1oiovfJ4hwYybw.mft (raw, json)
Hash identifier:          N0jrGrrk/xoCrf2mptBKJ1IThgRfA3dUHRV3BIc6KQ0=
Subject key identifier:   93:F2:4B:64:98:B8:16:7C:65:9D:12:8F:54:5A:1F:9F:08:AD:D2:C6
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Certificate issuer:       /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial:       0194BC3CADA034BC2D54A265C5D3BA0740DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft
Manifest number:          0F15
Signing time:             Fri 31 Jan 2025 12:01:20 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:20 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:20 +0000
Files and hashes:         1: 1-i_ESwYWDKjvxe-cLQFb33q5Qu0.roa (hash: MWN71QN/v297mIABIQi0BIqexEx6vQv3LxWHulQ1lh0=)
                          2: 3uMGCa1hGu4z3o3-_G7z4ipL-iU.roa (hash: W9UTR4UDUFmqfh0USMFmsobpW7zQlT5fd2b07I+b238=)
                          3: 520NqzR6OOK4e1oiovfJ4hwYybw.crl (hash: qRmiWXFy6Gztbcq+U91ql9/djaVETeWXIswJJjVmY6Q=)
                          4: 53Cd6ksm6jJ9RlO5imUtuWj1rJA.roa (hash: cQll3lCbJxJtoxzsBZdQMm8ZJ1gmBBCp3yO2flYfKKU=)
                          5: 5aybWk2Ky5dF88Dl5BHsEFM1SO0.roa (hash: H+JwBN0SZWGViTYdzpWvA1lltG+ihuV8ot5mKPyc2Ag=)
                          6: D51k8Yufzem8ogKjVaG-BE3-N9Q.roa (hash: LfZnqpQQPapIc1GbVrcmd90U2aDXCgwED1y7JLo14nI=)
                          7: EEzCfGegHPEpdqTqvMRMlcFre1Y.roa (hash: uwoju1vAFdOs3H0Q+w/qT7aEQBJpMP98DiaXonyIQ9M=)
                          8: EQAhdlSS1FIFJlau-mazb3tbQD8.roa (hash: EYIWh35VYrIjFevk0wSjam09x/CTgAsspbJddnJMeDU=)
                          9: QCPaGZ8bi2Da50RQ4k8ya1w0dq4.roa (hash: UeTuehE3XWxqnHJAwNv7xL7hPz4xW2vyEJKj+BsbTow=)
                          10: aAu5S5IbLCTcHF2sjNSq_YvIkRs.roa (hash: Ofs8Vq4O2KmWTmDnq5aKJmZojKw/IVecQ8WTuC45ixk=)
                          11: fjY_g_wwgFPVt57q0tJYGzzoSDw.roa (hash: qq4Ldl54/taiWut/8vwq9PH71gezdeLMf1VMPmsHUe8=)
                          12: pw1_qD5J6o76enPdGNTr_4Viub8.roa (hash: L6pLEncIISYEMGBKzu7DbyUXVYEOgT4kfh4modTEATA=)
                          13: qigZWtFurHaD054OcaOqq49am_w.roa (hash: Sa19eTl0ldE9k7oxfeYcou5g3EZnF3X8bF0Hbur3zdE=)
                          14: tKmEC4MB5hqVQbFF_5qlwwlDujU.roa (hash: DWWPvUtVR9Z8569/gJySYMoNxwD1GjHbMP8gxFtXEzs=)
                          15: tRNXUlx68rKP9UOE-hhExB1kws8.roa (hash: +Hd3tIKng2pbogIxn1dcX/j1LNU33NvuDwSbS4tdpEA=)
                          16: ve2cUb4I36o88cUncaHeOHK5tGk.roa (hash: 6gTupRG97QR/JQvN8ay2tdbOI4Q3EMkpnACGQxjxniI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:ad:a0:34:bc:2d:54:a2:65:c5:d3:ba:07:40:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
        Validity
            Not Before: Jan 31 12:01:20 2025 GMT
            Not After : Feb  1 12:01:20 2025 GMT
        Subject: CN=93f24b6498b8167c659d128f545a1f9f08add2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:f7:7f:de:68:26:45:1f:ad:3f:8e:da:ee:
                    39:e5:c7:8d:a4:14:1e:8a:db:be:b8:6f:c4:eb:66:
                    e5:bb:60:7c:84:3e:31:7a:94:d6:d0:7d:72:83:a1:
                    9e:ef:36:db:14:02:b3:15:8d:bf:d4:70:32:87:4a:
                    73:8a:20:8b:65:ca:7e:be:e1:9b:74:4d:3a:7e:62:
                    c2:53:50:6f:d1:87:06:b4:83:38:fa:b7:fe:a0:08:
                    e6:85:f4:d3:2b:47:c4:39:ef:4f:b4:bd:5b:5f:a3:
                    59:43:2d:13:51:b5:01:06:2d:e1:eb:91:5c:54:ab:
                    7c:44:ab:db:8c:92:82:6b:88:79:6b:15:e8:7b:32:
                    d5:a1:86:78:2e:fc:cc:e7:28:88:cc:e2:c8:da:c9:
                    a7:b3:b9:63:fe:8b:99:4d:00:47:af:ec:8e:2d:3a:
                    8f:e6:3c:a3:7b:60:c1:f5:f9:17:59:ac:a9:90:55:
                    e5:5b:99:f9:3d:1e:a5:4d:28:09:db:43:8d:58:2a:
                    65:9a:bf:75:e0:bc:6a:fc:a5:2d:72:c0:36:90:8e:
                    5b:1a:74:e8:8c:62:8e:59:b8:05:54:0a:0f:63:8c:
                    ee:cc:24:39:aa:b8:7e:90:99:31:18:24:98:92:6b:
                    01:2d:d8:72:de:91:39:93:12:59:a4:42:ab:d9:f2:
                    73:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F2:4B:64:98:B8:16:7C:65:9D:12:8F:54:5A:1F:9F:08:AD:D2:C6
            X509v3 Authority Key Identifier:
                keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:b0:cb:b0:22:0c:aa:6c:77:fb:08:80:f2:cc:31:31:01:7a:
         ed:36:7e:87:13:7e:6b:11:eb:45:93:e5:36:16:9e:26:a6:d1:
         ac:ac:a4:b5:85:b6:9a:e4:6e:28:ce:0c:27:d1:c6:41:f4:cf:
         c2:4b:50:40:a8:dd:35:97:1a:d1:87:69:1d:a3:a1:ff:4a:b7:
         4e:d2:57:d9:ae:a9:19:23:2f:df:f7:f5:89:a0:18:c7:df:44:
         31:c8:ec:95:9c:f2:75:fc:dd:0d:08:be:8a:36:3b:8e:dc:28:
         60:bf:a3:3a:d8:92:e8:23:4e:d0:79:f7:8f:83:ab:48:92:28:
         0d:9a:18:e0:3c:72:8e:d9:27:3f:f3:43:72:c4:21:c1:46:a8:
         c5:17:bf:0d:3b:19:5d:03:dc:c3:bd:73:b4:72:2a:c5:e4:0e:
         60:ad:69:f3:15:32:f9:45:d1:39:a0:6e:1a:3a:4f:82:27:eb:
         06:fc:c5:64:20:0c:50:00:67:d5:71:d9:5e:73:1d:f8:70:11:
         54:6e:a3:cf:d0:30:42:bd:83:7f:49:b8:7a:25:cb:6f:57:d7:
         c2:fc:41:3e:d8:f3:fb:71:c3:5f:b2:cc:a5:bb:f3:22:b6:89:
         51:06:b7:f6:ef:91:b5:26:6c:38:1c:78:8e:28:83:58:dd:f0:
         db:20:86:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:44 2025 by rpki-client