Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
File:                     0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json)
Hash identifier:          g6Qy0FRksaH2BzWaXtF+HcXBWqPWombfcdxfB9dY4zo=
Subject key identifier:   B5:34:EC:CC:9E:7C:C7:9A:18:56:3E:BE:0D:5D:D7:FD:4A:19:09:2B
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Certificate issuer:       /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial:       0194BCAA1883BE68CE9A8971E0C2E4DB0CB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft
Manifest number:          1483
Signing time:             Fri 31 Jan 2025 14:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:51 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:51 +0000
Files and hashes:         1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: 7y8mwNlcWnFWTpK/oWno/QDUi/hODqQD9uRrFV9vtSs=)
                          2: 0httGqgqnBD-cyBZkV5zP0LpIO4.roa (hash: e5sFUpuEkPspxdtpRMty2JvPNTXvUGFt57BwVt8wTQk=)
                          3: 20w83vHPyYnLSWr2qqWCmD2gZNY.roa (hash: ClK+X58yEmA5ygXK0mo1ANs6qUTT/V8TWnwZD7Tusy4=)
                          4: 2s4ghGsMJ4UjziczDpj7_nBo6GE.roa (hash: jn5a6RlzlWn5orrS4JyYzumT++ei7+4zrAsQWhkhOUE=)
                          5: BBOySe2ApZYQpT0wPGJ7zV8XzsA.roa (hash: N6DdRHz14Xr18smaWB+L/0EFbg9FmP8IrnnkdfkP5sA=)
                          6: BjUAlonCB1CjmbTY52apZdHRGFk.roa (hash: vBVzlWqlUuZ7F5qeBjljk7LIKAFRXIaJSFWC4T698rw=)
                          7: DRLbJL7meHAnOmMNiiVi2VhOOMc.roa (hash: Lp9UgdizeLrJK6Zry0u6HD2WAPxw4E+r1wzuyfdMmtU=)
                          8: EXfTHtw-3BJt59JkT36dPstORFo.roa (hash: MhW4Yoiges2mvr+KewFgpAREQV0Mu5obgGNxi9eeOQc=)
                          9: G8jjrx8EZbysXI_Z13e_0NqYZdU.roa (hash: GPSkTNwl/L8vVjia7LOR9ahqlqqIZvGFNcWIGIi/vHw=)
                          10: Ib_gkG0OXaC9YGgBGzmQj28oy6Y.roa (hash: Dfa7w0wU+Mwe8FRxusOe5J5w207sEqOGP3MEUAezXaw=)
                          11: Jp0UMtlRd8ZwvCOhqfD_ADrBKLI.roa (hash: mR/skrtMXmYrNl0WIwSjaGFdp8tWtvYO7SMbQmVqf6A=)
                          12: KMU9gp2Pze6tK6RqnG6WkdxMvhI.roa (hash: s7jbrR/tYQZH56SCp6DZfaO9EeWTAe129IHD4mNW6qQ=)
                          13: Ldz2Fcxy2lIR0D-Lc9uIVwn1sVg.roa (hash: 7Jrxd3qwLriiBdyBMLT8U/Q6YrwgSz/r4ZzkDOjpxzQ=)
                          14: MguR744HGmOoEMdrlIzPUQQNYfs.roa (hash: Ve4h+6FdNbKYu9bYvRE5Dbmxn7BK8VvZ01cl79qxeJc=)
                          15: PcsvqoFss2sjt8KP5dE_s9b5R94.roa (hash: 2VnZlh9WN/gvQzrunwflGg0cw7Ym2P+YsV38lpVH0Gs=)
                          16: RySOnwd5yNUvkpOdlWzbq8gD58I.roa (hash: pMm1Q5jN9tu+9MZBtGXjdw1riel86JfdVWVMRs8pgEY=)
                          17: UNh6P6o5iukKyngJ923OKln6euE.roa (hash: N5ex54TauXC69hfaRmQEjxuyvZMfnOJEFnqZWvxkb8A=)
                          18: XXSSAkKxHIvFb1XDuVgAK48p7oI.roa (hash: p4mx1wVBI5jfCHEyW7RDH/AavCZwfWlBpFNbLCutJY0=)
                          19: Y5c3qkFCpv03-ICNcuAXdHgS3cY.roa (hash: XJDCD20D/hEgr09ZL/gnt/32UJp0okrjk8WR5CoxVyQ=)
                          20: Y6R9BZ4jbo-SeP4MKzTkUzdRmEs.roa (hash: T03e4fff7Y/zXUb0yVVk+lWsYWaY+JCxTDBS+p8Hygw=)
                          21: _Ja5VSGfVwaP_RssqzUEn4YMRnM.roa (hash: IopLtmpqrddq1TLUa3ph8Vkd8Gg6tUuEa1Mf8B120SY=)
                          22: dSIvoRbcXmjEhaD-HdyHYcdmt90.roa (hash: JqFQVPXSWhIrd/AlZzo80JSKjqGLV5nybtYrZ/HoQns=)
                          23: fW0mZX2qVdA0eoUEboZhAE59bUE.roa (hash: stVjqf6xlyz/MOhoo6Rt330zmsp7vd4IC5S2fUEJ5WM=)
                          24: kqDz7smZzEggwnOtTZ91wrlBE4c.roa (hash: OteTjZY0hrzoBDeoZG9laIbeOhFIt32mklvyy1YBT38=)
                          25: m9Q0QpkVO1rZKT8wIA-lB6ceYcg.roa (hash: yW9VuP+7IZqfB9uY1adWMtzwRUiSlhz/2UYbCN1BQSU=)
                          26: oqSgizr5ODUUGjBb8_Wzxokx-xk.roa (hash: Kl53NJDKPjecKCh1ZqXsoFCQIzYfPyjvOORgLlse+gY=)
                          27: ps4Flj1BkuW7sLiIgaxaOcmRga0.roa (hash: z/miJktON8vN7qBgG9XGiJDAvY3R13S1nLYmw94yLfM=)
                          28: qlt-CjR0Oi0L3lo2PS7A4jbvIUg.roa (hash: iydTkBpS1P6s3+CKe74qws4olK3ajXbhwYqoUw/uhBk=)
                          29: tdzsaKxsamCWBVwoUkqT8RggY6A.roa (hash: Fv0PNntXjBHiuO1Z367HBdmxJtFfh7CR44dwT354/lw=)
                          30: vFNkivgTExOsjU64HiM4VzsQFiw.roa (hash: DXIqZ5v2rgtSNx+D9s1xP6RBmK/3bmgJ3j5QKRP0qEA=)
                          31: wMbP2rODQDC-jcOXAyW7ktyAwFs.roa (hash: 9dxgb9cFX2rvzK0yUiEPPHMObwlTuLCycMbvyIulqKU=)
                          32: wrIKGFup7YwdBWdBWVsf0zFw-6Q.roa (hash: a51mHdf3an/Iw4YN/cAevtKKGZXaaz3bqmztnZMgcjY=)
                          33: yNK_se_8Y1MH-IyQZOfpZj_aArA.roa (hash: Y/8odYpFkGDQCB6ybQitBRTCfwLFaWn7M7svPHhRrhA=)
                          34: z4dbT2rdI1MPHPzn2a4SSpvkt3E.roa (hash: pftbqIKgzEeVO9sl0LAVO5XHYPxIgJ6YwaN9JqNCTzk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:18:83:be:68:ce:9a:89:71:e0:c2:e4:db:0c:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
        Validity
            Not Before: Jan 31 14:00:51 2025 GMT
            Not After : Feb  1 14:00:51 2025 GMT
        Subject: CN=b534eccc9e7cc79a18563ebe0d5dd7fd4a19092b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:34:cd:20:59:92:38:6f:03:6a:d6:2d:9d:14:
                    d3:45:93:e1:35:8d:6a:1a:df:8e:8a:2d:1e:f1:6f:
                    c6:71:66:f1:43:ee:d5:92:6b:9c:cd:01:0f:bd:44:
                    1e:bb:41:75:4b:a3:8c:17:6f:1a:db:1a:60:27:23:
                    53:4e:d9:07:5f:e5:3e:5f:a9:02:3d:03:ab:e5:67:
                    e1:1f:39:a6:06:78:a6:40:13:71:03:18:30:ef:bc:
                    ed:ff:9f:61:a5:df:08:81:6b:96:2a:6a:be:4f:21:
                    7c:64:40:d0:cf:64:9a:99:80:b5:8e:89:f0:71:34:
                    b2:10:ea:8a:90:e8:ac:3a:ac:1b:de:bc:a1:92:71:
                    b7:81:4d:ed:31:a5:bd:d7:2c:3d:e9:de:81:7f:27:
                    f4:f1:5d:ae:82:d7:35:ec:06:60:04:77:b1:5b:52:
                    cb:33:7b:54:c7:c3:83:81:d8:2b:2e:03:1b:38:66:
                    18:f4:13:0c:7a:c1:c4:22:74:fc:4a:99:4e:8d:86:
                    b5:13:8e:81:d7:ef:59:b2:1e:b8:38:9a:85:c9:11:
                    b0:90:f6:25:c1:ee:2c:64:5a:f0:1f:68:ca:d9:0f:
                    c1:c8:e2:62:72:33:91:bd:ce:ae:8c:be:7e:f7:c9:
                    3c:f7:60:f0:69:29:3c:ce:1e:69:6a:e6:39:f2:dc:
                    ed:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:34:EC:CC:9E:7C:C7:9A:18:56:3E:BE:0D:5D:D7:FD:4A:19:09:2B
            X509v3 Authority Key Identifier:
                keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:2b:f6:64:3f:4b:29:f6:94:45:00:18:b6:42:eb:20:40:77:
         4d:88:85:ce:43:fb:19:67:c6:95:a2:e8:50:cb:e1:65:0c:0a:
         27:1c:14:1e:e2:f0:6e:ba:45:7f:22:3b:df:8b:5d:8a:79:eb:
         76:bc:66:7a:96:53:7c:a7:23:59:63:c9:2b:ee:38:20:fe:56:
         9a:d6:ec:25:06:6d:2e:b2:19:78:b2:bf:fe:27:58:2e:1e:b0:
         af:12:ba:7b:fb:f1:3c:6d:db:d5:09:df:20:d7:6e:39:d1:15:
         5c:7e:47:b1:bf:5f:12:3c:59:9a:f5:65:47:32:cc:b1:00:da:
         84:fc:03:56:f7:8f:87:41:40:7e:88:c1:80:79:43:77:7e:d5:
         0f:30:77:fc:63:6c:9d:c9:9f:75:05:17:4d:36:c3:8c:55:94:
         a7:43:1a:2c:ef:44:f0:29:fc:a9:0e:b2:b7:05:2f:8d:90:68:
         04:8f:17:65:5e:06:36:e2:ba:26:dc:a2:ad:94:f9:f7:97:92:
         ce:fb:bd:ee:4c:85:46:0b:54:cb:78:dd:f0:54:79:29:6e:0c:
         57:9c:a7:5f:0c:90:af:03:99:9d:24:a8:52:09:49:72:67:18:
         5d:a0:3b:7e:55:39:2f:30:06:15:e9:c6:e2:92:27:0f:82:a1:
         bf:83:86:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:18 2025 by rpki-client