Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
File:                     THhEq-9xHCMshPg8gHpCCvOARyg.mft (raw, json)
Hash identifier:          kncNgYC7U0vyCcivKOVz8dx6xVXWDpgmIoaitLhdtPI=
Subject key identifier:   64:EB:08:E1:A5:D2:3C:2E:1C:0D:3B:07:CA:05:CD:5E:82:87:80:93
Authority key identifier: 4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28
Certificate issuer:       /CN=4c7844abef711c232c84f83c807a420af3804728
Certificate serial:       0194BD17E613C91EFCDE8149D984FB53BE9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft
Manifest number:          1434
Signing time:             Fri 31 Jan 2025 16:00:47 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:47 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:47 +0000
Files and hashes:         1: 159ekJmBdzbPKpbON9hMEymGJuU.roa (hash: QP5wYUCm1hSjghfra2oVcPBPcr/BrQ1M69D/IBh13Ek=)
                          2: 788_6eQ_xFNLe9_wIK-pQKXpCzE.roa (hash: LF8TeWNVGROo8mUa/fN3lL86dQZtL7W6m2p1cv4RWDU=)
                          3: 7VL3TCVUHIkzVI-u_BV2H3VUTW0.roa (hash: 5DAqYiaH4HvpC1IHfjR7Nmgzznm6FMPuOC84EeBazuE=)
                          4: 8MxR-Tev1o1VL0t9VRgCRAf7vnI.roa (hash: acrlUTRAmmeUc2aIFqU4RxZwx6fjf2929QZq18A30Bo=)
                          5: DHF4t5PSRpk6qWKPy2mALhrDjIE.roa (hash: suENCv+FxMCoCroXS4u7UEipCrKhSFMxZ7eSrCqloAg=)
                          6: DP14eQdBJZ0IZ5xEuLsmxQbl9EY.roa (hash: I1RANQtOMkvey7c50zVN0sFWZ6sc3/FFShaZqQlcjW8=)
                          7: FetsHfbdUifY1TU89hnwoFpg5QI.roa (hash: ZHBz8QvXKu/jKruoZfTsft4ugiggH0hcJsS7NZeRumw=)
                          8: Kt5AY6bZ1gA0AyxYwkZX9eyBtTA.roa (hash: vEFM1Xuk52lqHbsTCEtx4tTiPZIq8w5DR7ss3hbOLsE=)
                          9: MfLf638cBMkfH5M2VRdb5zkozps.roa (hash: 2fcAYwjckXPjFWKMKBGwmwkGYgpmXwgfJsrW0TpRDWg=)
                          10: NOqs7ZQrrn3ai8o8Sfr5QgX_zoY.roa (hash: ewnWA3/QGkEv1H2zslDa2f3WNqSiX0NCN6++76C2dyc=)
                          11: RTDW_9ir78QV7tSH_VhKQZV9o9E.roa (hash: d4l0MWyE7MGz6KUyIY2o+vwNtkeh3WQEvCQ4JDRIKNw=)
                          12: SkDqJYtasnJYM-biaYFDlw-lbLI.roa (hash: SIZnkeDSwwVblW7CmwDd2pAiA3RYFWayoud1xIYiOZE=)
                          13: THhEq-9xHCMshPg8gHpCCvOARyg.crl (hash: m4S7i6GAjhdSx5IUh2a+jG8jtB3udpxrQqa6t+GpNrE=)
                          14: Ufg6XzRgoNG-SJwB5vLfRpSdKwM.roa (hash: JG7/C3Qu/BlDNJo3Xbaaiz8UsqXv4SIf7aVJX/4oLC8=)
                          15: Ux9zLJtd4_p9NV0Me_W8PVyz43I.roa (hash: GS5Alel3iVAtxVyr3H/1KmbzeB55m9O8mdahO6mwu3I=)
                          16: V4n_ERvR3r7FSnduE0noOKeefts.roa (hash: LPIfQu7peWz7IwtM6LejZS6t2OBvUe9ksCubWX40zoU=)
                          17: ak_XLj7BZSfR9vOAnnvTOmDEr6A.roa (hash: ikKkuXaDQk5CUy5oU8HwbfJMv8LLvWp+LKDjQ5BFERQ=)
                          18: eV7DHZCofiB8XK6t9zdEW8QBmNE.roa (hash: ziPPnswaXIfrS3ugoGocK/TB+/DsS0Y8eyLBNQhW8CA=)
                          19: ehl3MzoakHMyAhI6D9Y3Cy-GPCQ.roa (hash: c/pdm8QJPrUaNWBntBuCKT5L6EGDpSv8U+KeXzAhvgM=)
                          20: etz2hZixJbP5i4gWcSwK7LRFSm0.roa (hash: He+gUSNkDpgM/YmAlWou/f7IBd7ClRDJZpOAAsQM4Gc=)
                          21: j4rh0ZB1TNetuBYRDobHojuhdfk.roa (hash: gG/GxtjjKSA1/GWHAwQGCjfaoi/2Fsi2k0vRIown77I=)
                          22: nRd2QQHJvxWvYt2MaDtdcdyAXq0.roa (hash: yZqn0BYFHogcQ5mr/kG0CSKrE+RjbicfkkCTMtc6QdE=)
                          23: pgzL98bXwq-9exs7N1Aw8lwmeJ8.roa (hash: xy+0YdokIF7xVDG+fNdt0bMI+vPVGsiM9WuUOpAJvfE=)
                          24: tl2CuMI8daX_Uy_0-dhV_jYIjok.roa (hash: fhgp+n0E4Y3FzjH1buSmXdmrrGnvYKzvAV0R9W80bHI=)
                          25: vTuj5nkiC_3i4jeecr0ZYlh6QFQ.roa (hash: hGNi9opDGQg4RKjrBzVyQfTDJbC2WxKz4FBHifedxJI=)
                          26: yJHEdUxsuxE5hka9evM6UogprJA.roa (hash: ISigKBqS2g0TxwqY9vjjEMwica/8G6mT5W+e6wBxj6M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:e6:13:c9:1e:fc:de:81:49:d9:84:fb:53:be:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c7844abef711c232c84f83c807a420af3804728
        Validity
            Not Before: Jan 31 16:00:47 2025 GMT
            Not After : Feb  1 16:00:47 2025 GMT
        Subject: CN=64eb08e1a5d23c2e1c0d3b07ca05cd5e82878093
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ff:0e:d5:26:da:47:25:48:de:7a:21:9c:d1:
                    90:5a:fa:96:d3:98:39:f0:2b:7b:4f:90:17:62:65:
                    d1:3c:69:44:a2:c4:fe:3b:fb:19:be:02:dc:85:5b:
                    66:90:72:c0:ba:c6:81:0a:f2:8a:70:97:8d:09:99:
                    2d:04:d2:4f:27:cf:86:df:f0:a4:0c:90:05:a8:ba:
                    61:4c:9a:41:84:60:ac:fd:4a:c6:a1:82:30:5d:0a:
                    ed:21:7a:e7:d7:7f:17:54:3c:4f:37:98:7e:39:9d:
                    8c:14:15:b2:c0:be:a1:db:1e:9e:c7:28:82:e3:bc:
                    b1:08:54:87:79:73:ef:32:59:5b:f9:8a:b7:41:0e:
                    1e:87:22:4a:c7:c5:a0:eb:2c:63:d7:3a:5a:33:8b:
                    1f:b1:9a:71:17:1f:42:dc:a3:01:a1:70:a7:c4:3c:
                    8b:97:66:66:48:cb:5a:7c:28:48:38:21:b5:0a:d1:
                    61:3d:49:8f:50:e8:f0:9d:76:98:33:f0:b9:41:b9:
                    86:ff:e6:f1:98:ab:89:47:4e:16:77:df:4d:51:e1:
                    b5:4f:52:92:57:df:e7:f8:92:43:bd:1e:06:1b:c1:
                    88:72:4d:8c:f2:04:6a:fe:c4:c6:17:71:8a:59:b0:
                    83:d7:4a:98:34:21:e0:c5:2b:53:e3:51:63:3a:ae:
                    dc:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:EB:08:E1:A5:D2:3C:2E:1C:0D:3B:07:CA:05:CD:5E:82:87:80:93
            X509v3 Authority Key Identifier:
                keyid:4C:78:44:AB:EF:71:1C:23:2C:84:F8:3C:80:7A:42:0A:F3:80:47:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THhEq-9xHCMshPg8gHpCCvOARyg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/8d55c0-9aa0-4be7-82a8-dab6b83cf7ec/1/THhEq-9xHCMshPg8gHpCCvOARyg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:47:a3:c9:98:cc:77:84:87:0d:cf:ea:5e:70:96:ef:42:45:
         55:7d:7f:69:84:92:d4:56:dc:1a:59:53:73:24:74:25:7e:ba:
         0a:4c:64:b6:96:d2:ed:90:71:1b:7c:96:d3:89:53:b2:72:48:
         c2:c4:11:7a:cc:2e:c4:7a:50:ce:2d:80:68:fd:33:07:56:8e:
         91:58:cd:1b:66:48:1e:72:1e:05:27:20:7e:a7:6a:f5:6e:1c:
         20:d0:db:7f:24:33:e4:b2:be:ad:c7:b0:ac:79:49:95:71:f3:
         bb:55:c9:c0:81:4b:57:99:43:ec:f7:e9:50:b0:4f:1c:2d:8c:
         97:bc:46:3a:ee:70:d9:4c:64:fa:8b:ca:55:96:53:e3:2d:11:
         3b:f0:73:e5:a3:98:9e:15:e2:70:48:fa:71:85:4a:31:42:4d:
         02:ef:8b:20:4b:c7:e7:c6:40:bf:39:f3:7a:9c:80:7b:4f:87:
         6e:40:5f:0d:14:ac:22:ef:e7:f2:ab:63:ca:b2:e1:0f:8b:51:
         b2:b9:20:eb:a5:15:86:0d:4c:ef:da:e9:8d:9b:95:d6:3e:3c:
         ba:37:3b:52:5a:56:0b:84:95:ad:b1:42:03:d0:e9:51:77:b8:
         38:fb:0b:05:b7:d2:15:bd:4b:07:bf:3e:29:24:e8:19:0a:8c:
         b3:41:59:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:50 2025 by rpki-client