Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
File:                     v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json)
Hash identifier:          3LK2gXFJ0gmomErmLv/CsEqNDfbxTUG6yXRSEp41btc=
Subject key identifier:   65:2C:95:BE:CF:F5:5F:29:18:F6:3F:0A:49:F4:0C:39:8C:D5:A3:50
Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88
Certificate issuer:       /CN=bfb097a36c2325d1031ff4091ba00a86459d4288
Certificate serial:       0194BD4EB7376992D3ADB5497AAB2CA5C387
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft
Manifest number:          143D
Signing time:             Fri 31 Jan 2025 17:00:39 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:39 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:39 +0000
Files and hashes:         1: 0Oc2gUlOBhHggQCKLFtd_Q9SZu8.roa (hash: lO8VRv7zTZ1lZGexXwpCSSefCLh4/ylUfznYotZ/r9I=)
                          2: 1-SnnIDOhH63HQ_N0BxypNJP3QjU.roa (hash: fAjpmK6Zca137o7vGKPycBeoqRjl3sX6zuEiOW/w6J8=)
                          3: 1-tVuMhvJHoeYNSWvwIs4Uj-ZhRk.roa (hash: ZcAfnmmPqdN3AkoVqXCV/iL8CT5WscJ/XlK/uMPt5lg=)
                          4: 7l7s34fjkn1jL3Cf38Am0uWsDxc.roa (hash: RQXv8xonP+6ByiA9mMkcu2T5Ofx+p+iBRXco1axJ+is=)
                          5: 8fRQ2gaaSUyxlPfMmZU6YlBuF9s.roa (hash: J9iYhZ57NpzmVPmwg60w1m9TXW93kheuWUSOq5fqcNo=)
                          6: CYNZ0RAHrT9vV8_0mrfX5LM1kug.roa (hash: O/PKWyYrv2+2Dwkphq4C7HezWG7bAEi2rS0D+m+yIdU=)
                          7: MhqcPUVWdGpPrfIWk_ee5vpXfV4.roa (hash: VZyy53zNRKBJnQR8hOjgwk1ZMB+3U3h7IQWl1MMyJAE=)
                          8: OnRHsiqDeR9lPOPphyyOmOlqHJI.roa (hash: sc+Pmya8TqVV8sQvDFxWsBcLjxza8djqPlBaIMjD3rA=)
                          9: TbvHnfpEwil0k-m-bT5qxin7QgU.roa (hash: eMD2C00X6snjPjRp1k8vdynVDBwXZs3jHeKCcB71/uI=)
                          10: U7IGGV-QzeZyFI43ALHSLR0fRT4.roa (hash: YV6O4jGhX6w23lUDlEnTBaeFdLwSgpK6hJDxevkHnB8=)
                          11: WXYX5xAiYzJj-J1cJJRJMrPl1lc.roa (hash: eRbcD2eGlg7uugMn/bCwDLTg5dFFAb5lQYD2uRhlGzs=)
                          12: a-yIKeqgoYQNBR0ZqftsK2VKwtA.roa (hash: rYqhW3CVRIKIDuB7VC8t0ykZxEcqYyXyUHcCODKusRw=)
                          13: aEX6iGvtmMCBLbcN3D9lR9wWfYs.roa (hash: ck3g/sMwdLbMyNkBAAhpjxk0gLfl6oyVxwY3SE1wY/I=)
                          14: b5qihpV_xvHz7jisdbMDV_HIvQY.roa (hash: 5tl21EPUCJWwcruwKzPtM9lBKfYlSJMmCb66eXlMysY=)
                          15: iX51NeJFLA8hZbYydiWCSJNdBac.roa (hash: feK/rKksTFQbgNdFYUDfTjFuIeyOIK8QXCIqWjoXBaI=)
                          16: l5nptPnNKKQFhoiS91lJWqnWlyE.roa (hash: e570cnA3CxKqJo/gWfnmYUg3TNwae9HIQvRpHl8vuuY=)
                          17: ljnA30NR9xOfROLBgYNtk3JZLTo.roa (hash: j0TBP2+nuBSwHuaX2USrAFWl7QAm3LV+oRIFPpLHIgA=)
                          18: m2LdD5mJb9uSRMZpWCDvnGsS-1Q.roa (hash: J5WFUDon+cM2DTrsQDK1CHd33XsZFilcmheGufzHxHA=)
                          19: mclNf4bSFt9zruWTpd4m4MEyVzM.roa (hash: XlAEFr1TWS3BT/lafylN5Pl3NVyaBtZCZ/ZvLEzRc/k=)
                          20: ocfuXCVMkG1iC3B_UfKU4_eAETA.roa (hash: sqzdBjIbz2nHdeb6vTsoG89AvTmuvfRmTuCYXqV0hik=)
                          21: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: ZGplWAnZlrTpLvD1fSm726MBY1mzOseDIKotLn9igzY=)
                          22: zIqL-e-xuHByBuNpYQeVAN56dIk.roa (hash: DfRfhMBFYRjS89naokHSrKzYfuZi0JN2/uXaKrvL2KE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:b7:37:69:92:d3:ad:b5:49:7a:ab:2c:a5:c3:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288
        Validity
            Not Before: Jan 31 17:00:39 2025 GMT
            Not After : Feb  1 17:00:39 2025 GMT
        Subject: CN=652c95becff55f2918f63f0a49f40c398cd5a350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:b2:90:29:53:c6:98:aa:fa:1e:d1:d0:38:
                    43:39:19:7b:0d:b7:4d:56:2c:9f:f9:e0:e8:a3:23:
                    08:9a:a1:13:76:44:1f:24:44:32:15:49:b1:bc:66:
                    f8:91:16:0c:39:ed:1d:fe:23:ea:0c:82:29:97:40:
                    d4:db:14:c8:d4:90:d3:45:6b:a4:66:c2:45:b5:99:
                    1f:17:db:e6:c8:5f:f8:9a:f5:2f:04:e5:20:c4:f8:
                    90:84:20:d6:eb:6d:d2:a8:27:d4:26:5d:70:41:cb:
                    6a:3e:65:a8:be:96:1a:aa:43:d0:6a:e0:94:cf:42:
                    bd:2e:b5:6e:9c:af:c8:27:9f:03:c0:a5:e6:75:07:
                    ff:9a:0f:e6:d8:fd:14:be:7e:81:2e:25:93:f0:fe:
                    62:a0:72:a6:ef:81:3c:39:ad:14:bf:d3:63:a9:82:
                    e1:dd:6c:49:78:0a:6d:57:8f:2f:c2:90:34:3b:d0:
                    8d:ae:21:61:2a:d7:46:c0:ff:8e:ed:d3:09:ed:1e:
                    d3:b5:08:f6:41:16:ff:07:31:28:a6:f7:08:37:1b:
                    0f:3c:a6:08:10:50:4d:e4:1f:99:bb:77:77:71:ff:
                    ca:8d:5b:97:22:da:cf:ed:e3:55:b2:1b:a7:3b:61:
                    a7:61:6d:a9:3c:c5:a6:12:c6:a5:24:26:23:86:a7:
                    18:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:2C:95:BE:CF:F5:5F:29:18:F6:3F:0A:49:F4:0C:39:8C:D5:A3:50
            X509v3 Authority Key Identifier:
                keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:c7:4d:61:ff:4b:f8:73:31:c2:d3:39:c6:2d:7f:2f:10:e1:
         3a:cc:e1:1f:7d:10:7d:c9:83:0a:d2:ab:8e:d2:dd:25:29:3a:
         74:3d:ac:80:e8:ec:75:e3:6d:ca:51:28:6a:e7:53:58:c1:bf:
         4c:4a:9d:28:43:02:b8:c7:6c:46:63:d4:2e:bc:d7:c0:93:ca:
         63:7b:05:17:d8:11:5e:fe:53:22:c4:e5:52:87:ba:75:44:1c:
         8f:1b:9b:aa:cc:39:67:9d:ac:3e:35:17:fd:b3:36:f8:50:82:
         7a:bd:64:22:d9:fb:14:ce:c6:38:74:f1:0d:2d:4d:78:ba:4a:
         f0:c6:d6:6e:eb:2a:8b:35:f4:b8:68:d6:ef:ce:1b:6d:6d:4a:
         e4:08:c9:97:25:48:19:42:05:a8:81:5b:57:1f:b7:05:c8:62:
         68:db:d2:8a:c0:50:c6:45:25:32:f8:d9:1d:b4:fd:63:33:a0:
         b0:7a:d3:30:b5:a6:f8:83:b7:86:54:79:23:c3:b0:70:c5:42:
         3d:3d:24:f7:16:56:d3:52:c8:cb:d1:44:f7:e3:f0:24:22:43:
         c7:97:1f:77:b9:0b:e2:04:1a:1d:48:db:78:3b:70:97:3b:53:
         6b:c9:7e:ce:df:b6:cf:e2:57:3c:1c:7a:68:27:3b:3c:67:3e:
         35:fa:83:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:43:50 2025 by rpki-client