Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
File:                     1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json)
Hash identifier:          Ha+GKYtPr94HH1oAXoOM+ERBC1BtNRpkpLxBMSkJ0Ss=
Subject key identifier:   27:3C:20:B5:37:15:B9:4F:FE:8F:4E:CD:2E:79:0A:72:E6:9F:FC:04
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Certificate issuer:       /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial:       0194BCE0804A6B3EAB8743F450BE36FEEDA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
Manifest number:          14A2
Signing time:             Fri 31 Jan 2025 15:00:16 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:16 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:16 +0000
Files and hashes:         1: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: 5pXt/QM2js4Cx1bTSAAOHGdT+qkvV5KI/1wNREdHaYM=)
                          2: 97T1FKP4AB1wFygDf_IjY6gh_W0.roa (hash: b+uL1I+CF8JWEeaj5CSinTGLvmB9uwh7dpcntKLQtgU=)
                          3: 9RbdKPEk5Zeg-TAbZENukofktFI.roa (hash: Vf1QjfmNqEu+Hhc1U+JHo0rXDqjV2lzW4nu8pUAvSPk=)
                          4: DF88ZnxNDnDdL7m_tpQtBOrCA5c.roa (hash: i5iFKm2PhqfkKwRSQfA3liCU+8QARl8+rKyoXe3x8yQ=)
                          5: EztfE7ahTGyI03m5wjMxdTF4r4Y.roa (hash: m/s4koDaWiEOAQCLE7pDh94YYCArrZMJ/h+ZdgkDPPU=)
                          6: FeJyQOZn7XuQb_04TECQjxW1LhQ.roa (hash: fpKBRIeY550YfEmrHoa8Dgqejo+YEdy8Bt1tNrYDiCc=)
                          7: HoplqEj-n_AFspE4Wkk6llxhUjs.roa (hash: XwYiYjxVBKz7NNA9iHsZMV69zxlIHiKWQZD6RKH52y0=)
                          8: O4g-iW52UftISVHkW3-yPro5wkE.roa (hash: W/Q5kD3b3VDNOCdF88ASTOOY5t63U9RDRHLUOjnN+6g=)
                          9: eIIy3gr4iW31K7Z0TDyYfiPIC20.roa (hash: 1OhLz2GkEhqW74cgO0W31kCn0nMoyh5rygPNaedp7uk=)
                          10: eKvaPcUJvVmBtVXzUPhsCAb-D6w.roa (hash: 8Nx/IwZ/ohBd9TIIZU+TkSY/XuhfEz0nc5dwcrtsWzQ=)
                          11: tjmex91I7dJnD023VIWq1boNPLk.roa (hash: d7b90ryBvfYcu1eHmFplVZMJtAYKyEN3QoPLIOWafyY=)
                          12: ubCtS1VfMlpqc29JR5yJamthyao.roa (hash: UKhp7stItN8bt5SS2ldJQEedsCZck6Jd4Nur78oK3eA=)
                          13: vRM-SZQZ9WJ0XQQ278XKE1t0Eew.roa (hash: ox+5CMMHJyI+TwmBaJfMwL8IhAyocB1xWi95CBSAXM0=)
                          14: y74zxfc3T7TxFAzKOoJ3K2ImCgQ.roa (hash: 9cXqO6+RkqL3vFTAJ96TMt5j8uyMT6hOmvxxHIxVvmk=)
                          15: yYg3T8Ah1yuxHz6D5ehi7z823QI.roa (hash: BG6boV1lZkhAvIrJNBVNIFX81voSjiHSdy+yfJw4k5k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:80:4a:6b:3e:ab:87:43:f4:50:be:36:fe:ed:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
        Validity
            Not Before: Jan 31 15:00:16 2025 GMT
            Not After : Feb  1 15:00:16 2025 GMT
        Subject: CN=273c20b53715b94ffe8f4ecd2e790a72e69ffc04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:75:96:1f:fc:94:9d:1b:3a:77:49:ca:90:14:
                    dc:d6:d4:39:63:dd:13:d0:0c:38:6c:89:3a:1b:ab:
                    2a:86:86:6c:da:23:63:06:f0:f4:41:8d:15:4b:cc:
                    6c:92:21:96:9c:80:f8:f9:99:63:a9:3b:61:29:f6:
                    62:94:01:ee:79:91:57:a7:da:6c:35:d8:af:59:6f:
                    80:cd:9f:d3:ee:a7:fb:28:89:7c:c8:f5:e3:de:c9:
                    b6:6a:ee:9a:a6:ef:5f:f7:d0:e9:08:64:c0:2e:35:
                    6a:c3:c6:08:0d:2f:bb:f7:ee:21:4e:c2:26:e5:b4:
                    9b:33:80:d5:82:13:91:05:46:36:2b:ad:92:f5:36:
                    e2:0a:61:6e:0c:35:45:4f:ea:01:a2:39:c0:a9:11:
                    06:c0:45:49:8d:b3:89:02:41:e2:b0:67:c9:88:27:
                    f8:b9:61:ed:c0:80:a7:0f:20:1f:be:da:b7:11:78:
                    59:ae:91:a4:f1:25:e8:5e:73:c6:ec:23:7b:9a:c3:
                    1e:0e:9f:6b:6d:83:9f:25:62:c5:9d:d1:19:df:b7:
                    eb:12:6e:f4:ca:4d:61:98:cc:fe:64:8e:0d:23:e6:
                    68:50:75:ee:f4:ab:a8:7f:30:4a:e1:96:08:71:03:
                    e6:f5:e7:e0:1f:b8:fb:23:06:8a:8d:2a:55:d1:06:
                    3f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3C:20:B5:37:15:B9:4F:FE:8F:4E:CD:2E:79:0A:72:E6:9F:FC:04
            X509v3 Authority Key Identifier:
                keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:d0:03:9d:e9:4c:02:32:d3:d1:c5:5b:15:8c:3a:d8:6c:25:
         bd:4d:c0:39:8d:af:b9:89:25:be:4e:08:25:b1:3c:4f:bd:f6:
         d7:95:30:19:37:30:ed:c8:d4:35:b0:12:97:7d:20:be:54:13:
         33:31:79:86:94:a5:78:af:9d:e5:02:00:b3:c3:d4:e4:06:57:
         1e:c1:38:a7:a9:46:c9:a7:e9:a0:6e:36:3f:19:50:42:eb:fa:
         4b:8f:69:91:6f:1c:56:b6:d7:cd:f4:38:3c:08:94:19:c9:c4:
         07:ef:38:b2:26:c7:76:89:d3:92:81:42:2a:dd:05:49:78:4b:
         21:52:32:e3:00:f2:c5:75:b3:ff:85:48:86:d9:a7:1c:10:34:
         55:13:35:35:80:1a:39:46:e8:78:d1:d8:e9:66:37:15:2e:5a:
         83:b9:af:07:2f:07:d2:01:33:b0:f5:19:6b:ff:ee:6c:9f:88:
         7f:93:bf:c3:e2:2a:44:54:40:51:bc:a2:f6:76:a9:64:e7:9b:
         35:38:83:20:e8:1a:78:03:80:7a:01:58:a4:fe:5f:a3:fa:bf:
         47:83:0a:e9:1e:47:a0:73:0a:a0:66:91:87:95:a8:a5:51:4a:
         62:62:5e:47:60:db:46:1a:76:40:f3:bb:e8:2a:4b:9f:c3:c9:
         d3:31:d2:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:57 2025 by rpki-client