Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
File:                     NJy71cLPQZXMbsfyH2B1gaAiTao.mft (raw, json)
Hash identifier:          UC4h2aar9imH7N/WgM5i3jiXWyF36sbSdwzPhva7RhM=
Subject key identifier:   DB:1E:1D:B6:F0:47:5B:30:27:12:DB:0B:6D:C1:81:EA:59:93:F2:3A
Authority key identifier: 34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA
Certificate issuer:       /CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
Certificate serial:       0194BD4E6E74D4E4A10CADBC9C10B106CB3F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft
Manifest number:          1586
Signing time:             Fri 31 Jan 2025 17:00:21 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:21 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:21 +0000
Files and hashes:         1: 1-6HbqA7aDlwoUQad8DAglohpzBM.roa (hash: SzZCoWo+VKjA6sRcoGc+HABxJp8zCi/nPXQ/9l6+PAA=)
                          2: 2mR5XJM5LrYDZGVcubbLp9z9mZY.roa (hash: EuQxIpZO0qFCZhL2ClxvLOJhKQDZsHqs5wudD54Am90=)
                          3: 3OyPXY9dxb63hYZ3WsY5UGByVjo.roa (hash: uls+htLMmJ9a4c10uKyvR+2gP8ZN16NCoLX6LvYydWw=)
                          4: 6ZX8OszHhJsECzIT2pWthbGNYA4.roa (hash: yAmivsrz6/2HJ5FMGGP7u21yzZpmlon/kbzZpQ7zXlU=)
                          5: 85QzFbnMGxJTY5LHGuo2Ciw9XIc.roa (hash: IxzG5S/bwgqBEnXOIi/86lsADEbT+PmU0aEP0kJ6y34=)
                          6: AYSk3ny4N8T4m-iDznkUjvMmGr0.roa (hash: RAQ457JacOvGFOuTeCKeEVDeqO721nGC/CHHvqEMq5E=)
                          7: BGb8PojootywM4xUz8SL8PtxAYc.roa (hash: SIRukHSOrZT0due7Q616vCv6geHpHEjEOM8wyPhbMho=)
                          8: BY7zogmO24IEG5UVppQeS6Gd5vE.roa (hash: p8kUsZQCJoolGFVcidzfKv54az7wkfAAI5567t8FEGQ=)
                          9: BeavfsFl5aSpbw1-ijDzNhXwEs4.roa (hash: B0qOnLD5H9ljpNi0iALUzmMxENjlqfLs+N4t8SkLrN0=)
                          10: EISxywE_eyoiVPraVYQlbZJwFW8.roa (hash: mD+yAAk0BW59U5d3sVgWMNMJmddy2oByh4BN19eFvTc=)
                          11: FGSgqrwNLhXLwg1S2ZK0xt8IR8o.roa (hash: 3X+u2TulIQ+223zfBkCoqvdCuLiPeJGT7BfA/QX4ybM=)
                          12: ID4trGdaWKJu5BbNXALaxIjZ31k.roa (hash: Pkv6z01q9dvGXVnFDwkYMbgGkDFgHerMyDhgKR/xJeg=)
                          13: MMsoFYMlf3lz5X0pDWa1k7q5u5Q.roa (hash: 2cRjKiLLq409oV3H3w03WuAOBjBM+sqVFpy4OKfY030=)
                          14: MZ5ZbE2lpKRGon_Wom6QIvvNlKg.roa (hash: J7dzG6wiFB4U2W8moykH6LVV6hyl47KsN9HkvKCq+PI=)
                          15: NJy71cLPQZXMbsfyH2B1gaAiTao.crl (hash: OO7O92I7D6DyCLo5OOFH4Lcs8HW/0I+jhp/PdAS4IR8=)
                          16: OGNgSBnS5LL9Xv4166xoSNj2Qgk.roa (hash: UpDugUA+S5inn+tM4AsMp2shynTSyqMx+49tE41PsnY=)
                          17: PEoZfoYdNr1qVIgnLZ4amvEUrag.roa (hash: SNEfapYhHSmO6/Ur6ok6ZNa7NyfMTjRxDXRwCic4N6c=)
                          18: QUnehr_kZKHLhvQEj3Ssg4_t_nw.roa (hash: pDBfZZRKwoZuTfpz6jhhOBgKtWerJ03avKek91I2yqw=)
                          19: UslAMNDGH2di8acO0CKRyggNeYw.roa (hash: Is2XzIL1X5KivLoJ0suQcLDIhE0bjKUklpVRev/W/oI=)
                          20: VvVPRq1jZpLdr3MzXS-x3hE8E_0.roa (hash: VKU6Ig/tSciCFN9BXLEvDkCnzuEOw89eJVZejOa6g+0=)
                          21: WSmq5VDWoDvyfK5N0sa9h5kTLEE.roa (hash: 8o8yTWSsFErhX2BAFuLsTfCB+lKNYkxH20K1z0u84Cc=)
                          22: XQShfPP8T7NpXfHF3bR3ZAaS_7E.roa (hash: xjzNWhe5FpZ13zIe4c3zk/xvRI8dLOaIlu7Ow5qH8uo=)
                          23: _J5JILR3g08GxLAZwtS6oNKzzbg.roa (hash: +0wOL34h1f907y9gzbHeDfv9Uc8iaCon6ZoP4ErVzj8=)
                          24: bnhnwGtxHINXcM631Yss2WLwBb0.roa (hash: vy0q+FDPe1MhIaUoThi0JFBnA0yafPxZ75/c6oik+Pc=)
                          25: cjVSdfcgI6USxReLgdHC9_M0CkU.roa (hash: K+5hqpPR7v+LnoyEKIel1in1wybIaUOudcefnvqwGM8=)
                          26: etzxX8Mp3GA5B_Ib_FwZaYGOzN0.roa (hash: czgCcSBN5hngSuxIm+qVaTYWO5esEt0dHSvgoGTBh/0=)
                          27: hVO3c0Ets_7bPIx0I4AnNlXdbq8.roa (hash: vNEMcD8st7gDGo3CzHAGzhfJgtGC0ouejqfCwswd8Hg=)
                          28: hc2McJqF4N3N5DqmfZVvhbBzlWQ.roa (hash: 4sE06Tj9fahjIdQpeuoDI6eoz2VyIxEa5JczYP+Nyts=)
                          29: iBvpdliIAK2Zf8xNOT8cOAUyIS8.roa (hash: 4MegK6q5ykGxVVP7aLQRiSEl935bFcwTgGkkgxP4a1c=)
                          30: kJufVgfjrdPcdWX3qkA2KR7YHjs.roa (hash: UenVgpDEIkOxY2nxxhtL1w6EOZcg5gQgNjcAOlbKVrI=)
                          31: kqno_oeousw5ueAimcHkmEBcyD8.roa (hash: sGt/+QgQJ5sK9hve8sGsSixqb0pi64U006Qlo4e7N3Y=)
                          32: larXL9Oe9S4uArTjfDphSAdcBAQ.roa (hash: ma0kItoUqJ36KR7dotIN1oZE5Sg0M1CpYHLILnMO2cc=)
                          33: mDXr9HSfpmLajWk9WVo50yjSiq0.roa (hash: C6uIQhkoMws0rgTbFLMpDRA3j33O2Rpp/YXOiBS0lbU=)
                          34: o4aYdhULiVqPRKgNI6DXhReJGd0.roa (hash: q04HvnjD3ixKyT1J1lG6bFE6o+ESGVzGgyEaszHyRu8=)
                          35: pT_ZWeWrDBZXlJT59YfSXenr7UY.roa (hash: a4gHqVuJr7SaqDMkDhokbLWpX48XdW1+tjxuBZTe+EA=)
                          36: uCyH2-fPRpFibOOxTNl7u6CXQas.roa (hash: tlDsieQUw597/PTZ8W1911q4kuRCKAdlDdwHG1Otktc=)
                          37: xvL0p77JiJrGiBjGCkpTdIl0pqg.roa (hash: TOTVx2FQSqH/I+BZfh59ASt+a7+rGFaqiWuc53BIqus=)
                          38: ydWaptTCZ1SNEwil1BbHypZ9Ba8.roa (hash: BhTcs+/2LQYOi7mDvF/DM/pd2EK+d2j9shnP8PN24oU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:6e:74:d4:e4:a1:0c:ad:bc:9c:10:b1:06:cb:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349cbbd5c2cf4195cc6ec7f21f607581a0224daa
        Validity
            Not Before: Jan 31 17:00:21 2025 GMT
            Not After : Feb  1 17:00:21 2025 GMT
        Subject: CN=db1e1db6f0475b302712db0b6dc181ea5993f23a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f2:4a:25:f4:c1:7c:5e:d3:d3:28:ea:e9:5e:
                    8c:83:a4:ae:19:1f:e3:59:b9:bb:24:23:f3:c1:ce:
                    18:31:50:07:95:e7:07:75:64:74:95:33:1c:76:8a:
                    ec:44:e7:e5:d1:e0:ba:c9:a8:1f:23:97:77:bc:d3:
                    41:b7:77:ef:c1:86:c9:93:91:36:14:08:14:c2:68:
                    dd:34:ef:0b:06:01:84:2e:c6:9f:d6:cd:fd:77:76:
                    8a:69:d8:e5:fc:64:0e:60:9f:d7:c9:05:2c:1d:75:
                    09:3f:45:7c:b8:c3:26:44:19:9d:0f:ce:2c:99:d0:
                    af:2a:56:8b:22:49:18:24:04:f1:f6:69:35:3c:06:
                    2a:b3:f5:e1:ac:52:79:e9:fb:b9:79:61:e0:22:ab:
                    65:74:a9:7a:36:0e:c2:1e:50:ea:02:d9:2e:4b:11:
                    cb:e3:a8:9a:32:27:97:3a:53:ba:1d:df:1f:6f:87:
                    22:60:2e:bd:64:48:2d:77:eb:02:d5:9c:fa:c8:05:
                    26:4e:7e:f8:a4:0c:8a:82:ab:49:94:91:9f:da:26:
                    60:19:41:32:a3:a9:d0:9b:bf:1e:f7:c6:b7:8c:1f:
                    00:39:6a:65:78:88:0d:d1:6c:a5:42:ed:49:28:1d:
                    99:7b:7e:d6:da:93:e9:fd:0d:ff:13:4a:34:ca:72:
                    99:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1E:1D:B6:F0:47:5B:30:27:12:DB:0B:6D:C1:81:EA:59:93:F2:3A
            X509v3 Authority Key Identifier:
                keyid:34:9C:BB:D5:C2:CF:41:95:CC:6E:C7:F2:1F:60:75:81:A0:22:4D:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NJy71cLPQZXMbsfyH2B1gaAiTao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/NJy71cLPQZXMbsfyH2B1gaAiTao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:a6:36:6f:82:b3:05:e6:4e:26:1d:12:cd:0f:72:6f:8f:2c:
         da:c5:1a:cf:55:b6:8d:5c:e6:13:8b:b5:0e:24:f2:06:d2:46:
         0d:b9:44:59:ac:58:02:6f:ce:2d:41:7b:c9:a0:e5:a0:7d:8c:
         fc:9b:aa:4d:0e:8d:ec:41:53:0b:82:be:44:e8:28:db:08:22:
         43:26:bf:fe:b8:59:18:cd:99:36:21:c4:cc:a8:20:84:ae:46:
         43:64:fd:46:fb:42:0e:67:e5:b3:d4:e6:f6:4b:ab:1e:20:60:
         59:b2:2c:eb:48:77:8c:d2:7e:b3:2b:b9:e4:ce:93:b4:e8:c1:
         0c:f4:0b:df:96:2f:55:27:76:20:f0:d1:b9:14:7c:c6:d5:33:
         cc:b0:c4:04:c1:83:76:25:1d:7c:61:d8:ae:0d:ee:55:a4:dc:
         5e:3b:8d:66:c7:33:b5:fb:a4:a1:36:88:4a:c3:9a:73:00:e8:
         1d:7c:3a:62:24:f9:08:4f:08:ff:81:19:69:34:6e:92:a2:96:
         6b:bc:cd:72:9e:ae:26:57:fb:26:43:43:03:6a:d3:46:7f:29:
         ce:06:c7:6d:a3:2f:18:28:3e:d2:6d:f4:9c:ed:25:91:95:33:
         71:9c:26:e1:b2:6d:c5:29:3f:41:7f:0e:aa:fd:c7:e1:99:0b:
         ee:36:a6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:32 2025 by rpki-client