Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
File:                     DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft (raw, json)
Hash identifier:          Sh1+qtYD6wRI6X3YGTwSMo7HPLTR7xdW1Qtv5bshcv0=
Subject key identifier:   29:EE:14:25:0A:CA:12:92:D7:75:25:09:54:91:1B:F4:9D:F0:50:2F
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Certificate issuer:       /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial:       0194BC3CA88760F8BEBE5C25B2D2574C21AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
Manifest number:          0D1C
Signing time:             Fri 31 Jan 2025 12:01:19 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:19 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:19 +0000
Files and hashes:         1: 1-_faHefIQXiAFnH3LNhBjrPU09I.roa (hash: 7InTaPWZ/MJFW8mHuJCEltHrQe/oJd/TwCKtlJ9uvvg=)
                          2: 2TU9zRlg4BupLvfFfZ7nbqZ_3fY.roa (hash: Q+LzT1EBZiXr+my5xIMRRPF6wrKo64s9mQmOfTnOJXc=)
                          3: 3cmiag-OFPHODxLb1KMirqc2FN4.roa (hash: di5HoeNyYyjDjq7zRaZtas9CEUZ0AIaTVNE5BqvZ7NU=)
                          4: 3r_fS2iqTHTpqVrmAdmmLy8h5Uo.roa (hash: 0H+5GAjDMQaP4P2zWWWPVnZ5P/dbumJ+SDOD0JaXOts=)
                          5: BSzGMTPMq-wN-qGAx5X2D1S9LyA.roa (hash: BvSVSe8mZx3zsVFBrO0OJZXXGEEERCM53ZjLPIwFvwo=)
                          6: CTV38ZT_kPdUbW8ChEbSmJ6D_xY.roa (hash: yntCphEUvGZYiNPfiCzzcsgLL+fxDyvsgRdAxblWwLU=)
                          7: DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl (hash: RHR9U5u1njeZcqMjjuO0y2OxSZ9gMtzGi8nXNBsPkB4=)
                          8: FWQETtkN_oL4od4Al2G3UDgEL5c.roa (hash: xaM2HH/7hc4DXnOzRecNa3benIQdBaCSuVr3xBWruxw=)
                          9: I3HMzg_QmJAYWZSbsxJu7-jY00E.roa (hash: GSyQIbiBxY1fX31ira1MjHAesY8aGG/De+BRbgOx2qc=)
                          10: J1hhtf3gTs8cmUIBfj_g7V7c5qk.roa (hash: Str6Vmr/NRskfnPMQpbp4pXOuly0BQP6BEJAk+C3Jm4=)
                          11: NH-qdGdxHCpX5CDsQhguqEOykxY.roa (hash: E/LgZO/m2w+mLkyhvDik5z2GhndjLiq2AhqBPUy3cAQ=)
                          12: NmY3Cr2hTmLmrJ4cFR4Mbk6O2f8.roa (hash: 3vnVC3SAIOmJWTDh9HP/nluckKtdf1CaP0omwy3IFuI=)
                          13: OKEgLmB_4ei0G0uw28caa8G3iPw.roa (hash: w8AbZTm+uTbT/9sxDIvDozMxX1t2Mfifb772t5Mh9zE=)
                          14: R10kzlmrHw9WAyAvK8-iRqbaBaA.roa (hash: XqcsBbYv+/IKS1qiI7jigpCKSJFXUkDBvTdSLdA8/XI=)
                          15: U5MjMe7sq9QhciMhBsqkAcgoOc8.roa (hash: AttJnibiqhmT9C2Pn8Q6zsdO/wjIuWHmaJ2E/be22rI=)
                          16: Y8BxdOG4E83LClpFnmkd0iyca1M.roa (hash: Ho2liFzRTVRlfVeCSm6qtB/bpgcQQigB8GNzfsMibJM=)
                          17: a2k-bxYcmm3kHfce2aU5FLKv-4E.roa (hash: Idu0EAICE2kNK56b/YbhSusdo/ak8Y2nDki9I5fmt4o=)
                          18: dfRwLnd7H7w_OVSLP8kz-J08HvU.roa (hash: FPuBb8+13HSQLJU9CpclAE8hKmqwuolZDcDf1PJudFQ=)
                          19: dtKVxUHGrAkfKqCobm6KXtRp0E8.roa (hash: 83vvkJxmaytP0GLHWBg53bMWqx3mr1WoGbL8xTTfoKE=)
                          20: eobitmCPSS93nZyZrt6H4tzwfb0.roa (hash: LnX7b8s+/yLhrNscuvO3jZ4nog0puSgY6ARRzJz2m78=)
                          21: ivaRRc1DWzJYCrjzmD7SPHajmck.roa (hash: fbqrU3gLkOHm9Lw9w1LVFyGxETrg/SyMnPOPP5yhyR0=)
                          22: jI6_drTo1PWnufC4oiNHSu223XA.roa (hash: Ni1IeOuPqg+nIvkmnYu+vOs52S50BNNNPDhfXtty6xU=)
                          23: mGwtUKTp1lrZYeXsHRygkPmeOjs.roa (hash: IXq7ynhykZbaN/EO7syj+TvBCLuqP/D/GJNTwgfgRF4=)
                          24: sbxNn528r3_zzXNbv7r2uOHDqfE.roa (hash: qSGnUn/ItuImBIisLX01AnYKn5TPmOvO3e69Iv0XU/o=)
                          25: t1LshJm8xEx-87XbFhNq7UZM0do.roa (hash: qxpyfe2Q7y0I+2bbmEdIUUqvN7x6u3MnxvZPf3Uv5NQ=)
                          26: tYTCXjdd6a-Lr6S2LTPv_OpkXmc.roa (hash: GHmsgW330iSp8of0BZELcAg4KzkX+Jd8lu+4iluVCwo=)
                          27: xNs_MXSsSqQhb7POy7D96jrbBfE.roa (hash: Kqde4DiWfgPpGL5KKhrxdr3e5I5JwanO0Au/BQUqUf4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:a8:87:60:f8:be:be:5c:25:b2:d2:57:4c:21:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
        Validity
            Not Before: Jan 31 12:01:19 2025 GMT
            Not After : Feb  1 12:01:19 2025 GMT
        Subject: CN=29ee14250aca1292d775250954911bf49df0502f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:bd:95:75:72:f3:01:34:c4:ae:de:01:93:79:
                    b6:7e:23:35:bf:4f:15:0b:c4:e1:a9:a8:c3:16:18:
                    fa:44:b3:cf:2b:1b:82:f4:21:42:83:ca:72:b4:47:
                    80:c4:ab:18:88:16:23:82:b9:c2:12:03:b1:a3:bd:
                    62:c5:3a:85:2b:69:30:64:91:ca:87:bd:92:c0:18:
                    6f:76:77:8e:e9:87:dd:0f:3d:21:83:16:58:3f:e8:
                    52:45:9f:fd:0c:79:e0:c8:fc:c1:61:7e:e1:3b:47:
                    1e:c9:e4:65:21:a0:53:bd:a4:ee:fc:46:1c:1f:b2:
                    87:d3:fd:48:de:a8:00:8e:a5:b6:41:69:a8:d7:af:
                    fe:b2:5c:9c:a5:3c:b2:16:01:9b:26:f1:38:44:78:
                    3e:65:bf:ca:38:f8:8c:d4:63:3c:e4:e5:62:80:93:
                    37:5b:50:0f:3a:54:36:aa:30:07:9e:fa:4c:b7:96:
                    4f:fd:e0:c1:f5:f8:3b:61:a9:d7:31:67:0e:27:75:
                    5b:f7:02:da:4a:fc:dc:d8:32:28:7b:20:b3:91:7d:
                    72:3a:2f:cd:1b:c6:f4:f4:75:81:88:07:2f:f2:3c:
                    0c:f2:5a:92:89:ca:7c:e7:19:01:f0:75:6e:ac:80:
                    62:6c:5f:b9:73:2f:26:67:b6:a7:52:2a:89:84:00:
                    c3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:EE:14:25:0A:CA:12:92:D7:75:25:09:54:91:1B:F4:9D:F0:50:2F
            X509v3 Authority Key Identifier:
                keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:71:6c:67:0c:fc:8f:88:2f:a1:b7:7f:e8:4b:e0:98:e8:f1:
         56:b9:cd:1f:70:8f:4e:e3:50:28:5b:e4:97:3b:2b:5f:d4:a0:
         08:1c:55:02:ab:4e:a9:77:73:f9:20:25:4d:73:d0:af:d8:41:
         04:61:b6:28:30:98:9d:b7:96:c5:cf:62:56:2a:81:b4:fd:19:
         4f:e8:df:79:f0:b7:77:4e:9b:6c:a7:a2:02:4b:81:a9:07:14:
         6a:e0:7b:fa:7b:46:ea:f5:a4:c0:18:69:02:40:e0:5b:81:35:
         03:e6:04:9f:57:94:1d:0e:a3:c4:e5:da:7c:5c:08:2a:c1:3c:
         33:77:4e:85:c9:a5:ca:89:4a:54:a4:a8:c2:36:45:a6:f1:8c:
         b0:6d:44:4d:c0:3b:9d:6a:04:42:43:6c:6c:97:10:26:fe:6f:
         8c:4b:28:6c:9e:28:fd:6c:d6:40:25:cb:4c:99:a2:3c:c5:f4:
         20:74:7f:2c:74:70:9c:c9:2d:40:40:58:45:a3:06:87:ff:e3:
         b4:14:ee:c6:d1:23:eb:b5:7c:24:e3:f2:95:09:f6:3c:e3:14:
         ea:a1:2c:0c:37:12:a6:8b:16:39:79:a5:2e:37:f7:e8:73:83:
         80:06:08:44:65:27:f3:97:a0:1a:45:2d:ae:d5:f0:f3:6f:8c:
         d0:36:ca:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PKiHYPi+vlwlstJXTCGuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjk5OTA0MmM1ZTIwMDZiZDVhZWI3YTA1ZGUxZTk2YTVl
NzM2NjQwHhcNMjUwMTMxMTIwMTE5WhcNMjUwMjAxMTIwMTE5WjAzMTEwLwYDVQQD
EygyOWVlMTQyNTBhY2ExMjkyZDc3NTI1MDk1NDkxMWJmNDlkZjA1MDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5r2VdXLzATTErt4Bk3m2fiM1v08V
C8ThqajDFhj6RLPPKxuC9CFCg8pytEeAxKsYiBYjgrnCEgOxo71ixTqFK2kwZJHK
h72SwBhvdneO6YfdDz0hgxZYP+hSRZ/9DHngyPzBYX7hO0ceyeRlIaBTvaTu/EYc
H7KH0/1I3qgAjqW2QWmo16/+slycpTyyFgGbJvE4RHg+Zb/KOPiM1GM85OVigJM3
W1APOlQ2qjAHnvpMt5ZP/eDB9fg7YanXMWcOJ3Vb9wLaSvzc2DIoeyCzkX1yOi/N
G8b09HWBiAcv8jwM8lqSicp85xkB8HVurIBibF+5cy8mZ7anUiqJhADDQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnuFCUKyhKS13UlCVSRG/Sd8FAvMB8GA1UdIwQY
MBaAFA0pmQQsXiAGvVrregXeHpal5zZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUt
OGMxNTM5NjViYWM5LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8yYzMzMTYtZWZjNy00OTUyLTllZmUtOGMxNTM5NjViYWM5
LzEvRFNtWkJDeGVJQWE5V3V0NkJkNGVscVhuTm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJXFsZwz8
j4gvobd/6EvgmOjxVrnNH3CPTuNQKFvklzsrX9SgCBxVAqtOqXdz+SAlTXPQr9hB
BGG2KDCYnbeWxc9iViqBtP0ZT+jfefC3d06bbKeiAkuBqQcUauB7+ntG6vWkwBhp
AkDgW4E1A+YEn1eUHQ6jxOXafFwIKsE8M3dOhcmlyolKVKSowjZFpvGMsG1ETcA7
nWoEQkNsbJcQJv5vjEsobJ4o/WzWQCXLTJmiPMX0IHR/LHRwnMktQEBYRaMGh//j
tBTuxtEj67V8JOPylQn2POMU6qEsDDcSposWOXmlLjf36HODgAYIRGUn85egGkUt
rtXw82+M0DbK0A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:24 2025 by rpki-client