Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
File:                     iK3ZtnH3o26yNn40_uS8sTuPZsw.mft (raw, json)
Hash identifier:          6kiaFZDdmPgl4UDwMVWKhpAZ2aJDuH/UrtI7edbfom0=
Subject key identifier:   2E:D7:1B:2C:F7:58:FD:17:A2:27:D0:00:35:77:96:51:30:D3:72:DC
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Certificate issuer:       /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial:       0194BBCEC76833D32FC7050B01D4370A30CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
Manifest number:          1436
Signing time:             Fri 31 Jan 2025 10:01:18 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:18 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:18 +0000
Files and hashes:         1: 0EefvGTe-CgGPi3LClLG8zkw2Bs.roa (hash: pQ8xUeInwth0hYwUoerBSXG2avCvXMU1nbOP1RalcsE=)
                          2: 1CEIIYZi1BNa3oTJqmH_tyPw6vM.roa (hash: F6BLpQ1sJ4914gt6UycenluwMGJ0KK1fHxsO2ar2skg=)
                          3: 4tuvtAU5EM21em6mywHpmr0nTS4.roa (hash: jxm6mrM0TVZUyTmbqWifNbfxKv3TQmtW2+hQBuNoaPE=)
                          4: 5VtvZUZnOiWWHOq4Bzt3fR-Uvtk.roa (hash: 0aZFtVAEpAa0F5d0HclFHuicWqZJwsnLbj2r28DzGwE=)
                          5: BR0WpUqyVlLFgCU-al1zzwTeWvY.roa (hash: YHXk/Q5pzaU5vFP/0ClS3O8XoVVM2YYOGsR9O85YzI4=)
                          6: Ges1BmDyfYelIpgZsKsAw5hM6ik.roa (hash: gcDsXEd80REXGz0YRTVi4BsoxS9yl6U1vWpFES5hYvM=)
                          7: SVFExGqmN2rWr0pdHn2EBcXlt5k.roa (hash: YNeTDKYu1kVI5UITAgJVP4E8+UH/BHxBF+QWa3NBqu4=)
                          8: T3dYaQ_itGY8sg6N2piIETo4lNY.roa (hash: jr3iaS2h5oKJUS7JXvE4JXbV33q5i4nh8t/0oFzKNAE=)
                          9: UkcXR5GY1oJE8ql6EfUayHGo-5c.roa (hash: 7ieqNXiHBu4w3yGmh/1MmL46uIjoL27ZQaAgb0zIvtE=)
                          10: Ur9khRK7hCXitL3VAcUAYAEvce8.roa (hash: 9hx/PwnKPtBM0vXR/kqUYRApb3bCcTtpcvT1ZKRuh8g=)
                          11: UxCcWDIpfcmIxF4GEQqbNBWBqbU.roa (hash: d6xT2AVAtqIrXTNYslVlnC6liJTON2/El6rs3gVpHJw=)
                          12: Y4qGYle0DfUw7oAN69mj-K1DV7E.roa (hash: Vg8Q8yuHEGQHq23pq0u0JC3PXHTHSatzMxYCEGnmhRo=)
                          13: ZNEy3K2T14RzRnaZT87Xby8zPg0.roa (hash: Z6txybaZLKHynJqOdkdyJnlPVvcmYHBvv/qyQ5MOK7Y=)
                          14: ZZ_S8bbdhWqNksgGcq7TK0C_O6o.roa (hash: cZSS45yPpwSAtlNorKOcZLYVgsI7c5iH/VGntyl+CPQ=)
                          15: gPum4DXKDMJ6BVlCRX41E_z1RtE.roa (hash: m+nmj8yFxwPSU4MC7F9QT+i5Cc+XxFDvykCgFkarI9g=)
                          16: iK3ZtnH3o26yNn40_uS8sTuPZsw.crl (hash: WGnmMPnj4+rI7xilORzd2Sf/LkDDN3nePFRGN3BaOIw=)
                          17: lTowCxTaDHqJCTuznWZMjJY9Y84.roa (hash: g+9q/FWWHOKHdXk5UkvWMUdpA9qfkzT90Hx6LKdBiaY=)
                          18: mY1ufwtGCljFF7lZ6CWRsYHr8SQ.roa (hash: g60/pAqTVBNRMpLoOtOl1CqOXpp6KEeIdA1Y9Rm5TG8=)
                          19: rTie_7PEv6-re-3-oCL-n4T2Vz8.roa (hash: k418fDoA6+KZQZvl5i4/4Kf1761FasBs1TWPOk46NN0=)
                          20: sjMZT67l8DT5c2OCQ0eZwsJvZOs.roa (hash: eE5iDtLrCkQogodNmuQSyO46uKWAFjSRZ5se0Gx5RvI=)
                          21: uMzAGcYGyFfYg0xRGgxEE1Lf-Og.roa (hash: RhGx8DQbnjV6ldE2V5DKIbOmTIylu6VhP3FkhLKG4ms=)
                          22: vpnzE36sGjGpThv2cGB-8JWt7A4.roa (hash: QD7ZgcH/2KUBCt+7GKIhMXGxia9FaAN7lUMkf7xzXUQ=)
                          23: yeb6qJrxDHxENE-5-YT0Ja7NZ40.roa (hash: oK8BFD89TrExTlZbJ/In7+i40KH2MurB9MBJtryRnzo=)
                          24: yjNjQum49zE8oaEbbGwNjU1csGk.roa (hash: a+ZHTvcXLlXULObWqZE5DGx1Uba0NvfCvm7QVFQB2fM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:c7:68:33:d3:2f:c7:05:0b:01:d4:37:0a:30:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
        Validity
            Not Before: Jan 31 10:01:18 2025 GMT
            Not After : Feb  1 10:01:18 2025 GMT
        Subject: CN=2ed71b2cf758fd17a227d0003577965130d372dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:df:dc:5e:1d:5a:0f:a0:b9:b7:f3:ef:b5:93:
                    e7:75:9e:f2:13:df:17:02:33:f7:b1:39:37:cd:7f:
                    9a:c8:eb:17:0e:5a:5f:ca:51:29:15:c9:01:5b:a7:
                    79:b2:01:9c:c3:49:74:27:6d:2c:cf:97:61:45:ff:
                    be:9c:9d:73:fa:4d:de:dd:45:67:6e:b9:c2:4d:a0:
                    49:33:de:68:74:78:1a:04:a0:66:d0:4e:36:89:e2:
                    fd:fb:d8:0e:2c:94:1d:6d:30:fe:9e:bb:15:66:44:
                    8e:08:42:99:3c:42:ab:0b:e6:9e:1f:8d:14:a5:11:
                    8d:24:e5:1a:c0:25:82:a8:a5:c7:e8:3b:f0:08:b5:
                    69:6e:25:0a:55:1c:66:81:c1:94:2a:23:17:f6:3e:
                    af:b9:12:20:06:6d:f9:be:81:e8:fd:65:b1:bc:0b:
                    b8:7b:d4:de:01:73:db:ed:36:05:13:a4:8a:08:70:
                    be:76:38:2e:24:7c:6f:02:f2:ba:b9:74:ac:b8:37:
                    02:ce:9f:cc:28:17:d6:f9:62:16:4e:d6:30:d1:14:
                    05:b9:88:a2:f6:08:ce:74:04:78:48:96:0d:28:02:
                    92:70:ac:02:d0:07:f8:bb:d9:3a:ed:45:8f:f8:2e:
                    c8:b4:bb:cb:c1:c7:e4:ec:d0:9b:be:d2:95:aa:df:
                    e3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D7:1B:2C:F7:58:FD:17:A2:27:D0:00:35:77:96:51:30:D3:72:DC
            X509v3 Authority Key Identifier:
                keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:48:42:5b:78:4f:9a:14:6b:99:48:e3:f7:52:18:2e:7d:cd:
         f8:bb:ad:ba:96:6a:f1:2a:52:c4:d0:82:9a:15:8c:dd:63:3d:
         12:10:f7:b7:74:45:4b:e1:82:0c:1a:09:1f:06:79:97:30:e0:
         b7:00:31:a5:e4:f1:ea:05:10:4e:c8:09:13:f3:9d:36:ed:93:
         f2:d9:db:eb:ec:45:c2:0a:db:98:0f:29:71:bd:64:fb:55:4f:
         1e:ce:83:d0:c1:4c:eb:ec:00:4b:8f:85:d6:dd:4e:5b:ef:e1:
         ac:8d:15:db:51:68:30:84:e7:aa:69:46:f0:f2:0a:aa:7e:d7:
         53:d9:36:9c:68:38:73:3b:01:c4:2a:38:57:58:f6:fa:78:12:
         28:db:f2:94:f4:db:a2:e6:f7:b4:5c:7c:fd:42:00:79:f1:4e:
         08:0d:93:e6:59:08:9f:21:3c:53:f2:bc:cb:5b:36:49:67:a0:
         e5:8e:0f:5b:63:5f:ed:57:f3:ce:5e:ba:de:75:d4:a9:75:47:
         0f:52:3b:03:41:f3:4c:60:91:db:2c:db:c1:76:a4:98:b7:cd:
         9b:34:76:3d:77:70:d6:e6:30:9c:b3:50:2e:20:d5:98:28:4d:
         da:ac:a9:c1:e3:28:b2:aa:95:f8:22:58:f7:cf:d1:8b:ae:98:
         4d:d5:0d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:53:04 2025 by rpki-client