Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
File:                     Nov7il7uSQgupijfJaSl1Q86qbM.mft (raw, json)
Hash identifier:          KH1/jbcTRWK2I3JfYZgLcC8OVtK1jb2eKy1FUjE8JpM=
Subject key identifier:   0B:09:FB:4F:65:73:E6:AD:BD:59:68:EC:FC:15:02:BF:7F:8F:D2:61
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Certificate issuer:       /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial:       0194BC72F0FA9C0BD644A8DA69F6DF31D6BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft
Manifest number:          1104
Signing time:             Fri 31 Jan 2025 13:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:36 +0000
Files and hashes:         1: 1-N0MB6K4BGhCodjphO0sGfJH9lc.roa (hash: wNvOddmKqC3vtf7NfXiGQ3Hozg+ofKLNZIEe00zLk1M=)
                          2: 1-bbMCI3xod0gOUPFmgFsyOO30Bw.roa (hash: LKqJzBII7MGbUijDJ1j/lwoVixYqcdKqwxqkwNRG00c=)
                          3: 1-wabTO2fsXFXQTzOoF0K0I_DrZU.roa (hash: RTeqrHSUS0wIUgh9aXCRzEflNtC7IYLpRr5YT5/0umM=)
                          4: 33iYPYtt5AemQ1cjM36Rt1zTHCg.roa (hash: YfFQeexiuOu0UumfbyFJkKYHRiPsF5sJX/U6ioFKUD4=)
                          5: 3Fu2GPkXt0-Lzz3eaID7XSP4YTw.roa (hash: tPKlbY89OsoO7XSwsKbenfBYaxCQfRLF8VeeCCHr/TY=)
                          6: 59BM3cmIoy1MoFuz148y_WZgCKA.roa (hash: b8nLw7Sod/Ce2ZRbJw+OEbeY/YeQr8JvhOn6OiPAFJE=)
                          7: 6blgCUf86x3rCdfBH3ieROWsyRA.roa (hash: 86kM1G7rQ1SYShoyqdcl0qpLnm5lgNUyaKELq4WGkm8=)
                          8: 6kSNO4q11KUII70MaOJKkb7-8sg.roa (hash: po7fMOEHEv78blrhtlvLrqv8BATiXO+irHU+tW7u7Us=)
                          9: 6rwN2H9TdeOGb7q8HP8JJtg4qSc.roa (hash: FcA2BwhZ6jCjWY4Hf8YuwHRI8qkKyNdVMrQdqJ8aP+Q=)
                          10: ABJStH93Tb6FchJ9fsWarHUv7_o.roa (hash: 2aWwBiU7xdii1VsEutmj7weOOLZIls6NzS14i2lKxbg=)
                          11: BlHbHmS9mfkajRuSB3z2gulWa4w.roa (hash: 2NYsBQd+cKdEzefz9xVkvbQtLnorX83b/kJ3iVuR3NQ=)
                          12: DVg1Efbw-1VF7OmnT2UlNXAKp6c.roa (hash: +oncWmQ5BpXDKZTWF4Tr8YOqt10mU/wA8TyqNvyksnI=)
                          13: F-W1PnZcCIg_t9g53Zhr8ZnRECY.roa (hash: vUOE0EzW5wlVnmrKCdNEm67M3EqZb+A0EvhCnOtIuZM=)
                          14: IN3MTD4yGkkCDB1rJO86jTqGDXo.roa (hash: 7YOMcFzQDeiJ2ivIPHaXcmOgqcdPTr50fRvwkCG59Mg=)
                          15: Nov7il7uSQgupijfJaSl1Q86qbM.crl (hash: Y194+Jp9/ukhOHidi+e7jX5ydgq7AL7hpFhC2JvTSw4=)
                          16: S7OFuNl-GH-DU5EJTYgFgwhDjj4.roa (hash: ymztFVGLR/DYVfAE234cC1kQgAmVsycMhDqhtka8bLQ=)
                          17: SKTIyHXtcBSWgsqArOetabgC6Iw.roa (hash: wlTzqtL7XXgCSVJcIXH5FrXlb2kC7qEyd0/a19pmV6M=)
                          18: SWriLr3nVJjiUOMV3ZQzft65uIQ.roa (hash: spVCEv9GHrawAsPw1EVJ3YvZeiUgfGRBjgYb4vGUxOc=)
                          19: SwhgnoZF_hBARmFUiuLLJ2EVqdA.roa (hash: 48VRNmDGNhRP2L8JLtMNzB4JM3bc2vPZU8jDlCGlZ6A=)
                          20: ZnbzYHRBvUTbEjCixu-51iq0NfI.roa (hash: H6eoYf0qoCchu+RJjza0539v8DwbGRsxOIQiPaH7Gsc=)
                          21: gAy2L-yq3jv5ULydsY0WjO758DY.roa (hash: kDdF7XHhC12P2H5eVodHGu1h34gE1iEE5luu7KRRUlE=)
                          22: iuZIYZ0Q_9xllOx0JShQ49jTsMQ.roa (hash: e6DjFwBCGOrJwzBM1pVGgmVe+0POPsOMUBPxv2SOmLA=)
                          23: nV9zpTkg41cEF2aE_Xxas5qWLPE.roa (hash: TmF18BVISDIjbdiP8hL66Gsgu4TLs2FCPMkL0xuGpQk=)
                          24: ou4-Kh9DNSjfvl0SW2m8LklQ2t0.roa (hash: kGFdPKNsDJKbeK37pMl8shm8W/kYhkK5Y6eKhGhDWLA=)
                          25: q9T06HR6r97SU-awwQlQkmbgz5o.roa (hash: ETbjB9b9hcvuMEeWyF6+hF4G9dhj7syzfHpk/6yrsfU=)
                          26: w_7KSHXu7o9ktpz_Vrh_00tv7HI.roa (hash: gkGoVuf1pEqMxqdRmFn7c7MKr+cC0H9E1TpCk2Uue1E=)
                          27: woRUexRgrjYm-1UeX3M4dxJmzd0.roa (hash: byIFDiUOYopR6OIBe4sC/1zUg7J+fkp7cf+oN0cuBwM=)
                          28: yNNBP2CYZiCkNUVUsBEkdKlDfd8.roa (hash: vCmsgqUye/JQpQ9Ozf04BYmInQnymLIG2O0wE02K/Wg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:f0:fa:9c:0b:d6:44:a8:da:69:f6:df:31:d6:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
        Validity
            Not Before: Jan 31 13:00:36 2025 GMT
            Not After : Feb  1 13:00:36 2025 GMT
        Subject: CN=0b09fb4f6573e6adbd5968ecfc1502bf7f8fd261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:56:9a:5e:b3:c9:2a:90:4b:f1:95:c1:9a:d6:
                    ef:41:8e:2c:26:3a:12:94:a6:88:1e:82:d6:f2:b1:
                    7f:89:d8:9d:b3:b5:05:6e:80:8a:eb:34:aa:53:4d:
                    b9:b5:5e:51:74:69:70:b1:da:f9:cf:f4:90:f4:47:
                    ae:41:7f:8f:1a:6a:74:6b:2b:d8:13:78:00:cd:43:
                    9e:b3:67:af:90:3f:55:8e:ca:2d:44:e4:54:31:75:
                    bc:48:51:5a:a5:65:c4:bf:ca:94:80:45:d4:f1:ae:
                    69:bc:7d:69:81:b0:dd:f1:08:de:e4:f7:44:ed:d8:
                    35:52:3f:8c:de:94:0b:97:a5:c4:02:9a:eb:d8:93:
                    51:c9:d2:cb:0e:1e:02:10:87:07:7f:d9:c5:8d:c9:
                    b7:25:5e:1e:fe:8e:43:63:55:78:97:27:5d:4c:de:
                    ce:74:79:e2:17:5f:67:d9:bb:aa:fe:a5:62:e1:73:
                    a8:e9:a3:0b:bc:7d:a5:d3:12:32:f6:a8:d9:0d:f6:
                    60:62:4a:e1:b8:f8:a3:ec:01:1c:14:d0:ab:be:1c:
                    96:db:5e:5e:21:5b:b2:74:f4:06:49:81:76:cb:76:
                    be:8e:d3:40:fe:5e:6e:a7:37:96:42:79:61:48:27:
                    c3:8b:34:84:15:f7:52:34:6e:32:dd:91:f3:fe:27:
                    b4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:09:FB:4F:65:73:E6:AD:BD:59:68:EC:FC:15:02:BF:7F:8F:D2:61
            X509v3 Authority Key Identifier:
                keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:fc:da:4c:65:91:9c:eb:1d:ef:53:6b:49:d0:c6:31:aa:1a:
         d5:7d:e2:6f:8c:cb:3d:8e:ec:b0:25:aa:d1:64:e8:ac:0e:e8:
         e7:e7:18:bd:02:44:0a:72:40:63:68:97:b4:66:fd:50:17:cd:
         0d:d0:6b:b5:45:e1:af:20:7d:bb:08:89:40:14:46:3d:7e:25:
         18:e4:64:4f:e2:b7:32:98:d5:1f:ef:24:b9:0f:fa:6a:42:f2:
         6a:34:28:2d:0c:9e:d2:5d:d8:f2:73:ad:11:89:88:eb:a0:e9:
         8b:95:4f:8d:a9:76:80:82:e9:7f:2a:ea:78:0e:38:7e:41:31:
         d8:03:f8:5e:f8:72:99:0f:84:4b:3c:22:c4:eb:d9:71:3c:b3:
         c4:00:e1:c0:bd:2a:f4:d7:b7:4c:40:74:e8:6b:3f:0d:db:0f:
         84:f2:11:d5:68:24:d6:ba:6e:cb:32:4d:0b:88:39:c7:76:d9:
         06:bc:74:26:f3:a7:21:ac:d9:d5:43:80:1e:de:20:9e:5f:66:
         74:b6:b0:05:a4:c4:f6:fd:b4:f0:1a:16:cf:e0:eb:1a:ec:ce:
         4f:f9:64:8a:15:f7:ab:e3:6f:43:36:13:a6:08:90:de:80:c0:
         51:5c:6d:98:7b:8f:27:c1:18:4e:34:cc:5e:d5:7e:08:d2:2b:
         b7:71:9f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----