Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
File:                     jzgYVUpRgI7vuCnsdGWjIi8nASM.mft (raw, json)
Hash identifier:          VDA3MTSIBpYoD9dX9Z1/QV0D69ohE5u3moE11Lmox8k=
Subject key identifier:   59:34:A9:A8:F7:7F:A9:CA:A0:D2:99:B9:89:1E:B8:3B:7F:81:F5:1A
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Certificate issuer:       /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial:       0194BCB724770B1AA85F44C52CE7D0B0B73D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft
Manifest number:          1461
Signing time:             Fri 31 Jan 2025 14:15:06 +0000
Manifest this update:     Fri 31 Jan 2025 14:15:06 +0000
Manifest next update:     Sat 01 Feb 2025 14:15:06 +0000
Files and hashes:         1: 1-d5l7iEM0a18LhX1EyGB8md8n8M.roa (hash: 501zHAdTFZeEcvr80KDCfqteaSP9iBPoj2GeSoFGK4o=)
                          2: 1pbl9lLrLHSegTR5aMKg_vc70Uo.roa (hash: JuIlY/C1ag+dEHYXDzz9ICIcinIRd2dm1piPpM/bPQE=)
                          3: 3zrOYfPwdwhMIYtIoDWyzk7SucA.roa (hash: ruw9KhAohiZRqx+LW+C5lr9bjBdHC4VDTTsxeERmgZg=)
                          4: D9naFu6VO2lwpjmohULxFpHf9o0.roa (hash: /QUuvgGaHE+yk+5fnp+5qSsx9OmsxECFhKZjRSqaWdE=)
                          5: DKJ8DMlItMY75Xq9Y26angD9Qrc.roa (hash: d1JBE9X8OekA1Tt7Xtm/KoZAKlU3jhZeCH1lfyn8GZY=)
                          6: Dhmm9E4z9IDgJopzgLGmxrHdNQ4.roa (hash: B8DLE1dNxG4G5fXZ02aNrPdB4JUf1oXnLm020cY0Ang=)
                          7: Fex3ntehhk9YD9UIIrzJwNM9wrw.roa (hash: sq3dolfBoZQI4X41dAgCq7RgYZJhMoyQLMqp5TWhC2I=)
                          8: VjpJTcOg3A5jj9MR_Jf-2rC27FI.roa (hash: j+JKcPjYq1zl0l4R0plKeTXWGQoSZJuEOufZw9GSsFY=)
                          9: YW1hjZcECO_e-0edVIPSxYfb76o.roa (hash: Z7Jb+7gEawQrZdP5rGn/EP9zISP8MR7q05pqJZYy5UQ=)
                          10: Yf4EPkmLCRMBoZZIyHDnCPRPVEI.roa (hash: ttyqpkkqQzqqS+yO4BIrD80NvM4sA9JzqnD08LyFADk=)
                          11: dXcSjT8XLHwaAMrJxhlYycEZesc.roa (hash: vJl3MVsCu53wiiS+S6cF6AaFBwg//wkLirqkCxUkMcU=)
                          12: djNEYQKUqckFK1iM46DyL8t42d0.roa (hash: NQBuvCxVnkGQRlXPk53EZOQo+ABbplgx2/ODuq1jN3M=)
                          13: f7g9WoNm-2HicP4eAC6c6FDXbfw.roa (hash: zw4AKABwEHT1G3SslViMu4vYgw9q/wbL5miIJACFbLo=)
                          14: gvygCJRNiZjAzFCHzFEh-Jvn8p4.roa (hash: GokX4+GYxsZuRoER2H3W827pg8jM7a0dfuDGYTpJcug=)
                          15: jzgYVUpRgI7vuCnsdGWjIi8nASM.crl (hash: 2QTDf9EPyQC3n1QB8IbjraQg5PMaXtSVF99RvLKNm1Q=)
                          16: l4eCCyQbqnmNaWzCsO-CTHaJLBQ.roa (hash: +can2V5bGbRV5XkaQEn6m/2qdSAnNySkBwlFd9kA+2w=)
                          17: mfw9rN7s0JH2LVr_IrLTwFMFT7k.roa (hash: Fl3Qq4SjgxhY/P+3EJokj3AAPC+i2wSth+OMzYo5JiY=)
                          18: sHn49Wbb5PrrjUwnaQqlFkCVe1w.roa (hash: Js/zXcmF6Rja4dKWo6EIhgWUvKjRGSk5unEUfI1hOIs=)
                          19: xQd5W4e4PnDjglCYlz04ippgCtY.roa (hash: Tau6wHDOULjCaWttAcL4vrdDPhetrZL68pVWIATRLJA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:b7:24:77:0b:1a:a8:5f:44:c5:2c:e7:d0:b0:b7:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
        Validity
            Not Before: Jan 31 14:15:06 2025 GMT
            Not After : Feb  1 14:15:06 2025 GMT
        Subject: CN=5934a9a8f77fa9caa0d299b9891eb83b7f81f51a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c8:64:85:83:6b:e7:22:c0:9d:81:ef:55:d8:
                    73:92:a3:2e:04:f0:35:1f:05:5f:51:5e:71:39:21:
                    cc:b5:94:31:b1:f6:47:63:27:78:cd:83:cb:68:6e:
                    ed:0b:af:ca:3a:b7:b3:d4:fc:22:39:a2:32:76:29:
                    bf:7d:b8:5f:f1:0a:32:5f:9c:c5:27:92:9f:55:bf:
                    ec:65:3c:93:3f:7c:ab:50:07:48:d3:20:9f:c3:f9:
                    e9:f2:2d:39:ec:e0:04:2b:95:8f:a0:87:e3:1a:22:
                    e4:7f:8c:c3:5d:64:c8:79:43:30:f6:6d:80:d6:a9:
                    bd:84:19:b9:c3:30:0b:6a:d7:19:a4:19:85:a7:c6:
                    06:a2:e3:db:f0:a6:ad:3f:09:6f:8d:6b:70:ed:b0:
                    09:43:f5:f7:b6:94:b9:52:6d:0c:0b:58:80:61:65:
                    10:71:64:7d:e8:6f:ff:3e:df:df:90:27:86:0e:65:
                    04:5a:5c:b6:9b:c2:a8:5a:3b:ca:b1:09:35:d4:ff:
                    43:32:13:57:f9:8a:26:b6:75:75:33:5e:8b:3f:50:
                    e9:1d:9c:6d:a5:0b:55:a0:91:15:ef:d2:df:9e:2b:
                    ff:51:3b:b8:10:ef:dc:80:fb:9a:c5:87:7c:1c:ca:
                    cd:6e:cf:54:55:06:73:92:53:e9:94:de:01:2f:23:
                    f6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:34:A9:A8:F7:7F:A9:CA:A0:D2:99:B9:89:1E:B8:3B:7F:81:F5:1A
            X509v3 Authority Key Identifier:
                keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:70:0b:0e:08:98:39:83:f3:7e:ed:0d:e3:c3:b8:99:65:8d:
         b2:33:82:9f:43:1d:d4:41:03:2b:49:e0:22:f4:c3:d7:4c:06:
         1b:2f:7c:5c:a2:c1:0f:7a:22:b5:59:50:3c:93:bb:73:a6:83:
         b6:37:cc:9c:23:85:98:07:a0:7c:c9:a5:92:52:51:7e:aa:20:
         90:14:dc:d4:f7:12:82:c0:a7:f4:f5:17:44:81:6d:f5:55:a7:
         d3:26:18:1c:3d:70:a0:53:8d:19:ae:0d:3b:67:6a:10:32:6a:
         92:36:31:3c:ca:fb:c4:f7:ff:1b:b1:69:9f:ba:9c:92:de:99:
         ff:ce:f2:26:e3:2a:05:a4:f3:19:11:42:fd:8d:2e:95:53:94:
         65:5e:9f:b0:4c:d8:09:44:ca:b1:f9:e1:80:33:6b:98:6f:a2:
         7b:9a:51:83:65:68:64:66:20:b6:34:ee:16:e7:2e:31:ce:b5:
         ca:a9:d5:fb:04:e8:2f:c7:5e:36:21:87:12:40:9b:ae:1c:3e:
         56:53:07:b0:4e:d2:f9:81:f5:c5:0b:6d:e7:ee:39:f1:11:46:
         3a:d8:28:e7:04:4d:dd:a6:3c:08:e9:2b:8c:e3:79:5c:35:12:
         b0:07:91:7c:59:c0:b5:18:ca:17:2d:f7:14:09:69:8f:59:dc:
         38:99:40:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:37:51 2025 by rpki-client