Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
File:                     1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft (raw, json)
Hash identifier:          tWrpJahXje52nR8QC/LSF7+7OPeWyVKC5mEqE4URsVg=
Subject key identifier:   28:47:24:DB:D0:28:55:AF:BD:B8:A7:A6:B2:CC:B0:13:21:01:FC:CC
Authority key identifier: FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C
Certificate issuer:       /CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
Certificate serial:       0194BBCF052890402267747A150F70F33308
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft
Manifest number:          1441
Signing time:             Fri 31 Jan 2025 10:01:34 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:34 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:34 +0000
Files and hashes:         1: 0OeAqS6vX3gO6vvCqqj93y9hg-0.roa (hash: 4e6GVSZZmDnDLgJOl3djtnEbqT5lDhaJq4dAZ/qU/lk=)
                          2: 1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl (hash: c2zBKc5BuAm/RqWEp8qb8V+GDb9fdlwu+DMrdH2cXIw=)
                          3: D6tj7JT1P0jiEOVSthEhCTE5wmk.roa (hash: uOBUARGoP6eXuPcaSTgozIdLNVRwgpXpaylajpzEpjY=)
                          4: IHhv8_mZDx6A2j-F31Pdu0k8CrY.roa (hash: STtIVy8Sw+YzG++4aOUBuN18lGWUI/cMQ7xzdEE/ceE=)
                          5: LrhxRNeyx_23QLWa5vtG1ZBXoY0.roa (hash: /kvdZiHdgr3LrYazf+YoZJL5PqLcDvAeE/KjO0/IEmY=)
                          6: NBa1UmmcofJztBL8pTAUTjZFH0k.roa (hash: 86hIGHbzSCBjbpNQmq5AwTHYQV5MFxXejgndiQ6r1LA=)
                          7: VO1QZo2vfxheLbeFL1rejYxNYBI.roa (hash: FCnZcb/OtfouViKRapPfAgcT5IF02/4Osl8N+1EzEnE=)
                          8: Wc2-UHBTfF-XHLzgQS0SwCmvlB0.roa (hash: 7aSWc04NFLdsEACjlaycXN0TGgVCRx18P8RZa+kCQIU=)
                          9: cUk9gF1NAvXhh8uQPdgOvohfLq4.roa (hash: kUG38NhhNKk78iTPsGRqnyUiXKkoTEwb6ImAUIs7EvU=)
                          10: eXcQTJbrXozTeKAzDqeuNqeJXS8.roa (hash: BgZU2yDI43+qdgAmRyguF06tz72w3j3d1e5R8Nv35Sw=)
                          11: h_wKw8soWFxgRuHS6A95s-ovjqU.roa (hash: c4ZYt7Tyz12qMO6YCVjf1T39qDV6z2Th7V8r47Jgtdg=)
                          12: m1zGjpaqVIfs0FT9TFYnVV0Yqug.roa (hash: 2qoTzI6foljMw6Ah++0pgV/FdR6MO3DvTBVmA5i5Ook=)
                          13: pVMgUdSHj0nlaCG6yBmxCGoOV48.roa (hash: iYu6/b1RnNkG7/TqQe3ysX2HEttIbsgucDRlivFMstY=)
                          14: udVjWjtCw8-mpprcmzafPsXqAEg.roa (hash: 4jYyql/ul3ChaZUGCo2qkL0DtI4tuS2kYKNXsqMrYh4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cf:05:28:90:40:22:67:74:7a:15:0f:70:f3:33:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faccbb72aa9884a5bf8d0e757404a17e5e23322c
        Validity
            Not Before: Jan 31 10:01:34 2025 GMT
            Not After : Feb  1 10:01:34 2025 GMT
        Subject: CN=284724dbd02855afbdb8a7a6b2ccb0132101fccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:61:8a:f8:b8:d5:f6:b3:a2:81:4d:e1:43:76:
                    91:f7:55:6e:d3:25:a2:d2:ea:e8:9c:8a:c7:5b:64:
                    f3:5b:98:d6:20:9c:88:1d:3f:bd:93:fa:a7:e0:cc:
                    b2:14:63:3c:e5:96:48:31:87:1c:a1:9a:7e:6e:02:
                    6f:98:82:cf:7f:ca:ac:d3:33:ba:1d:59:db:24:ff:
                    81:b9:42:2f:2d:79:19:6e:a7:cc:43:b7:ac:be:45:
                    2c:92:66:44:b2:fa:75:25:e4:b7:09:05:a5:5d:4c:
                    8a:49:90:9e:50:65:4f:20:39:4c:6f:7f:f7:12:d4:
                    9c:93:e6:1e:57:01:e7:7e:a0:b0:bf:e6:a5:88:64:
                    3a:bd:46:b1:e5:5c:c6:08:10:29:a2:8f:24:ec:86:
                    4b:13:02:cd:de:62:6a:da:6c:48:03:89:2f:53:90:
                    84:54:ab:db:6d:13:42:8b:a6:89:16:64:af:b5:47:
                    ae:c0:12:0f:b9:53:63:5b:4f:6f:90:ed:14:80:61:
                    cc:f7:5b:ca:f5:b4:80:ea:d4:f3:7d:c7:5d:08:4b:
                    72:d8:8d:b5:8e:c1:b6:e8:c0:88:53:7c:dc:49:34:
                    81:d3:f8:0c:d5:09:52:8c:c3:10:cc:74:f1:7d:66:
                    d3:96:fb:d3:41:c6:6d:76:b1:a2:ef:6b:e1:41:a5:
                    f4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:47:24:DB:D0:28:55:AF:BD:B8:A7:A6:B2:CC:B0:13:21:01:FC:CC
            X509v3 Authority Key Identifier:
                keyid:FA:CC:BB:72:AA:98:84:A5:BF:8D:0E:75:74:04:A1:7E:5E:23:32:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sy7cqqYhKW_jQ51dAShfl4jMiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e8cb44-a954-4672-b9a4-a49e5c6633bd/1/1-sy7cqqYhKW_jQ51dAShfl4jMiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:35:f2:35:70:c3:b9:fb:bf:58:be:50:cc:2b:70:44:4c:ed:
         67:41:84:b6:58:b5:f9:18:80:0a:25:17:cf:89:44:11:57:93:
         e3:13:d6:1d:b2:ec:38:c1:be:6b:c8:62:ef:ea:36:67:7d:9b:
         9e:cc:3d:d7:9d:9f:ed:d3:94:81:6e:f7:1a:18:b9:9a:d7:43:
         ea:be:be:0a:55:07:04:a9:63:b5:ac:11:59:5c:eb:78:03:55:
         dc:9e:dc:93:66:a7:28:0c:7f:07:90:90:e6:8d:7a:dd:df:29:
         0f:db:f7:0a:1e:f0:c4:f4:d9:57:f6:c5:3e:e0:15:f3:b5:dd:
         0d:bc:8d:97:94:de:1b:21:46:96:73:d9:f4:b8:e0:15:e0:b7:
         7b:33:70:77:c7:a1:2f:d5:2d:90:b8:d8:48:e8:f1:09:8c:bc:
         7c:32:78:c6:b3:50:e3:d9:74:69:f5:df:d3:ff:45:90:7b:37:
         04:ee:c6:32:74:15:c4:5f:fa:bd:a9:29:4c:70:0c:2b:d7:1a:
         14:6d:f5:73:86:e9:15:2c:9e:a0:23:aa:dc:19:56:98:cc:a0:
         37:c9:16:9c:e6:6b:16:04:da:ce:52:5a:d8:2d:8e:84:d5:9e:
         54:bb:37:97:71:ef:d7:c8:6e:4f:fb:03:4b:02:82:6e:24:39:
         2d:f8:a8:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:16 2025 by rpki-client