Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
File:                     IbrXTn9sCUmic2pXR4SW19i0UOY.mft (raw, json)
Hash identifier:          DcOnekDK66NLonlc01GodlmswGqvWloJbWZIAnG+DPU=
Subject key identifier:   BB:B5:36:8C:0F:93:D4:EF:1E:03:A3:F9:E6:00:E6:1E:C0:F5:60:7E
Authority key identifier: 21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6
Certificate issuer:       /CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
Certificate serial:       0194BC04D5E3B8A8199009277F382111FA95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft
Manifest number:          1443
Signing time:             Fri 31 Jan 2025 11:00:20 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:20 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:20 +0000
Files and hashes:         1: 0PF2Op7lanUcUc4dVCdRpdsHc84.roa (hash: aSXvgQxfT8WK8M8rTK72F51UgR5bwPkfCFYHP3aKG1Y=)
                          2: 1Y7K4blWAZHGgkz6cGb5ZoPSCOM.roa (hash: XIDyWuMbZXIO1KkLIX18XoZbD/SowG9R10QeiAHlybg=)
                          3: 3TokWR4YD8bSZEEhB7xAs3QiTtE.roa (hash: RQJgzQDwW0ULI6tga86UlMO09rIAHDn5nerh47DR2BI=)
                          4: 45ZvyF7xANO7oU8k244Wf_nM3cg.roa (hash: QXWSX4rEhyOTrZv3SPfF8VWleNqYfWCc+6I7qGhfk1I=)
                          5: 6OvmO88KKOc8CtrkvPzsR6MSEKs.roa (hash: 4FgApVfY1F3xZe523Zz7vmTZbE2+lW1x15AArGZ6WOA=)
                          6: 9yUm_bz_RXGZH-mtJkHR8akzm_k.roa (hash: 2U2UR62KBxAi2LijKPUjfHnVCqBns/15mz9vTIs1eAg=)
                          7: BW-tMglcHAD8hq8_tMy9T1opQZ0.roa (hash: 4sNnGgRCRJjpN+EP586jNMgHdq80C+5wgfEN0wRG/RY=)
                          8: BoUvBrx0IDoCV7igXomSTVrwZ3Q.roa (hash: 5K8lWEVpRFDHKqwVNUy3zxyWI8cCApiqoJH/Oj4tZxc=)
                          9: Ci8c4lijM-itsGBnOoGvfjxFVD4.roa (hash: IwkrVAcoM8fcw5GSh/qj2juJAHVqPWudn41+HXh3nJA=)
                          10: DtF9x864qfz0h6T6-RLkkMbHSko.roa (hash: LTzdHB1bHl9gmWN6/zoB9cUBE8Lbwn21hSVQRSevA1U=)
                          11: IbrXTn9sCUmic2pXR4SW19i0UOY.crl (hash: 9RBSxcalU/HYpZyVIgCdWJwA68XmTLmW2ZJvKCuspzE=)
                          12: KbwQBsAYQORWx7Y_FShphGNRyLo.roa (hash: RzEqTMBjUlVmk4NBbUY8EOKmW3+zfmtaDUK21QbwlLg=)
                          13: MnnjVsrqBDG_8ftlohQU9XLrWu0.roa (hash: MnkHECc84Rp2h6SlxxWikch/bzusps5VLd5OSQFD3ZA=)
                          14: NcJMjN4nc_WU-RktQLq2mseG8B0.roa (hash: 9rXixbqxp9Dkq7Fn93hKRad4F8KX7mhhdlxPLt9S7oU=)
                          15: On0DEmf-01HORZk3spXyektI0Lk.roa (hash: Bar0MHXwwTasd/Ac6N80OMRmJdgWaPAig35Wp/SdC24=)
                          16: P3duXCf_SU-ruF-0SM0xP3hJrbg.roa (hash: Wz0gx8sci2TKNjiAPM4+y/n4dasu0DT/P/nk1GKM2eo=)
                          17: SKlifCETEAFXBdWkk-WfdsNy0YY.roa (hash: WZwGpczX8dcxXo/gVUG9Bptn8WUp9BPgohzMG0Hhmqo=)
                          18: T6nEcoCRS4zJvOoLpVBpYfJ5byE.roa (hash: OEoT731VBzYCZlj5T8oXOZFmDmzxrX9V75qQxiq4Sm4=)
                          19: W5GuTda0LPuZQbm6SVvfp_MJnb4.roa (hash: MxHlBOQsFSdIGJ8MSdXOgLL4iOOekt3UXJ2hsmc2gMw=)
                          20: WhKzVDUi8DcVQRZuEN6A_F-qR34.roa (hash: ZhsnSmI1l4ujTt7J/dvfHtZhoQUOvBLUqbxqn6FdNi4=)
                          21: Z8F8LaVAH1X1z0GrFD9zjtYBUHM.roa (hash: PjaS7pkJHF8AkVCk3qTrzlLnBSIPCF/w4lam5MBO7+M=)
                          22: fc85n9-kc-W5Cgqomk8JDto0ZeA.roa (hash: 0IptxCTFAzNODhcgWUQwVWQ1lyUf5mVW8te8c9wh2bQ=)
                          23: iyWADMcnmUX-0b3WwxYKzq-CLVU.roa (hash: 5JEUiaDW+cNxk4QBpPE38lig0s8F6dYI5WgEscns2AI=)
                          24: nQRl8_DxYdIOkvfPQm4OWVwwfFU.roa (hash: USCzcfwJiRWUroT/fskb2U0F+oCQ1ZJZVMvOptwO65Y=)
                          25: sfuqtbITGETwDyxObTV9tSdxUig.roa (hash: sn1NoVscQcjp8B7fAwnfrJhKtUJ3jL34Qx8apAv9XaA=)
                          26: tsgcp9nPa4ryX-lM9aA7jaetGuw.roa (hash: TqQY0JeOtPOj3kk/ofcVrEDuonPlDG78sdlZPSCcMgs=)
                          27: vpxZNIbKhAWHvZIcDU6_kLIATUM.roa (hash: ZaEkz95WVay/ZQCPxoWnxUvbR3MH6Iv2iCzXl4tWU2c=)
                          28: wAiYG69Hz1DYtkZJtFhqB5euCvs.roa (hash: 0rW78YPWF8/Ix9D/G22sK2jrzqc2KZ+zGeQnY4xrMiI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:d5:e3:b8:a8:19:90:09:27:7f:38:21:11:fa:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21bad74e7f6c0949a2736a57478496d7d8b450e6
        Validity
            Not Before: Jan 31 11:00:20 2025 GMT
            Not After : Feb  1 11:00:20 2025 GMT
        Subject: CN=bbb5368c0f93d4ef1e03a3f9e600e61ec0f5607e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:07:42:eb:69:b1:fb:87:a1:70:ca:60:cb:fe:
                    e5:cc:71:08:55:67:4e:0c:dd:f9:b1:70:9f:9a:62:
                    7f:0f:f2:53:79:35:8c:c2:a1:f1:02:87:29:6b:4e:
                    6d:99:17:db:84:80:45:0b:dd:18:7c:ea:75:a1:a6:
                    8e:61:bf:ee:21:08:83:6b:c9:f9:d1:44:95:ce:af:
                    f9:20:bd:18:3f:aa:ad:71:0b:92:48:21:89:09:91:
                    29:68:ba:cb:62:38:da:88:77:63:7a:44:4a:8a:ac:
                    d1:c2:15:18:60:c2:77:d9:57:dc:3c:5a:8a:27:d0:
                    03:00:67:20:96:2c:c4:fa:3b:e5:49:13:cd:be:95:
                    4e:0f:c8:db:7a:6d:23:24:75:72:19:ed:19:1b:03:
                    b0:6c:6f:a6:24:9c:28:09:9b:02:fe:05:9b:3f:57:
                    c3:ed:73:2f:41:19:6d:2c:74:8e:a5:2a:5d:ac:c0:
                    60:8b:7e:e7:1a:d0:f5:05:28:ea:7e:07:ce:32:a6:
                    00:42:48:5f:a9:9b:d8:6a:d5:40:d6:7c:06:a7:1a:
                    4d:e6:bf:89:6b:9f:6e:d1:df:79:6a:f2:d6:85:c4:
                    35:19:0a:6e:60:05:79:52:a2:ca:69:77:42:0c:17:
                    dd:b5:f3:ad:2a:81:bc:f3:e1:b3:d8:67:4e:83:ae:
                    31:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:B5:36:8C:0F:93:D4:EF:1E:03:A3:F9:E6:00:E6:1E:C0:F5:60:7E
            X509v3 Authority Key Identifier:
                keyid:21:BA:D7:4E:7F:6C:09:49:A2:73:6A:57:47:84:96:D7:D8:B4:50:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IbrXTn9sCUmic2pXR4SW19i0UOY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8ddc38-7a1a-4906-a8ed-4433229a8473/1/IbrXTn9sCUmic2pXR4SW19i0UOY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:d8:fa:61:3a:4b:df:4d:c4:81:3d:d4:7a:c0:06:89:27:2a:
         ab:92:25:ba:b6:0d:d9:a0:8f:00:6a:0e:c8:d0:cf:a3:1b:4d:
         ef:78:17:74:83:d1:34:de:f7:d4:54:13:6f:95:78:a7:96:2e:
         48:ef:24:3c:52:7f:42:1c:37:61:aa:c7:69:7b:2a:86:09:14:
         91:52:bf:15:e7:63:e8:8a:fb:67:b2:25:52:79:2f:4b:08:7b:
         c6:fd:fa:bc:07:89:43:dd:95:53:6a:f0:3f:8e:cc:06:0c:50:
         b3:d6:1c:c2:61:86:1d:57:0b:88:f2:f5:0a:c3:c6:e6:b0:2b:
         6c:e2:b0:e4:0c:c1:ec:9a:e5:ec:d5:6d:65:09:a9:84:93:57:
         82:09:72:0f:0c:a0:02:de:5d:2a:7d:b6:0c:17:91:3d:52:d8:
         87:50:10:cc:b1:fe:ae:b6:fd:c5:76:5c:d8:63:a0:62:a6:21:
         f6:87:40:b5:c8:f5:db:e8:fa:a5:c1:c1:38:a5:84:94:60:41:
         48:d8:c6:83:bc:ad:88:6e:d2:3a:90:2d:1d:f2:c3:2d:33:68:
         f7:96:ef:26:00:73:d0:bb:be:0b:06:24:50:4b:77:a9:39:2c:
         de:61:91:e5:5e:e1:01:ba:89:dd:63:33:2d:85:a2:bb:60:19:
         9c:ae:29:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:01 2025 by rpki-client