Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
File:                     vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft (raw, json)
Hash identifier:          2cHyejgDKakAwFBp6bmaEQtOrqd/fjmjegp0WrRcR7o=
Subject key identifier:   46:D3:D0:1D:5E:81:08:23:5B:D5:57:26:58:CA:59:DF:4F:F2:50:9C
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Certificate issuer:       /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial:       0194BC72EE6540E65333167D657ACD54D04E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
Manifest number:          144C
Signing time:             Fri 31 Jan 2025 13:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:36 +0000
Files and hashes:         1: 1TYSKIHBZdqWsQ28scwZG_-Yo9w.roa (hash: vxmQtZUHn1LwTNriAv3j4ShxEdo7N4X3YYjeuIozTsM=)
                          2: 3KoZ08OudAS6KvuG2FZSnsO2BFI.roa (hash: z6ErD5vxdSmYriXdS8fafTnvSaT8pzzMa8namzSoffg=)
                          3: 4daKJ5wl_E7CwSbo_whtnRnTFVU.roa (hash: tCaiPwYCYtRImT1Ubv2hdBn9CkbxAY//n5k2G92v2oI=)
                          4: 7f2z3Xn8S-DvfoObW3dEJfDj3hw.roa (hash: yWmEvhW970ZV11OFBtarFo2cjEH+EORNq92vuqhI/h8=)
                          5: 85q_6q9moNKBoQwQluN7MeG0uIs.roa (hash: z8wvSS8sEMz0XUJ7f1T1Shqke2Dv9kanZ9axqRjtpuQ=)
                          6: GhR7A-YbyUt1d9yLo7nMgqbFhHw.roa (hash: w6k3BagHuzed7pMgFqXDwDrZFogGz/AtgIn1sQdxfok=)
                          7: J3RZHsItQfisBeZoOPgjscH5ErU.roa (hash: jqIjaGXvwmcB7EhN70ev8p+L/YzF67U+uNj8PYmCrSk=)
                          8: MB5X3jwgPK45EdK2Y1nlAV9RCo0.roa (hash: ATGZdB+IK8QSAEJVHUskknnzb6Y7ykVg4VF4GTfN8js=)
                          9: QlJocn28wvFEXminw23W_RvYg-Q.roa (hash: TuI6P0C1sWDSjYEm5lKEkV0hVZxnOrv4ZLbM/9hY/g0=)
                          10: S3HW-0xZdm4ul1Im_GdTbGzRwNY.roa (hash: sP1S9bFSYWIeTZJsrynmiiCmGNEVCPLgMZJ0LWPL0DQ=)
                          11: Uc65Sl3ZHa-usEbHv41ZEXHdZ7w.roa (hash: s1GZLf7plSCgtr1IS112uCKjESCTLhOVLDfOPf7Q6wA=)
                          12: UjbV3lGHl1NABirOrXCDlpa2IjI.roa (hash: rr4Fn3/DO7NK9RiKm+oGJrtYMgwIJPO3y7RWl8FMLw8=)
                          13: YRuBMhFMdDAgDmUrmflneguRVhA.roa (hash: AJ8QQBClv/9OdMiZAgSoRxg94GkZL6Fy0Aw0Tfv/MWI=)
                          14: ZaDqc_0TrJFdc0RcFG7yl2ai7QY.roa (hash: 1d+OdKCY8+hZg9LHrOFXWt2cShXAAKGX+jfmOnROX3w=)
                          15: dTnLOVxGDlmwLoq4gBTICx-ugUU.roa (hash: G/+PXPgZlwlpC612pLgBHD975kAHmjCkopFZdUC0qHk=)
                          16: gbt2dgdGb2TfEQLZpGeeWa4Q8LE.roa (hash: 8u/Ojowmbeh2NJJrlt+cpAfuaPDNBJguGalS5XBICGg=)
                          17: kBFtrsJPrM_jo-p7iRZbBINVjA0.roa (hash: mJ1KicTl/vvOlA9osD4D6kVHttKTQWza7HFTFyqDuBU=)
                          18: o0yqbcUGmuXiLS-K2hUnWBovg7k.roa (hash: uQlsB1ZpKLfh7MiBG0QLqlWeEhVfwTmSH778FQW6DwE=)
                          19: oMVZrnPoAXYW477f8Ut5F92C5Hg.roa (hash: EiJjRzfI4G9nFesuvyvycnPoMO50/InOe562/vYFUqY=)
                          20: pMnjJvihHzd-giv1SzFYxia6XA0.roa (hash: Rj6NRjW0ZMGK5T4yAL/0Un3Waby5+s7V1nP7lwfSeCA=)
                          21: uSJCC3kYWjg7i4fxLtygovLThwU.roa (hash: YIJsbHaRjQVvABrjQc39hlyffm/xi8unzp8VNRhOFjg=)
                          22: vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl (hash: xwScjNmvcBJwEGpqGcPrUpqjxPYA99Z3vc7jQChy068=)
                          23: w_62FGoWXxTvmN6szlTNF_DQpao.roa (hash: NjQclTg1xG4LTO5Tb/wO9qc+h/JEwYbvWlRZCWLo2Js=)
                          24: yg5JITAUr9nYSKxGfOS5IGqhNV0.roa (hash: Ta/DrxDPmqUacodIAElBSd+T7Dc3Eohj2jJFl8vQFY4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:ee:65:40:e6:53:33:16:7d:65:7a:cd:54:d0:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
        Validity
            Not Before: Jan 31 13:00:36 2025 GMT
            Not After : Feb  1 13:00:36 2025 GMT
        Subject: CN=46d3d01d5e8108235bd5572658ca59df4ff2509c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5d:d3:9c:d3:60:87:2f:f6:5c:4e:2f:53:9f:
                    86:f6:17:e1:5e:8b:47:d7:e0:c4:5e:78:b8:55:71:
                    9a:54:d6:db:3d:24:50:64:6b:60:4c:57:0e:14:02:
                    85:16:2b:d6:b4:52:53:20:ba:12:ee:8a:2d:13:d7:
                    a3:d6:28:b9:83:7f:5d:55:5f:c6:aa:c3:5c:ac:60:
                    5d:09:bc:b4:6e:07:9c:d0:21:cb:04:1f:9d:fb:cf:
                    2f:85:c6:f1:fb:cc:1d:2f:01:fe:65:53:93:70:de:
                    9d:a8:55:d9:a4:1d:0e:b8:d3:8d:b9:f6:c2:1f:59:
                    06:ad:dc:a9:5e:d4:ad:66:2b:8d:7d:86:8a:a8:4a:
                    07:59:98:43:8c:8b:b2:15:6b:e3:6a:b4:68:9d:62:
                    b5:f8:19:63:cd:5c:70:b6:05:cc:62:76:a4:aa:60:
                    ca:93:f6:c7:b0:cd:c0:18:e4:51:2c:50:64:0c:5a:
                    b0:ab:0d:13:c1:c0:2f:ac:f1:1d:0f:70:b5:72:b2:
                    bb:c5:33:7d:11:89:c4:c7:50:5d:05:ba:d9:20:d9:
                    23:65:bf:74:ef:07:8c:e2:aa:8b:20:60:60:35:64:
                    d0:eb:08:40:d7:35:82:c6:0d:0d:27:e5:6c:e1:5f:
                    24:06:93:e4:df:3a:37:26:98:97:cc:aa:bc:f1:48:
                    2b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:D3:D0:1D:5E:81:08:23:5B:D5:57:26:58:CA:59:DF:4F:F2:50:9C
            X509v3 Authority Key Identifier:
                keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:8a:0b:53:8a:3b:07:95:5e:78:3c:6e:98:e7:06:69:9b:52:
         61:00:a2:2e:aa:a6:f6:48:e4:bf:98:7b:8d:12:10:28:01:39:
         d3:5e:83:e1:6b:eb:34:9b:1f:ac:0d:76:64:68:ea:13:2f:a1:
         eb:96:13:8b:6f:fd:95:ba:61:30:0c:de:45:bf:2a:62:aa:c3:
         07:e0:0c:c5:9f:0b:e1:ed:9a:bb:0a:e7:24:9d:4b:3d:51:f3:
         f5:16:cb:9d:c2:ee:da:8e:ab:da:97:a8:96:39:90:ff:eb:a5:
         a7:ac:64:ea:33:93:3d:61:d9:88:ea:6d:a9:d1:1e:26:c0:ce:
         c8:0d:9a:bf:89:11:f7:ac:73:db:05:57:42:be:fe:e6:60:6b:
         94:6e:6a:d1:9f:b0:50:f6:66:0d:4c:ae:75:a3:f6:6a:1e:57:
         a3:92:7e:2f:90:65:a6:7b:cf:9f:e5:d2:75:0c:76:4f:7b:e9:
         40:dd:81:1f:98:a5:44:77:ae:3e:10:44:46:f0:86:7a:ed:51:
         bb:a5:69:2e:50:91:2e:9a:2b:a0:07:5e:15:ce:c7:e4:67:76:
         ca:b9:2a:6f:b1:9c:97:d2:19:8c:63:e0:2a:ed:80:bb:d1:b1:
         76:18:99:39:0c:7d:3c:ce:42:69:ab:82:83:a3:c8:dd:7a:29:
         0b:65:c4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:09 2025 by rpki-client