Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
File:                     KsPaobFIUPLmHFkrIZGRWl5lpHg.mft (raw, json)
Hash identifier:          xqIba8cz/nxKIx6FmYUiysmuhzq/6Atbto8ukqmTBs4=
Subject key identifier:   08:0A:0A:DE:02:F2:7D:A3:02:61:FD:EF:2F:B8:17:3B:CA:0D:23:6B
Authority key identifier: 2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78
Certificate issuer:       /CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
Certificate serial:       0194BBCDD8AC5199141A77D8C642EEF32A2E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft
Manifest number:          1607
Signing time:             Fri 31 Jan 2025 10:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:17 +0000
Files and hashes:         1: 1IhfcMc6vdLalAssbxGvWJUN-I8.roa (hash: UFPUuXseMe5mmCfOL5TtRt0nyrvSJU49C2dua22bxsA=)
                          2: 1hgso2lccKM-lJMA4gcdw60wIFU.roa (hash: yyXPpz+zE0xj6JsKCT2l725THoS1U4R0ARhX06QaZVw=)
                          3: 2rehOClGk15GbKYB4CENy65nkTk.roa (hash: QuSrmxAsWOxpJPYn1v4o3eSxSMqmtTFJBS/21WOlV3E=)
                          4: 33GgSWAZMCBOl9a8QteJddJTWJE.roa (hash: 9Kl7fID4FvcBrN21H67YY1fSZibbpd78RaNlYhkRMxg=)
                          5: 3snKEyz2FQnLJ0kh1ZD_M_ksFE0.roa (hash: J9IelrU9P/CVtrQKRZv32f/Tvcpv1WvkNpEzVPYZJ9U=)
                          6: 3y2yk7vNwVDDUonG5NAb6_Mf7AE.roa (hash: QA6Wssrl6XtxTiWPI8IlsJ+DDkkPg5vzVxpYmX9YaUo=)
                          7: 67Ea7VEB6NTMqU0_w9hkPf8M9e8.roa (hash: yzJDWryjSvtx+7x08ZuzwC8yKQ7xrpLS6pCbYy/XJm4=)
                          8: 6BWOCT_HYW77Nmoi-XBFrRHUPdc.roa (hash: Ve+peZSoyfXpU2PwAnfaFv71IpkMGtnzXSslo22mzCM=)
                          9: 6H3IB_HstDS6LI6-SIwQfdZH8NI.roa (hash: do/PM+RkzzcQvPULycLcJGGjK4c/59gjd13ifwPlFP4=)
                          10: 7UaJkFcdFRdorLBMu38StOixYEw.roa (hash: 8Ur7Nwm8l1EtUuc90oTS5MF2RWWS7I1h2TkaheewxSE=)
                          11: 86Yxs1ZizrJJJxd_CgUU7rNHToY.roa (hash: +dc5Fhp2yn9rk5tqzBkSqU4zWkVrDQypGxi0GonySoY=)
                          12: 9PXBGYncpSqlieIahPsS-GCB4gQ.roa (hash: U9EZGSImrkPJeE/FvdZiNjn2KNMGUU7BgwAUG1xk2Fs=)
                          13: 9kKe8tdbtZcAIm0ePTelfe-DlhU.roa (hash: xqxAX6AEe9CGHYfjvMTqrfvPebN8AWJosVcmJ4Y4fWk=)
                          14: BiG3Lboa-yi8-3cO8dbg_kY8s0s.roa (hash: PUhj3yqAe/tyjqOgmwwn8VbtMRCG2TFNmQSth1ouqx8=)
                          15: CHGjaRdSCAe-TRzACdbdK_EFiM8.roa (hash: 0yS55qnpzYJpJk0kNI9SiX7t6cWmSlNBnNEn0xBSxMc=)
                          16: CL21bkaZtCWNnhL-ix59CR8UBfY.roa (hash: LRqooD6N4j3ZqGRaQ2aAxylB6oUUHvUm4mU4vxvb7sI=)
                          17: D5zkCGvDInlDpbccE6maEHTXDH4.roa (hash: cfIAsehmYCFnIdtwpUGrcGfMvy34nAmCT1DreezcKgY=)
                          18: Dx3PunT9g_2ZOIF47SZ2MVFPjGE.roa (hash: 1+m+Wwh4GBFIhOScoM09aA+xHZp8GAdqxD0WrgB0dMU=)
                          19: EjcVchWFrXpzeS6M09zhZFTdkVM.roa (hash: JeJ0yyTvKPBJOVgndcc7CIZ3u5MSYBd0tv+TA1Wyjdc=)
                          20: EqaISQIUHHoTZcarSoXaLlnO0LM.roa (hash: USJm/vhGTWlgHw2udyKE27tLrmsdveXCYt9mLeOcil4=)
                          21: FrU1Oox2_na0t8PHzgp-6KSwiHM.roa (hash: t852FrgSIP4XpcduveQ1IN2NEYbV3Op3/6ajF011XuA=)
                          22: H2Pa3KiMbXsQ2qL2572uTRqcPxA.roa (hash: 5C/szhRI6zL2e9+CrVY/GPHpR93dOp3IFdFs1j3xSIY=)
                          23: HIumX43oGnzkGuWt4G_NLwulwg0.roa (hash: 8gh4iUsZLyO8zHF+TsBNknxsLW0v498tkaP0csONxSo=)
                          24: J1xSz32FDKWq1ap77B5YLtRQK3E.roa (hash: jjbIEcByrjMeEwsXvOx3DnJWxTU6kXWXOIeF+13UbBA=)
                          25: KsPaobFIUPLmHFkrIZGRWl5lpHg.crl (hash: ozWbCq46NZVJotEkOEPUckDjOuCInw6qTGqhrCsYP4A=)
                          26: Lk7RjXVLqulmYcgel2X77E-Vc4A.roa (hash: dLEpgBCcz63UcRaZ03igJrw7j48rDIBC57wiiU3eH6M=)
                          27: NEixMtlCyV11J18hpugPv54aAl4.roa (hash: YHp0bh9s0D7/2fWjYanc1WGpcV70n3Mfl07Nudwc2Vw=)
                          28: T6DsNBZ0c_3JovpVfq6rAM8G1i8.roa (hash: d4E52jx9sefrCo5h9h4+ReN3n0PDKF7RX/XMoJNZmr8=)
                          29: W4XH1igpyllhe-Wuhr5RQ0aotGY.roa (hash: Et9BjRBWW/jaWGIcSjk5lRAVUP5Y5kioBLyD5AdfsZc=)
                          30: XUhmF7NC59VfS-_RgMhnFzCm21k.roa (hash: 5XacoIFqiK03Bo2lBnJs8PXslWsRrAkg6i5gyULqj1M=)
                          31: YJg3h2hmobIdPFR_Xngb-O1PwWM.roa (hash: 4FfU2NtODkdLp0f+OmdCLgtp09aKZeZaEgFNTivhjBY=)
                          32: YdbL26SrWDrDgemmE2H-mQF-A9E.roa (hash: 0HPOI6j4D99rPE+s4QbSlEWSASe0lQdsAhvE+yVUqiA=)
                          33: _MIxuIS-LegaBL97znvg1WzabyU.roa (hash: 5RtCBYPc+OYibomGBA55iEQFagUqeM3We+U1ld2I49M=)
                          34: aQKFX5MWOPDIXadx4Xwc-JHiHxQ.roa (hash: J/dJzq3cyfjGh4BO7e6+vfW/lx9eMgUtDSi6an6y1UQ=)
                          35: aZ4pXB6Td07_2KaljBVlO-zl_iE.roa (hash: yF6RaDYUEhah5IhMxokVbx/HAa1i2i9XqBJ7hGHEGPw=)
                          36: cEr3HBvl_HqHMLjdpPlCeK4dWLk.roa (hash: YzJnPOOHTa7nX7EJ2dAPwt/zUH43NfoqyfPsLZleGd0=)
                          37: dwV3h0eia08kUM-h7hjm2AX7Vds.roa (hash: mfVldjy+DqtdFulzd6J9vaBLe3m4tlTIuz+mcanwE6M=)
                          38: ew4w5tVKIjMqx19f45S8RsRYbkU.roa (hash: bUEheHG9U/ifUhOxkexA8RmHXXPv6oQ0yoQSZI9DdQI=)
                          39: f82dH9Kef_yM_0mhvpdo79LuFPM.roa (hash: +W/2nGkWoU7YuVbPeC0tSGAk4v4cWDOxdCNdfqSglWs=)
                          40: fr7chU3mkddQrTjKAwYpozaaYtg.roa (hash: q6i6PQCN0vEKixyeExkR/W/PK+pwZYjYv+Mvybu4cTQ=)
                          41: hy_ucIJUi3CJ6kVxcgXVxieywhM.roa (hash: Y7r8fZDcKnprbX5sry93KuVWc9Ktb8EvMmXkL4jAn9c=)
                          42: i8zpMrOMz8snLQN9FKEhSLa6Dek.roa (hash: hP+7I/F057LbBFihJtlbBp/U7yMfUrH2YAnq4y792cs=)
                          43: jvrFj6uplGyn_4RH_gnZ3WttdUg.roa (hash: 7f2WNciCzUNIEz9ZUeD4xu3Pq6FX/hCCRVQiUxjl1Gk=)
                          44: l8WoWHO2zxKlGFBUUvxUT4rroYE.roa (hash: eldLUonyqJ6YdHXmzN+w6mdKm+TXv/L4lq5wmE5mggM=)
                          45: mFWcHlcWBe9wYTg69c6ouVugpNw.roa (hash: q2ErNp39epQbnTMcpPCyqsqatEdKpJetzV/+N0laYuY=)
                          46: mWI16Nr5uARPIlBngzxf7nVK-PQ.roa (hash: tISSb+BIYAcjWB+KFAN0nR8E6nSDx0zw9f4z1CLwe/U=)
                          47: mX4YQjIkKu6HiRo2ABaA3BLcYrk.roa (hash: /naJn6ud8gAhuc5cIlXNZBtLpGR9W8Bq0PuFFxhBhLs=)
                          48: mhjyrrbxE8jKQ5FzpuTFqBRTMEI.roa (hash: B6vOVo9IyXYT98tKHGpAx3UyuI7wHnb7KDHG33mnMsA=)
                          49: mldrwLJpesjnj5aKwUEtNxwcIt0.roa (hash: Yqfn3aE8gft9fmdAE2YrPGmZXgurBxQuiLes9eTp6vY=)
                          50: nGjQFafnDlrD1PpLcq-pxQyQiAI.roa (hash: /sTnHD/FFezgTcV81Yyw1HGXeP5h+SeVb5Xj5gpgKEA=)
                          51: oQaywy3q8vmyPxGr_AmiNoNzTBA.roa (hash: 4Yn0dAJN/4cvXNvMf4Lu9rEegHknGAt0w5s9nflB7/U=)
                          52: oRgPC4OnUVFP8SdhmEGtbpcaAHE.roa (hash: S59AW4ltCq86ogMJ6QcRzgGN+dYOSfqH4AILfSeq418=)
                          53: q7CGM855b9BpTviCFpJu1k0kGBY.roa (hash: zsDCTBxeHYVbQ0HBef/V/il/aqUA+TWIpeSc2KFTqAI=)
                          54: qZmRG_VWu8lO2c7Bp5gUBiTXHNQ.roa (hash: XyL0covDSTYGg1NmjX52Im0w4Cl04taZ9HnHSSWg8zY=)
                          55: sSyk2Go9b-ZSIbDEjA887FJtAqs.roa (hash: Hr4YLXHzWyVzk5Ncm83D3GjPMZlGrcn/XOlOLPRssPY=)
                          56: saglq45HPIxmFZvko17stDhokc4.roa (hash: 2OIvqCI+aBNtAhAX1YPLau5von+Z3nFtCaYYhTUz1Dk=)
                          57: u19W84miic1ThTG4VeFlXZAFFas.roa (hash: 27jIZre/g2omnr1SJbYdxwNUgj689gf7Zet3AGuNc3Q=)
                          58: ulWrN8B49xiwZPwEKCaOI8HCxCc.roa (hash: os2jAnx+ef3NMgf5O54Z/rj72e/tyiY1EIFsRZNeLxY=)
                          59: vKIZs30r1pj9Wpo9vLTZuPScm8k.roa (hash: zkaNSKrQk9qvyhrM7kQr3nomNA3UzXxzvPMgeEH2u6c=)
                          60: wWk3mlFiAPLhaQzlKZq5GVQR5Gc.roa (hash: r319ctU1yv3dDnOENgvrUEIzMg0eVIaEbvkXgewl/AY=)
                          61: xjKQLL0gW1GJ1csPN8gaNEPdv9s.roa (hash: p9FQENMfd097AMINXZuM8uvFIGwOMU23WgEg1Z14fp0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:cd:d8:ac:51:99:14:1a:77:d8:c6:42:ee:f3:2a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ac3daa1b14850f2e61c592b2191915a5e65a478
        Validity
            Not Before: Jan 31 10:00:17 2025 GMT
            Not After : Feb  1 10:00:17 2025 GMT
        Subject: CN=080a0ade02f27da30261fdef2fb8173bca0d236b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:aa:11:12:aa:29:62:44:72:f7:e6:76:e3:f9:
                    3b:c8:b2:bb:b5:43:cf:8b:40:1e:10:be:de:df:3f:
                    2a:89:08:69:21:8a:a2:d2:9a:fd:db:d1:61:c5:44:
                    49:1a:39:5a:2a:0c:21:47:35:11:04:92:1a:f7:c0:
                    61:b6:9e:d7:09:f2:49:12:5f:bb:3c:97:21:8d:7a:
                    c5:80:b6:0d:04:38:8e:d9:77:ed:1d:9f:ec:fc:88:
                    66:3a:f6:33:fc:2e:c8:e2:f8:75:b1:81:07:1a:50:
                    53:e4:ae:d1:55:cc:44:b4:91:e8:4e:e2:54:60:ec:
                    a2:ed:0b:28:63:bb:a2:9c:cd:ee:96:0e:73:f3:42:
                    70:a2:f0:60:2d:b3:e1:03:67:47:fd:5c:99:44:8c:
                    13:70:15:12:12:77:f8:14:78:e8:66:96:07:aa:41:
                    95:91:17:80:c0:46:39:c0:74:59:f4:8c:d1:df:9f:
                    e2:9f:d9:d7:c3:5e:28:0b:9b:90:83:dd:a7:45:10:
                    be:3a:f3:8d:79:ea:4c:ae:b1:47:de:f7:e5:ad:b4:
                    2a:8f:4d:02:f8:9b:80:18:b5:b3:7b:80:5a:36:f2:
                    77:6c:de:2c:ac:ea:bc:ee:dd:3d:07:61:15:b5:b7:
                    51:01:3a:ef:78:7b:e3:dd:8a:93:16:1d:bf:3d:7a:
                    b2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:0A:0A:DE:02:F2:7D:A3:02:61:FD:EF:2F:B8:17:3B:CA:0D:23:6B
            X509v3 Authority Key Identifier:
                keyid:2A:C3:DA:A1:B1:48:50:F2:E6:1C:59:2B:21:91:91:5A:5E:65:A4:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KsPaobFIUPLmHFkrIZGRWl5lpHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/405bbd-5913-4e95-8e75-fe0659176a56/1/KsPaobFIUPLmHFkrIZGRWl5lpHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:3d:aa:56:e3:73:51:b3:37:d6:46:1a:42:94:c7:d8:ed:40:
         3c:dc:86:e0:6d:d4:8f:ab:1c:e8:cb:42:98:48:c0:14:2a:ec:
         3b:17:c8:c8:e2:d4:13:5b:df:38:4a:6b:7c:28:4a:09:14:5d:
         4b:f8:e2:ee:cd:fc:63:61:af:2e:5f:37:f3:94:c9:48:bb:32:
         38:f3:f3:8c:b2:43:01:fe:91:e1:0b:43:b7:42:14:18:1a:7d:
         c2:24:ad:bb:4b:94:72:d3:89:3c:c7:3f:b0:d8:12:b3:58:41:
         5f:65:30:35:f7:43:88:c2:84:28:aa:91:d0:2c:3c:e0:90:6d:
         49:29:bc:6f:b3:ac:8d:a1:b5:b6:29:6d:7b:2f:4d:8e:b0:28:
         6f:02:eb:b1:f7:bc:bd:6a:de:81:12:72:a2:b8:27:ba:a4:9d:
         aa:5b:6c:49:08:8e:a5:67:dd:8a:df:3f:32:4f:54:a3:0c:35:
         a2:93:87:a3:13:25:66:89:b6:40:5f:31:ed:35:c8:37:f6:17:
         53:61:fe:de:4e:2f:1d:46:45:0b:f7:36:b2:03:b9:77:40:b4:
         b1:b7:ce:75:bb:e0:22:00:ad:cd:0f:d7:6b:6b:fa:ba:55:04:
         3d:d7:f5:6a:07:1b:dd:a5:9c:02:90:b9:ff:0f:82:08:8d:12:
         3e:d1:14:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:42 2025 by rpki-client