Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
File:                     XaOUHCfP5cI0xL8iHssqV5st6qs.mft (raw, json)
Hash identifier:          eu3KMBLcLrEhbARzBSURucET/li2sX7lON9+8/E3Gm4=
Subject key identifier:   E7:E3:40:51:90:4D:DB:AB:AD:2E:32:00:38:F1:E5:C3:60:31:C4:A5
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Certificate issuer:       /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial:       0194BD8439BE32679C7E674A1DDC96D9375E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
Manifest number:          1173
Signing time:             Fri 31 Jan 2025 17:59:06 +0000
Manifest this update:     Fri 31 Jan 2025 17:59:06 +0000
Manifest next update:     Sat 01 Feb 2025 17:59:06 +0000
Files and hashes:         1: 0NDg7PSFqCtlOZYcAWca7yUfVmo.roa (hash: vxdlDismxivb7YjpnzIGBIMoDZ842tr8eSQHVdPZSK0=)
                          2: 44V-jFpveDwCvRSgY1bGyBKxKMg.roa (hash: SBBRS+535H/ER4FEKoyxl+HX5+uiiatZ4OyNmO8omfM=)
                          3: 6xMWEeYr9awMZ7yx3GEOzN5dhPY.roa (hash: i3EKCietWlgVwKiSYdpzAk0qUO8A42y+4Xa5mI7nNOE=)
                          4: 7uT6U1lLurQEaJor-cFGlwsDu_k.roa (hash: Ui1tug0NBabKJLVWvbF+wZA/W7tLCJHrULtI5KVfo4U=)
                          5: CJWoMIuHhVD-Efxrbw0jAFhbe-w.roa (hash: Kgwm9eLnChXzut1Wvo58jSxKdzv5IWvQsGfIpc5SNrY=)
                          6: GaPhNmCLCg6FDzOqGOsmTwzEr2s.roa (hash: s8h3O6KnSTgtqyfNfNsxD91VQjj/kAw0losU0p/2szw=)
                          7: It2aztuCJpeCNkV6Tt-_j3Dmgq4.roa (hash: Q0aijwyK+3Lz7RSMiUkDkjCn2TiHYUXUBlgZJF8YMiU=)
                          8: JRsS63OEIg-RDEt77cmLzheKteg.roa (hash: 6PR4Cpk+9BkN+AncsoVUiTEwpS1IqPFK3JqRVNAKG/Q=)
                          9: Jy2dzojQmDDHrT1ZglR62KXl9KE.roa (hash: 9d9Gsb0ep9phZqm2SLYU7Tj/IcHV8fHdUCwzejsx/PY=)
                          10: VwscqchdEAmsVSyV2eD8RGldRmQ.roa (hash: VdjKB9pG2pwAZNShYBPvCakHnXSVowEhPi3XTbCbuyI=)
                          11: WYTVUSsxI4rZAMg2zgGzRIlXYPQ.roa (hash: L9LWgTLljOzuW1wOFpNyjaTrPSd7mMyRBmvb8euqHOo=)
                          12: XaOUHCfP5cI0xL8iHssqV5st6qs.crl (hash: OCzcGDxNgfkIR3kGkAgTWb6u888NOjsF5ZP3ddcRcZM=)
                          13: XrNSTv81nzS1hL9u_qrcT0GHBhE.roa (hash: d3aVYfMijrM4aPuSgEFk9yYZtFRcQmketyz3QICTMbU=)
                          14: bYPfKSp3uay7u1IBGQCfz9PB7s8.roa (hash: cQdCPGlvEZyuveyWWb2XndmUwLnId4QzQGpaXozykOM=)
                          15: fX9UYKZO6xd52hU0CG_6QfKAnlI.roa (hash: PeN61zex2Sw5DInmZiyUVF6K0j8DWMly0+OvVLBpOMI=)
                          16: hSWUv1huf0ZgdEoupOzoYiR-xRY.roa (hash: fUUm9WVh4RT1Bif3s0lLxfArOXO1kV1fWL5woYLGALo=)
                          17: u1fx_e153PBDwPgyvx0qhpf_7-c.roa (hash: rIfGEdBSwuolAjKZu/D3tV9dA5ieH7tsIwRBMyCCMhA=)
                          18: uAEY8yf0-OduNKClmzmQfAo_KIE.roa (hash: qEIbThjEj3GBtZEd/ntxaTMGkdBP7P2YKculyoqC1h8=)
                          19: vQBa0DHzLolz37NUtVTr3McGXdM.roa (hash: jEeBKTmQJb632hn3aeDSG3q3Hax58EZ7ZkfrXZDB5r0=)
                          20: wMHo3Yi4kUZz5fNVlfSS-nfo9XY.roa (hash: rO6vMotnNGZBpYAnxOKaAMqAZrDmbyRl2D3j4b7U5qI=)
                          21: zLLnY-dQIRtqYuPaqhFMWu0P24Q.roa (hash: NAwFEB8VGQ8kHJYhy4abt4dV8wltJt8R0PlTbgI+GD0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:84:39:be:32:67:9c:7e:67:4a:1d:dc:96:d9:37:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
        Validity
            Not Before: Jan 31 17:59:06 2025 GMT
            Not After : Feb  1 17:59:06 2025 GMT
        Subject: CN=e7e34051904ddbabad2e320038f1e5c36031c4a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:a4:40:ae:2e:d8:4b:71:40:00:29:16:ca:dd:
                    e1:2f:02:89:de:d5:6e:20:c4:15:d9:28:9d:31:76:
                    e6:ca:f9:e3:ce:3f:96:e6:d7:e4:aa:43:22:00:79:
                    d3:21:5f:91:ad:4a:8c:cd:6c:71:39:ae:0e:b9:5a:
                    4a:c2:94:0a:ca:49:61:84:b4:e8:39:b0:11:e7:da:
                    0f:c4:ec:93:26:eb:ee:16:16:79:8d:cc:ae:bb:13:
                    77:ad:19:4e:0a:b0:c1:d9:c8:bc:1d:a5:7f:c9:68:
                    d7:9b:04:d0:bb:0a:59:9c:f0:09:1e:60:e4:e5:b4:
                    d6:9b:2e:00:80:dd:51:b9:b7:5b:a7:19:39:1e:6c:
                    33:a2:b8:e3:fe:d0:06:99:08:b3:40:07:aa:5b:b3:
                    b6:38:58:39:bb:cc:89:32:c9:22:08:2f:21:ff:7f:
                    76:f6:f5:51:e4:8b:11:bf:df:21:82:ca:ff:7d:90:
                    d2:7a:9e:9d:b0:da:17:e2:40:2e:3b:1a:88:71:c6:
                    d2:22:5a:c5:cc:4d:0c:f1:01:01:4d:e1:90:e8:95:
                    52:0e:d2:83:56:c5:eb:00:5a:9a:eb:ca:3d:4a:f3:
                    4d:e8:88:ca:1e:e6:41:4d:2c:0a:ba:b4:4a:2a:f0:
                    e6:28:c4:73:dd:c2:8f:19:fb:db:81:42:b8:6e:b9:
                    a0:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:E3:40:51:90:4D:DB:AB:AD:2E:32:00:38:F1:E5:C3:60:31:C4:A5
            X509v3 Authority Key Identifier:
                keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:1f:a6:4e:07:31:86:97:dc:e5:32:83:a6:08:d7:4b:57:61:
         04:cb:42:6d:43:d4:e7:de:e1:1f:b1:f8:1d:9b:41:8d:92:8a:
         a0:42:70:c2:98:e1:cc:7b:20:8d:8c:c2:84:4f:5f:1a:11:41:
         9d:dc:72:53:cc:78:97:31:23:b6:d0:9e:5e:04:0f:42:24:16:
         d6:51:80:b6:60:80:c6:67:a3:09:c2:72:86:22:19:47:47:70:
         b0:9c:39:3b:b8:f7:4d:f9:8f:5a:94:4a:85:27:be:08:c8:6e:
         0a:bf:75:99:c7:db:93:69:d0:c9:01:e0:1e:e7:1b:79:04:f6:
         aa:70:0c:98:8b:41:dd:d0:f3:f5:17:ae:ac:89:91:ab:30:0e:
         c8:26:6f:1b:8f:7a:c9:08:dd:04:1c:43:84:e2:27:97:7b:6e:
         3b:48:c8:7e:ca:ad:68:b3:aa:c3:a3:80:0b:9b:29:de:4b:ef:
         80:c8:4d:b3:ec:09:2f:e1:4a:02:18:ff:72:85:a4:80:13:96:
         4d:e2:cf:59:ac:fe:8f:4e:40:9a:4b:42:51:3a:ff:dd:c1:a3:
         ce:b7:ba:4d:b3:10:dc:1f:6a:d2:85:43:60:b5:02:ad:11:41:
         aa:f4:3a:35:48:a4:bd:02:90:23:cd:f1:27:37:a3:45:39:ab:
         ef:80:61:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hDm+MmecfmdKHdyW2TdeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYTM5NDFjMjdjZmU1YzIzNGM0YmYyMjFlY2IyYTU3OWIy
ZGVhYWIwHhcNMjUwMTMxMTc1OTA2WhcNMjUwMjAxMTc1OTA2WjAzMTEwLwYDVQQD
EyhlN2UzNDA1MTkwNGRkYmFiYWQyZTMyMDAzOGYxZTVjMzYwMzFjNGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6RAri7YS3FAACkWyt3hLwKJ3tVu
IMQV2SidMXbmyvnjzj+W5tfkqkMiAHnTIV+RrUqMzWxxOa4OuVpKwpQKyklhhLTo
ObAR59oPxOyTJuvuFhZ5jcyuuxN3rRlOCrDB2ci8HaV/yWjXmwTQuwpZnPAJHmDk
5bTWmy4AgN1Rubdbpxk5Hmwzorjj/tAGmQizQAeqW7O2OFg5u8yJMskiCC8h/392
9vVR5IsRv98hgsr/fZDSep6dsNoX4kAuOxqIccbSIlrFzE0M8QEBTeGQ6JVSDtKD
VsXrAFqa68o9SvNN6IjKHuZBTSwKurRKKvDmKMRz3cKPGfvbgUK4brmgcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfjQFGQTdurrS4yADjx5cNgMcSlMB8GA1UdIwQY
MBaAFF2jlBwnz+XCNMS/Ih7LKlebLeqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEt
ZjExYTM5ZjI2YzNiLzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC8zMGVkM2UtYzRjNC00ZGU4LWI0ZjEtZjExYTM5ZjI2YzNi
LzEvWGFPVUhDZlA1Y0kweEw4aUhzc3FWNXN0NnFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhR+mTgcx
hpfc5TKDpgjXS1dhBMtCbUPU597hH7H4HZtBjZKKoEJwwpjhzHsgjYzChE9fGhFB
ndxyU8x4lzEjttCeXgQPQiQW1lGAtmCAxmejCcJyhiIZR0dwsJw5O7j3TfmPWpRK
hSe+CMhuCr91mcfbk2nQyQHgHucbeQT2qnAMmItB3dDz9ReurImRqzAOyCZvG496
yQjdBBxDhOInl3tuO0jIfsqtaLOqw6OAC5sp3kvvgMhNs+wJL+FKAhj/coWkgBOW
TeLPWaz+j05AmktCUTr/3cGjzre6TbMQ3B9q0oVDYLUCrRFBqvQ6NUikvQKQI83x
JzejRTmr74Bh3g==
-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:01 2025 by rpki-client