Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
File:                     MaGF0OsMp4EcWGQl3g6WDhz-ths.mft (raw, json)
Hash identifier:          3vc4EwYqmOzAA1ql1D3aExuiVBYloUSkp4hRL42j1vE=
Subject key identifier:   DD:CA:52:D0:F4:03:3B:86:1B:1E:3A:72:85:BB:BB:04:E2:40:3C:6D
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Certificate issuer:       /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial:       0194BCE0B34ADA00BBAD66FDFEDCA20AF047
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft
Manifest number:          149C
Signing time:             Fri 31 Jan 2025 15:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:30 +0000
Files and hashes:         1: BEWUUb6Sb5YAERA7Rm-cdwFsmF0.roa (hash: +Qt2yDKsz2L2j/WArrE4B6qzTe0DbfXxEvpfQa5HyZw=)
                          2: EnWNHEKE4As2dY7z8H4f1zMv8PE.roa (hash: hirWkRxOPTdm/HJ/WnnegZ8yGMndTUx93DgHktqjC64=)
                          3: LlMngn95TdQ9s1lobSIfFiaxwMc.roa (hash: WeKn9zwaRRHjlRd4WIjiQWXgKdTTEMZ6BTo5nLZ3Ai4=)
                          4: MaGF0OsMp4EcWGQl3g6WDhz-ths.crl (hash: 9p4zSPAGxXUvBwDGq37JQvRC2UCwk7Babd2RnJUB6Lc=)
                          5: O9d_gV74yYpX6Um_s3aWdDm_Ej0.roa (hash: RbexetxXBeJZCWdrT/LqIU6zAstJlnMOcoJBHKsXhoQ=)
                          6: SuAwx53ztZ8nH6iQDl-exiTpB9U.roa (hash: OW4UNz0fPDN3E3BkjgDIvFCnQ13CpXoOp18yw+GY/do=)
                          7: aQ0BCg7T0qvdq_rjilld2qmDCCA.roa (hash: FUk+EtDI/Bw1Ith6izcMbGQJ0XgwGEmYYqaLt5/+JX8=)
                          8: e9kzaC5aK1AvC-cHsDdx9haP07k.roa (hash: QuaA/YDvF9Gcy4o2L6hDN/avQ+2ifpi3IVCtvCyZW14=)
                          9: pGg5IZ4_Rh_E3JxX0-HT9TgVPxM.roa (hash: 5liIqRjQ5b6iul4uHIld/la3AWJyxn6cmBEC3D1GVaQ=)
                          10: s3By1xAgm0Piz-TUrYDBrs1WoXU.roa (hash: BgzNGbdXko+tn+sFUWTRIfviR0vd7FxJVj54FcWlz/E=)
                          11: yEAhGBhhnsGlSwmABMxYXMoVFmo.roa (hash: 4gRmJAIY5iMdHyen9IsOKFW1O1UVQrjj3rH4hihkCu4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:b3:4a:da:00:bb:ad:66:fd:fe:dc:a2:0a:f0:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
        Validity
            Not Before: Jan 31 15:00:30 2025 GMT
            Not After : Feb  1 15:00:30 2025 GMT
        Subject: CN=ddca52d0f4033b861b1e3a7285bbbb04e2403c6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:1a:8c:35:d3:c3:27:3e:a3:98:24:03:75:62:
                    dd:1c:8c:75:10:bb:50:84:60:e4:a7:7a:8b:a9:3a:
                    d3:d5:bf:59:26:bd:90:36:62:e9:aa:e6:e2:1d:76:
                    b9:10:72:fa:4b:ca:8f:12:23:fa:eb:70:20:af:33:
                    70:05:b5:25:8e:b2:a4:da:42:99:fe:61:41:71:80:
                    93:ab:2b:e8:58:a4:28:3d:ee:62:47:7f:8b:09:d1:
                    01:7c:d7:d8:ee:b3:06:f8:94:dc:ca:98:39:1f:1b:
                    e6:a5:f2:24:98:db:e2:35:c0:03:d7:7e:f2:4f:82:
                    58:64:35:40:56:37:65:70:2d:25:3b:67:47:33:f2:
                    f7:23:82:ed:46:4a:0b:8a:8f:96:2e:f1:e4:0f:0c:
                    6e:d8:58:12:0a:db:bc:8f:ed:2d:29:0a:6b:84:de:
                    a0:1d:a9:8c:b6:e0:fc:13:42:0f:91:0c:74:d4:12:
                    6f:7b:a6:9d:a0:93:66:ec:e6:4c:57:c2:45:6e:32:
                    ca:74:52:29:c6:87:1f:9e:24:6d:af:7e:f4:01:fc:
                    04:17:83:3a:b8:b2:ed:dc:d6:25:8d:f2:2d:68:19:
                    b3:8c:c6:76:61:d1:73:2e:3a:63:8f:d6:e6:37:94:
                    28:d9:09:32:2b:cd:ec:4e:6c:d9:63:f1:c0:26:79:
                    a6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:CA:52:D0:F4:03:3B:86:1B:1E:3A:72:85:BB:BB:04:E2:40:3C:6D
            X509v3 Authority Key Identifier:
                keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:5a:57:81:c5:7e:3b:7a:17:4b:e5:e8:c4:47:d4:c4:00:1c:
         a2:08:02:73:81:2f:ab:42:1d:bf:67:ae:af:03:ea:f1:99:df:
         02:b4:16:4a:5e:ec:28:be:88:e5:dc:17:4f:a7:56:65:ac:bc:
         9e:a3:f7:d9:a3:85:24:7e:6a:59:f0:5b:ae:7c:50:47:d7:a9:
         50:62:1c:8a:93:1c:e5:ca:eb:6b:87:06:ec:b4:84:74:54:30:
         76:b4:52:4f:23:26:fb:4d:fe:28:9e:c9:4c:25:d2:b1:2b:ca:
         69:79:f7:48:54:f1:21:bf:b0:52:ca:1d:30:09:09:43:63:0a:
         3f:f9:09:28:6a:16:14:50:58:d4:b4:63:a2:ff:5f:56:02:2d:
         4e:56:6c:db:82:c1:be:97:6d:0e:2e:48:c7:da:ab:ef:01:fc:
         a8:7a:67:2f:7d:e0:38:b4:ba:de:0d:cf:7e:33:e1:ff:30:58:
         64:ee:8c:42:e2:a9:47:04:d2:a8:31:6b:53:65:ce:72:ec:ac:
         9a:8d:14:2e:30:15:d0:4b:4a:3a:6e:84:a3:73:93:7e:46:94:
         7c:8c:e2:f8:6a:cb:94:49:16:8a:54:f4:85:b6:89:41:7d:d5:
         e9:c7:ea:40:42:45:75:47:dd:87:06:c0:ee:2d:01:9d:33:6e:
         f6:d7:e7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:01:10 2025 by rpki-client