Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
File:                     Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft (raw, json)
Hash identifier:          7JkzA/v+JP92353pS+PBLy0ZaMcdL/S958DF9N75wcI=
Subject key identifier:   46:C2:E0:3D:A2:1E:4A:5D:04:E1:CE:9F:CD:C3:4A:2E:5C:FC:7D:97
Authority key identifier: 43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C
Certificate issuer:       /CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
Certificate serial:       0194BC3C3C9BD06FD188C5AA1747FECD5620
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft
Manifest number:          079D
Signing time:             Fri 31 Jan 2025 12:00:51 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:51 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:51 +0000
Files and hashes:         1: 0pA9jqxxzLz7rK77xH9_gAV2Ddc.roa (hash: kuW3cMupmnzRroMZH+onX29Wp3xp+NRO+gRxYcXjYi4=)
                          2: 2TnqZvmmysxhyiNZrk30acF9SlI.roa (hash: WiwIIXJhkAErUqVwl7rpQhJM1V3EKt+e61vZ4TyGts0=)
                          3: Dw3X8fWhKPYb3Mn-3k0h1r_9KbU.roa (hash: TMxwGgTVPG6mIC+cdCWlxe1kZRGY132KC9x3rO2T5lU=)
                          4: DwPcfSHFXNqM7rUhdUmfwPDUgE4.roa (hash: TJWMP4o9L/gCTxpzvrb7aiWTaCJtkInjMyTtZ8ZQv6w=)
                          5: I0so05T8WJ0IrbDuX6UjLySLqmI.roa (hash: dR+mdnDCO20UWtvzil7AKdca65/eFTAOBYqBvQ7au8Y=)
                          6: Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl (hash: v7YQPY+nmsSm/H3CAiCTpRh52LUtieshwdqFVsk3EaU=)
                          7: SFaGChEcecBfMkYfUdNCUJpmOZs.roa (hash: urAyNSsYssS08ZQ9VO9nXj8k0R3NhqQ1uecoM5zn4Xg=)
                          8: VdXHdlxLvSXMtikY4Tkq1ivw7b0.roa (hash: d4XyYarFCX7iHNvauLVhaF+5yte4Mx2+kXf0dxCZBfg=)
                          9: VzB0p7pCZsQMiGHUlZc1UelTzYY.roa (hash: BzzAqeicP4DohtRLpuezZoWn//Z3/wAyEJHVc5sVYtU=)
                          10: XkP13qdKiUI4ksMyPnhV_Dq7ZH8.roa (hash: YloS2aXtag5qQ1JTIqYqkyKRVfkw4jImfuhbP08yNwU=)
                          11: _okwze0rSlq8LhXlB7FWi8OlsK4.roa (hash: 3wzhS+5DOCgktIdxwao39vX+OQv7jnEn/glBS5LioaY=)
                          12: aaPCQ3vYc10mi-8M5KP_x-4UjqI.roa (hash: k87j6NF+EKH8P+VssVknz/tteS+89PmRGUWHWReOd5U=)
                          13: keRc_cuZtJ4i5Jvsc90Pj2Jghdg.roa (hash: gciROLJg7+/w52qQUKA87ZvQS+qeyeOp3E1ngvwPEK4=)
                          14: mReJXjEFw2vH3gsylG3516bpkxI.roa (hash: orfciGxm8QNpQKbu93OyqVEi/aKCukxyiFS74rnLbXg=)
                          15: t2p4-i0-AMgrPWWbLPjsZticI0E.roa (hash: /e/8T+eYaFYAkJQaQBKZKZelhBajXo5oP/zmVdgWK8A=)
                          16: wXmD77ivrLBnzkfNVUx9GVYS9fw.roa (hash: tE/07N+y9ScJvAqYYnDp5CmkVEB1T6atwgfCQwskaeM=)
                          17: xzcqcrFf-ra6k9gJVEfYsUOL7r0.roa (hash: tLEmQ4Ip0nJAlYr4VF0AY9UERYkLlEbUUc3k5bIYBQM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:3c:9b:d0:6f:d1:88:c5:aa:17:47:fe:cd:56:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4354a419225d5d79f4a1ae1520a3b1a56d45268c
        Validity
            Not Before: Jan 31 12:00:51 2025 GMT
            Not After : Feb  1 12:00:51 2025 GMT
        Subject: CN=46c2e03da21e4a5d04e1ce9fcdc34a2e5cfc7d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:22:3a:7f:de:a2:0d:18:d0:16:eb:6d:9d:d5:
                    96:0c:e4:39:46:40:7a:14:65:04:6c:fb:a2:10:a1:
                    04:91:4c:36:ed:15:82:50:9b:87:99:e4:cc:5e:2f:
                    2e:62:cc:c1:c6:0e:88:60:29:b2:35:c0:b9:34:6c:
                    16:55:38:c0:0b:89:0d:9f:c4:c6:b9:14:a9:a6:37:
                    8d:b5:5b:8c:b2:e7:55:61:03:a1:26:1a:65:7f:64:
                    a0:de:11:76:fc:e4:57:9e:01:ff:6d:44:5c:13:9f:
                    09:5b:4d:f8:1a:d9:59:38:71:1f:fa:5e:8b:85:8a:
                    5a:b2:3a:88:79:9d:5f:82:2b:d9:b0:d3:31:94:c4:
                    fb:d5:6b:69:54:cd:a5:bb:a8:d3:4a:22:c3:72:ff:
                    37:c4:c8:89:63:66:38:82:a6:c0:f2:1e:97:35:d1:
                    e7:c7:6d:37:06:fa:b5:c1:75:f9:d2:8e:82:d6:f9:
                    88:56:a5:b0:ef:69:3d:c9:0e:f3:35:b1:cf:63:cb:
                    ba:58:a8:30:c9:59:41:b9:6c:24:fd:b5:4a:f0:d7:
                    e5:57:9f:74:b7:e4:41:bc:ef:2e:98:fa:e7:b3:2b:
                    b4:96:71:6b:bf:d0:c1:e9:95:ea:3d:2e:61:d7:72:
                    52:45:23:20:4a:20:39:fe:70:cb:df:d2:9c:fb:ff:
                    0e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C2:E0:3D:A2:1E:4A:5D:04:E1:CE:9F:CD:C3:4A:2E:5C:FC:7D:97
            X509v3 Authority Key Identifier:
                keyid:43:54:A4:19:22:5D:5D:79:F4:A1:AE:15:20:A3:B1:A5:6D:45:26:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q1SkGSJdXXn0oa4VIKOxpW1FJow.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/0fddf0-8bbf-4350-bffa-688d51a44448/1/Q1SkGSJdXXn0oa4VIKOxpW1FJow.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:e1:af:e4:02:9c:31:eb:ad:0f:46:4b:45:9d:14:80:d6:45:
         9e:ed:2f:51:30:54:2f:ba:c6:37:f2:e2:a6:75:1c:3a:c2:a1:
         bf:3f:07:46:20:c2:7a:4d:98:2e:0e:cc:b6:98:3b:a2:42:b8:
         6a:6c:f6:47:cb:55:31:01:a6:cd:12:68:bc:01:9c:06:11:59:
         c5:5a:c4:81:b0:26:72:f5:d3:67:9e:b5:61:4e:1c:96:a3:8e:
         36:41:d9:13:f0:e2:81:e1:f7:cc:10:85:e7:d0:4b:0b:64:ab:
         62:ba:5e:9b:7d:9a:ac:f2:54:d1:3e:08:db:c0:3a:52:82:27:
         38:7e:c5:c8:8f:a7:38:92:9f:b9:c2:dd:cd:8d:a4:6a:4c:e7:
         d5:74:1b:e2:69:d4:cf:b8:64:ca:03:a8:2c:83:55:69:8d:07:
         4a:90:b0:97:bb:cf:9f:db:9a:48:35:72:a2:0b:e3:90:21:d7:
         a4:3b:e1:b2:9e:87:99:ff:91:ea:a6:58:0d:a2:0b:53:00:eb:
         4d:b2:5b:2a:11:8f:3e:1a:14:97:67:9a:94:8f:95:6f:c0:3d:
         5e:80:87:ad:5e:9c:66:b9:9d:9d:f4:32:f5:00:17:bc:e4:39:
         0a:6b:3f:ab:26:8c:ef:95:cc:51:f4:9b:ff:08:2b:21:83:13:
         1d:f5:1d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:51 2025 by rpki-client