Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft
File:                     h3itgWjgnPktTgSYJX-OnOq_BpI.mft (raw, json)
Hash identifier:          j/m9ijQ43m+NJ1LJxThDaGjBdUTRv3bPQUApQE7pFBQ=
Subject key identifier:   8B:89:E6:F7:BC:2D:D0:65:5B:C3:C8:01:22:C6:49:A2:0E:BD:82:CC
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Certificate issuer:       /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial:       0194BBCE6C00751312F14A5ADDE96E870B5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft
Manifest number:          1447
Signing time:             Fri 31 Jan 2025 10:00:54 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:54 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:54 +0000
Files and hashes:         1: 3VQFHIG_0NRiYGSMTzNDYelPmMs.roa (hash: T8N7lYcGBn0m7uBQBcevnqsWbvysQD6cxVHO1RDwUvg=)
                          2: 41kwTSa8H9b9pjrkUzwf85FQ470.roa (hash: 6DgsyUX2uyntOPFl8yDMIgTXXXs0mzyQ219673BzCzU=)
                          3: CdQNI5gcW0_1cf24cLvP-tL_omw.roa (hash: fyArCRfx7SbzhmzmpSevkzJflw0c7SkqK2TimwbjqzM=)
                          4: RXJMzhMtehSuCCi6uqljNw1_L-s.roa (hash: Xot9S/JUju+/cZl9baS7ZUR4Rh18U5S5qk4hiX6txpg=)
                          5: TpqMtUwJukfz53BZIUdbM-kP9dU.roa (hash: sJ+1FquCHUKBx1oFow8K9ca95AgoJ61IjnusPLlcDN8=)
                          6: WEKuOaRTTX2rTln9asflqP9Y2Os.roa (hash: EcqtEEKcbvmbmPvboEcXGauHM+e7HHmS4JSP0Le2t4o=)
                          7: XmOvv05xULfAWuDqrX7juNO-0qI.roa (hash: eJeMTOSpJLyqSZNQmSL2OZUvlINOSkmPnV9aTneLjHg=)
                          8: Xzib8AfEYqY2cHmuuM-ww_w5sW0.roa (hash: 6XHRFIs5VNl1aw2+x8Rz4IQniQIfYw9CyiplPPtk5bE=)
                          9: aMv6gEqWxpGKwwWm6t5nV_iaM3Q.roa (hash: +a48j1hsLG2vzEIY2MRVBswlr1+jm51V+Dk+4EhL/9Y=)
                          10: h3itgWjgnPktTgSYJX-OnOq_BpI.crl (hash: rgxYsv2gwkaEFRqfGKyTO8+My3JRNrNqXD7FgZoZqkQ=)
                          11: jF6aKXBNyHTawjaz9GVexS6_Vps.roa (hash: FiDTfOMoZak8gOhtJT/8yhL0tIdZjUn13AvzOxfMN0E=)
                          12: s6XbpS6zvG-OGcqP78qsGOOoOlQ.roa (hash: vai/46FuXyssCtnAk+MIcYY2mUqRBxwISqAf2lFmzsg=)
                          13: vsuobB7Q7M7H0d2b7icsBX46rF8.roa (hash: 7WzZ613I/LXa4Zefx9tEqY2ZhSRre3hj1QC98fA5RuY=)
                          14: xP11eIeQX9x-FJdxDPaYbALauGA.roa (hash: X/B/3lK+XxCa5BQgDlvPLTFtIiO9rYw/6L5OCGSXKQE=)
                          15: xT7aM3kUy4b46Qb4CAkkSam9t5g.roa (hash: Rfd0mKt9HyiAqh5+s2geHZ1SUFHa0fSNkwoTUgmAYpI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:6c:00:75:13:12:f1:4a:5a:dd:e9:6e:87:0b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
        Validity
            Not Before: Jan 31 10:00:54 2025 GMT
            Not After : Feb  1 10:00:54 2025 GMT
        Subject: CN=8b89e6f7bc2dd0655bc3c80122c649a20ebd82cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7d:83:bf:e0:51:5d:ab:b9:57:fc:39:fa:99:
                    c3:07:8e:66:aa:e1:8c:c1:29:57:25:7d:56:52:cf:
                    87:02:4f:19:66:dc:88:7a:b8:26:47:f9:40:52:38:
                    82:70:1a:2b:1b:49:16:16:b3:d6:b7:f8:d2:96:f2:
                    8b:25:4a:9d:fe:5b:bf:f4:69:39:cb:93:c9:e4:eb:
                    f1:ab:aa:d4:cb:81:40:49:f2:ab:3c:75:0a:34:36:
                    23:6c:9f:a4:46:ee:a7:f8:d3:3f:62:17:d5:e7:20:
                    e0:7b:d9:bf:61:bc:88:07:e1:ed:46:2f:6f:47:87:
                    c8:ee:55:3e:ec:9f:3c:af:6e:a8:31:eb:ee:df:a0:
                    e5:ed:42:56:f6:29:02:eb:52:3b:23:0c:a9:98:3d:
                    8f:88:2e:fb:67:d2:3a:c5:28:2c:ff:f4:6d:1a:ed:
                    5e:46:23:5d:f1:ba:87:cb:72:68:91:56:9f:cb:74:
                    8d:43:fe:65:4e:d5:f3:7b:5e:b3:3c:3f:63:b7:c6:
                    0a:f5:fd:19:f8:8a:a5:77:31:6d:1b:9b:0e:e4:fc:
                    6b:84:3f:43:e6:bf:92:01:e4:3c:f3:a2:0f:a3:97:
                    9f:53:2e:89:9e:dc:47:df:11:60:52:d6:8f:a3:2b:
                    12:55:8e:c2:e1:60:e9:e9:8f:23:c7:62:91:c0:8c:
                    f3:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:89:E6:F7:BC:2D:D0:65:5B:C3:C8:01:22:C6:49:A2:0E:BD:82:CC
            X509v3 Authority Key Identifier:
                keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ba:b3:a5:61:7f:bc:22:47:51:9e:e7:23:f8:51:c6:6d:ab:
         67:58:98:b0:f9:6d:6e:68:cb:47:0e:dc:13:c6:9a:08:77:97:
         22:48:a2:8b:63:87:03:4a:d5:8f:6e:07:db:a0:f5:c8:c1:e7:
         c8:c7:87:a0:b7:bf:fa:ee:68:60:ed:a6:04:89:af:da:6e:61:
         f0:78:16:dc:f1:50:d7:71:d5:72:3d:91:a7:bc:0a:79:1e:be:
         f2:21:4d:46:79:43:52:27:ab:2d:36:48:b2:56:df:00:86:26:
         82:12:87:ef:c2:7d:94:54:29:7d:13:31:ea:3f:00:e2:d1:08:
         bf:59:4b:15:50:b5:ef:f9:cd:ea:f6:d1:76:c5:5d:c8:26:95:
         04:10:34:43:18:09:59:7c:84:1c:f0:0f:e3:3c:34:2b:21:86:
         b7:ca:35:b6:b5:fd:f0:61:23:9b:bb:3c:9a:a0:e6:29:1a:43:
         fe:e7:9a:a2:15:ba:7c:da:9b:02:0f:c8:0c:c3:eb:e3:76:df:
         51:c3:73:d8:c3:f5:ad:c4:90:b5:68:19:01:60:8c:bf:c0:10:
         5a:6f:75:9c:3a:ae:d2:37:f0:21:4c:dc:0e:75:05:45:06:55:
         d6:0d:e1:c6:85:4b:5e:be:c4:07:66:9f:7d:9e:87:9c:20:ac:
         8a:79:6d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:54 2025 by rpki-client