Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
File:                     Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft (raw, json)
Hash identifier:          geq4noZr6PK8C1iyJZV5R8myoHxAj6SaqOto4Ork2K4=
Subject key identifier:   A0:22:BB:07:8D:B5:3E:94:D1:2E:C6:DF:0A:97:74:9C:BE:C5:F1:3A
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Certificate issuer:       /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial:       0194BCA9BE962BC29032EAA3DBB8A8D4766A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
Manifest number:          1049
Signing time:             Fri 31 Jan 2025 14:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:28 +0000
Files and hashes:         1: 23auccAffXFIIKLeLwTIatRjFOA.roa (hash: sRXgVYq+gNWG3wMO4JxSXkBGXFHJVo6nx/QhFnrI+8c=)
                          2: 5KA65hOOKNz9EuX6YK-gfaOukrk.roa (hash: PdDTNbXgo67l0ruRP78o7mFUIKksbnBt24lH/mdrr9c=)
                          3: 6q1xtry3UGXs0T_pltIAsJ38AJM.roa (hash: 36dXFGQafr2SxWVio8b5w/WlRAp0fTB+m92yu6qO4iE=)
                          4: 7dKRnkH_61BL1vNIXpiNlOS77-4.roa (hash: ZND1wl0u3GvOFJlJYyjSu+QQ5WpYrODyfJd7rSZepHM=)
                          5: 89pL_6fhBybA-VoC0AWu1S10sdM.roa (hash: YxD0MYukYkke9dssLSiPBXYgNOj8+xJSU/U+9dumNwM=)
                          6: DqCqDJYVWeNEU8uvtBnd44bah3o.roa (hash: cwDXvD7pgfwaTfE6xUf+Y7JKXSqnFw71yOuOSjsqWt0=)
                          7: EJeuf5IKxfq2FL_pg77yzZErIzE.roa (hash: 31VL8gTmuVGQ+KVT4KHiciNe+A4vLtk11BvQkgqcfek=)
                          8: G8fzQDALPsZtnyHdyazBSsu_jP4.roa (hash: Tinb4DUHnkQV24tqJqcLOR12FUZvxkk2FsyWpCbsUHw=)
                          9: Gi54Bhv0-P18GzbUQKYTb3Z7UrE.roa (hash: yacRTMb8Xic0ggjn49H6OGvE9OcH0X0NeLEYae1qY9E=)
                          10: LeLgJwGr1MR3W3NE33dCf6uaBs4.roa (hash: Lz/GL+kozzcf25kN9WESY/yw/Ybku5tKLLKD4GsfUOk=)
                          11: M0tVy6uYHq6jqgC40RqmOtLK77c.roa (hash: jn9WvE7OjBrs2geBpc6UG+Davk/8M4j0RQmIP1Rm5SU=)
                          12: MpEivG697HSgboMFrW97Gh0ERrk.roa (hash: uDIEv1yFQXrRPLR88MRcozQnDHhbLOz0YK7ewF6y1MQ=)
                          13: Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl (hash: uBj7jYXet2yO4Ud2Tonqr9amDsEyVCgk/fUPcd51T6o=)
                          14: Qzv-yyZa_t5KSvpd82pXjgzU65k.roa (hash: 2Ux+ZEoS16pvpBElRLWENi+dUAhU2cszLKyDyiW+S9E=)
                          15: SYazyu-u8AaHOp_p4fYOBWFSAH4.roa (hash: 3uQHpIk+j5fI2QkTV41j3OdxVvxax0SOFnLvirIqlg0=)
                          16: UHKxbfyeZNA8vfYZxdgz-4yzkq4.roa (hash: Mb15+/01DxorNLvSHrlSh6ZQx9Xaj6QioFjrKFNgMm4=)
                          17: X4ndwPZxVFoSM5mmzVMfNdptKh0.roa (hash: tCokVtXtd8uC+H3+SOEz2ZoyOcZZQahkSDZ5fFvXH+g=)
                          18: cnlKi9qLrI6JaYoaIugGIbnBwcA.roa (hash: 5e0bB/hsZW7gYeqd0QyUdWIzUtk88cRCCy3/L5Xpu54=)
                          19: gX5iDf2KIrrm8gH7yW-NOlJpIDU.roa (hash: V+Voy7PF+yL9p1Cs0/J2s/9PaMgks3rVoNfkludYN2E=)
                          20: i6bd6fMorsRaNPo_y3O9YHa_JY8.roa (hash: pX7J+a/wu4lqfmaESboDo9lKDG2+T/BHYlZ6YrCC+SU=)
                          21: kHYyFPjohiyIQJY5w_HOlt1K3Fg.roa (hash: jgmI7LdVC9rYIzkr/aHKrpmNE8aaRzqVTYnNDaZBV5I=)
                          22: mgKZhUoMpQH8q6Mo5_XIt_2bVvU.roa (hash: QwiZdzG7fsDj3yDk/ZTVrAi+RRp5OlF5mISx98Ld+34=)
                          23: pQAmrx6o4CI4reP0N_Rh_MJDpX0.roa (hash: stB5xPGCbCcePFe21J8b8Kvsf/3aDbBAYH2/WR02NM0=)
                          24: pzp2YbmxKGY3emuRRda4ms43xXo.roa (hash: 4I2tGsjQKyzT+peCN2wHamWzkc5XPGqYKhwx6KO6mHM=)
                          25: yJQ2ykFk0I1TMUAp0pPthpkKxHM.roa (hash: D/m6ida6ggGK38dVlSeh1/tZx7jdED0sPxj/a7WruMo=)
                          26: zKcfq0ZG1LIJnD1TbRJYizV6RYo.roa (hash: cJKI9LfE9y2irNqCxCSKp9b8wQ7eetjvdoSxFjEBHuE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:be:96:2b:c2:90:32:ea:a3:db:b8:a8:d4:76:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
        Validity
            Not Before: Jan 31 14:00:28 2025 GMT
            Not After : Feb  1 14:00:28 2025 GMT
        Subject: CN=a022bb078db53e94d12ec6df0a97749cbec5f13a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e7:80:33:57:e1:0e:be:b1:fe:3a:f9:20:af:
                    35:73:b1:6c:b4:6f:5e:bb:f4:7f:f1:94:0f:95:1d:
                    5b:38:4e:c5:73:ae:a1:5e:a8:cd:a6:f5:41:8e:08:
                    a1:7a:63:30:c0:ba:22:19:65:d8:e0:0c:51:43:d6:
                    75:0a:1c:ee:79:5a:3c:74:a4:e7:a9:b1:20:53:47:
                    fb:c3:a7:9e:50:45:20:25:44:8c:b4:d2:65:9d:50:
                    11:bd:df:78:bb:08:f9:91:28:d3:ea:ef:0a:a9:52:
                    d3:7e:cb:24:6f:91:22:62:9c:2f:18:a3:c0:aa:2d:
                    6c:d9:6c:29:c3:72:37:4a:76:45:f8:f6:fa:97:22:
                    be:10:cf:9e:dd:6b:eb:1e:87:db:10:93:03:8c:ca:
                    c3:90:44:a7:27:d2:18:c7:54:41:f5:21:ed:2c:cf:
                    5f:16:02:3d:9d:23:9a:80:49:06:02:f9:ad:30:52:
                    84:68:9a:8c:f4:f3:c9:2c:9c:f0:33:c3:19:86:32:
                    cb:44:af:5f:b6:ea:4f:5e:00:fb:89:cb:7f:bf:9a:
                    ab:58:8a:d7:71:61:63:bd:c3:60:51:34:12:0b:d8:
                    de:f9:46:12:c9:88:15:dc:26:72:df:62:16:4a:b1:
                    fa:f4:22:d4:82:09:8a:3e:c2:75:e5:ec:0e:a6:f8:
                    cc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:22:BB:07:8D:B5:3E:94:D1:2E:C6:DF:0A:97:74:9C:BE:C5:F1:3A
            X509v3 Authority Key Identifier:
                keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:93:c0:01:6e:17:31:b0:8e:24:ab:a9:eb:27:5f:99:86:d0:
         26:71:fa:b5:34:19:ae:2d:63:fa:8f:4a:9d:46:98:e0:26:2b:
         4b:67:7a:b3:38:ee:fe:b7:84:14:6a:a4:bb:77:06:1c:40:e6:
         b8:ed:8f:7e:c2:35:12:0b:5a:e7:8f:0d:7d:fc:13:fe:e3:ca:
         3f:15:15:52:a6:dc:45:c3:66:dd:08:d8:40:f7:7e:46:1f:e2:
         f8:b6:94:c6:78:07:2c:08:b4:52:07:ea:11:73:57:5b:71:a4:
         51:ad:37:b1:55:20:fd:ff:e8:ee:ea:6d:b9:b5:fb:ef:7c:2e:
         96:25:fa:47:eb:8f:b8:0e:c0:88:de:83:24:04:ba:e1:b1:7e:
         07:0f:86:51:64:7b:89:4d:7c:87:3b:51:cf:f9:fe:08:16:6d:
         b5:71:2f:8d:46:99:ea:e0:14:0c:29:05:e0:25:b2:d8:6e:88:
         ac:b8:14:46:02:7c:84:dd:d3:38:9d:9d:af:f7:5b:e3:65:f3:
         60:ac:99:d6:c2:34:18:54:f9:41:21:6b:5d:5a:ed:3c:74:46:
         22:96:81:45:06:0b:b1:4a:fa:e0:2a:0d:55:b8:06:2a:8b:6a:
         11:40:03:58:6a:1f:f5:80:fb:57:2d:72:11:a2:fe:ed:17:f5:
         da:17:6c:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:02 2025 by rpki-client