Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
File:                     olSp86JmUT3caTXYvgIuflIw6hA.mft (raw, json)
Hash identifier:          JOu/jAs6aZLC/wRokpsROcwY6AJqU/j1bReA08jevpc=
Subject key identifier:   4B:8D:91:CA:EA:BB:1B:AB:96:08:88:04:12:E9:EB:E9:04:0B:56:88
Authority key identifier: A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10
Certificate issuer:       /CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
Certificate serial:       0194BBCE1D271B665D7D50DFA43536A990EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft
Manifest number:          1456
Signing time:             Fri 31 Jan 2025 10:00:34 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:34 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:34 +0000
Files and hashes:         1: 6pgC2WmbvOwKxQdYhXcqJyv8gLI.roa (hash: YzcBdSuJXmc3F8XHuHfPgYGMrEVDV50rG3CcR70Lp9E=)
                          2: 7X53oJLqGOE0xx3KdPazgPnRT3U.roa (hash: uSzYsB4qy63qJbEIyuqElP6d6MoCw1DtIo1FVml3qr0=)
                          3: 8eep6dVAmsZIpyTErh0SkPM8qXc.roa (hash: SD/qDWKDw7GpyuYdzNmymhVCtf1WfMbKlxVT2o4ptxo=)
                          4: 8iIqri7IvcauWOTMINZhQiLRKvo.roa (hash: RyqX7TgKsmeFBvLMMu3I/bH8LRWEmU571C2kQM35LYo=)
                          5: A45T9JlIkLiT_DE0_6X5S8Fq0t0.roa (hash: 1LNt/xXPBnaerAH+uwhDYJHEIRMdA6RsiiUq2tdop/g=)
                          6: CEFPZMYki_XCGuRap8cQ4UDAZVo.roa (hash: 7Ufr7BJKn/AEyurGnL+WUKXJlpjofXPV50+llzYFi0w=)
                          7: CcxaxD4EoKhnFbCvn7fGx4PHWlU.roa (hash: KZDH2XHLPt0marUxUQIkJLqgLsepcaWVX+BzF0QFh4g=)
                          8: GxlDQiNeRlshf53miAx19J4RPC0.roa (hash: OeiSyRpl3mLDjdlOEGBqomQ5rlxYiJaiIYb0ad2mSjQ=)
                          9: KAFqKDk9BCiu0n2y7Q0oKN9OUbo.roa (hash: iAsCXatV/rRYZjdzqnb2mrvtu4xhk01R8Z28UHFMbWk=)
                          10: MoWJzAK8yM2I9t1LTRcJGgWiL8I.roa (hash: wVfGqj4RePXTFHGr8qHdJS00EnHJkEaNtUvIvHlJWq0=)
                          11: Ni-Fp4_j67fDXsFhqeAtqlBDVMk.roa (hash: 9tgqY57FLat9I59Y+ts7KO1YugeEb5mFhO4VhQMSpuE=)
                          12: QPlqMiWOSf78xj2rqyZ0eOqZBss.roa (hash: MCmgXObXIkG1ZJluYAKWR91hwdQnUbKcsINqcTuBS6o=)
                          13: T30bJyS4tnukk0y5XcMB2tlA-sE.roa (hash: NB63nJlDN5bcZa8a7PZtrUJV2b4GBR3YB6Q88OfOLtU=)
                          14: cfdbmoaWdxVHIDhjILaSo4OtkDc.roa (hash: uQyWoeGxbLL+4u04+Lk0DJknoS3PSDcycZWpGGdkjbU=)
                          15: dKlv3q5W0ZkPs-fHNGVzVPehrhk.roa (hash: P0BUXs0HjfUZHQTfdJ+247g73zbdUO2l0SQMdBs7h04=)
                          16: oBER7XWnZgdSbj3Czv9uaUFR2sQ.roa (hash: M0t0U5rqpdmYFg7skq2cv8yVVYTvEMFedcezsIR5ZSA=)
                          17: oF-ZKm-LG7Iu63mJDsCWuLFkY4M.roa (hash: xR0FwkohVFgDTpppB9NlKBMFWMVay8ZCu79sDc8DKiI=)
                          18: olSp86JmUT3caTXYvgIuflIw6hA.crl (hash: QkmIchEOCKdEEJSWIQOxbAhtDq1ffr1zHvler0rPmh8=)
                          19: s2dvs87g7mYk_o56Wn0SDYYnNL4.roa (hash: a599Jm7G6hEm8AkMoi92fe7la5Wnmj78p+F/nlpnTCM=)
                          20: yCRPZTKKwyn7Dh1bpIRLO3VF08w.roa (hash: j8CzkpxZ0irSvwe8kG2OgPs54FXnomRGROilLkPqjF8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:1d:27:1b:66:5d:7d:50:df:a4:35:36:a9:90:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a254a9f3a266513ddc6935d8be022e7e5230ea10
        Validity
            Not Before: Jan 31 10:00:34 2025 GMT
            Not After : Feb  1 10:00:34 2025 GMT
        Subject: CN=4b8d91caeabb1bab9608880412e9ebe9040b5688
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:db:88:b8:37:78:62:85:df:f7:50:af:55:d2:
                    3d:27:a6:1c:13:41:36:d2:4d:a9:a5:72:03:b3:62:
                    02:76:46:3c:67:07:f1:be:a8:9c:8c:0e:ab:63:c3:
                    fe:a2:1e:f3:2c:77:50:40:0c:f3:0a:47:2a:b7:5b:
                    fc:b1:5f:18:a4:f9:fd:9c:b9:70:ba:30:dc:cd:f4:
                    b1:68:ad:cd:d6:a6:04:ea:01:d8:73:e7:e4:cd:6a:
                    74:b6:08:02:7f:d2:32:c5:c9:da:17:8e:0e:bc:58:
                    81:ae:79:d3:bf:11:c1:9f:83:2f:b2:4c:56:60:c3:
                    fa:7d:f6:81:8b:73:21:ee:f8:34:77:b1:b3:f1:25:
                    36:52:60:a3:9e:a4:24:f1:e1:ca:ca:83:35:16:74:
                    f1:60:be:55:dc:97:6e:d3:45:6f:c1:c8:b6:a6:dc:
                    fe:30:cc:94:c8:e5:72:13:ed:3b:77:7b:6e:fd:a1:
                    b7:16:4b:91:1f:7e:a8:1a:68:c3:48:04:9d:9e:60:
                    60:38:cc:09:c4:83:3b:51:c7:1e:74:7c:d4:ce:1f:
                    e4:f5:44:a3:d9:b6:f9:2a:92:ec:30:ac:94:61:6b:
                    2f:4c:f8:a5:06:f5:e9:dd:80:b8:36:ea:0b:b9:f2:
                    cf:ee:d0:c7:ff:4c:0c:65:96:42:b2:c4:c2:09:0e:
                    cc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8D:91:CA:EA:BB:1B:AB:96:08:88:04:12:E9:EB:E9:04:0B:56:88
            X509v3 Authority Key Identifier:
                keyid:A2:54:A9:F3:A2:66:51:3D:DC:69:35:D8:BE:02:2E:7E:52:30:EA:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/olSp86JmUT3caTXYvgIuflIw6hA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/b60373-818e-40a9-9319-addf0e1849eb/1/olSp86JmUT3caTXYvgIuflIw6hA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:21:d4:94:c2:c2:9d:30:69:db:1e:51:27:a9:e6:24:a4:c1:
         4b:44:f5:ad:5b:96:05:09:24:2a:ad:ba:6f:c6:16:a5:a3:e8:
         a5:e4:ac:fc:96:57:99:10:80:d8:08:e7:d2:4e:5a:19:6d:3c:
         8b:5f:b4:33:64:f7:97:ec:6d:32:eb:71:32:d1:ae:2e:e6:31:
         22:1f:6e:0d:61:1c:71:2e:74:fc:68:86:20:fa:28:c2:ce:76:
         be:05:a8:53:09:92:94:f9:db:bd:62:47:00:fb:94:cd:b1:9d:
         02:6f:2c:db:d9:7f:68:0e:15:36:33:7e:86:88:67:c0:2f:bd:
         4c:cf:fd:f7:9d:f8:d1:c3:96:e0:84:f0:2a:d9:dd:f1:e5:85:
         1f:d9:39:03:27:4a:72:41:1d:6a:8e:d0:1d:d1:d3:20:15:c9:
         e9:c7:9f:d7:e8:ae:66:1a:e5:14:89:80:50:9e:1a:89:9e:9d:
         35:e6:3d:aa:5c:41:fb:f2:db:ad:91:94:ce:c6:21:52:ce:55:
         7f:38:c0:1f:7f:cf:6e:28:ef:ce:fd:07:bd:d2:eb:33:46:da:
         3f:35:9a:8e:42:ff:5a:11:cb:05:76:2d:30:4d:cf:a8:61:3b:
         23:bd:b7:3f:c0:cd:f1:ec:63:c8:d4:6f:64:a5:06:28:82:f0:
         5f:46:4c:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zh0nG2ZdfVDfpDU2qZDvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyNTRhOWYzYTI2NjUxM2RkYzY5MzVkOGJlMDIyZTdlNTIz
MGVhMTAwHhcNMjUwMTMxMTAwMDM0WhcNMjUwMjAxMTAwMDM0WjAzMTEwLwYDVQQD
Eyg0YjhkOTFjYWVhYmIxYmFiOTYwODg4MDQxMmU5ZWJlOTA0MGI1Njg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9uIuDd4YoXf91CvVdI9J6YcE0E2
0k2ppXIDs2ICdkY8ZwfxvqicjA6rY8P+oh7zLHdQQAzzCkcqt1v8sV8YpPn9nLlw
ujDczfSxaK3N1qYE6gHYc+fkzWp0tggCf9IyxcnaF44OvFiBrnnTvxHBn4MvskxW
YMP6ffaBi3Mh7vg0d7Gz8SU2UmCjnqQk8eHKyoM1FnTxYL5V3Jdu00Vvwci2ptz+
MMyUyOVyE+07d3tu/aG3FkuRH36oGmjDSASdnmBgOMwJxIM7UccedHzUzh/k9USj
2bb5KpLsMKyUYWsvTPilBvXp3YC4NuoLufLP7tDH/0wMZZZCssTCCQ7MMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEuNkcrquxurlgiIBBLp6+kEC1aIMB8GA1UdIwQY
MBaAFKJUqfOiZlE93Gk12L4CLn5SMOoQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTkt
YWRkZjBlMTg0OWViLzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9iNjAzNzMtODE4ZS00MGE5LTkzMTktYWRkZjBlMTg0OWVi
LzEvb2xTcDg2Sm1VVDNjYVRYWXZnSXVmbEl3NmhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXyHUlMLC
nTBp2x5RJ6nmJKTBS0T1rVuWBQkkKq26b8YWpaPopeSs/JZXmRCA2Ajn0k5aGW08
i1+0M2T3l+xtMutxMtGuLuYxIh9uDWEccS50/GiGIPoows52vgWoUwmSlPnbvWJH
APuUzbGdAm8s29l/aA4VNjN+hohnwC+9TM/995340cOW4ITwKtnd8eWFH9k5AydK
ckEdao7QHdHTIBXJ6cef1+iuZhrlFImAUJ4aiZ6dNeY9qlxB+/LbrZGUzsYhUs5V
fzjAH3/Pbijvzv0HvdLrM0baPzWajkL/WhHLBXYtME3PqGE7I723P8DN8exjyNRv
ZKUGKILwX0ZMhw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:58 2025 by rpki-client