Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
File:                     H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json)
Hash identifier:          EA47+3k5qIIm/0tAD6ho8pFvc5bDbsLx4H4LWICcHvY=
Subject key identifier:   DC:82:EE:B3:C8:3C:8D:12:F1:82:D4:6B:10:BA:D1:90:CE:DE:08:00
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Certificate issuer:       /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial:       0194BC3C5E9352A3083E2F14BF7E5F52E5D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
Manifest number:          1446
Signing time:             Fri 31 Jan 2025 12:01:00 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:00 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:00 +0000
Files and hashes:         1: 0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa (hash: c3R0NvI9wSQVTmaH5yGuGplsQLYtXrXERE9zYTzHhy8=)
                          2: 4AS-0AOLUx__wmNhCGTeWPEnAQo.roa (hash: 1yOTh34TCVsaX9HiMqqafQzrMBKAhMm9U+yl1SEcoNw=)
                          3: 5Z9zQYiQT-9bbmf1gYjYtdMqh-A.roa (hash: dwoCL98zxAribSjy38tsgE74R02P0uk7PsgJvptX1JU=)
                          4: 6Ebu0HcrsLkrrgDBeBB1A2dy2BM.roa (hash: TccVrsP1WNA2hyHvabl2Zj8Mx0JoLI/zobG0dsNCzu8=)
                          5: 9OZxkpid54x2rsU5VRKfjY_gB2A.roa (hash: 38cpSiAtwD6roS3bP5O86nTXrnPOD+5Jin9ozETV8sI=)
                          6: Ay-SweIqjTD5x-W0BgOFlXFvGto.roa (hash: ENRR9lHZ+JRK+4SQ3UrX8bD9aFZzV05sOeoNCH2LeFY=)
                          7: Ctu_zdT55QvC6-G-SxIKwGi4wDc.roa (hash: wdlWguNWI5zFZbP+4kdzwSssF7MRzveLv4qiPvTiQro=)
                          8: EppnmZl-hivZ6yXCw8PIfVHg8ks.roa (hash: Wiyihq6BaYpeBkE31BV7I7S5C0Ot3rbB+PhwUmAMu5Q=)
                          9: FqYIT9v1PIigYUXlKqygd4WMyec.roa (hash: tv8mfQBReWKdNDNzaDeKywrzkQOxW77WcbdZkUDG+AU=)
                          10: G8IgPHN2FXyIl75Djei3X2y2GYc.roa (hash: mISIjy6aMOLzu15LO7KCjeFGNl/oTWf1+M4gWrvBkCY=)
                          11: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: fxdVDb58CNXPfQHNMCdA/+cMZKdVOMU9QcJwbOk+Tqg=)
                          12: KcaXY5GqNLQM-eAtasEVAbUL2j0.roa (hash: eFzhogYKRZ4wuRZtpbVGGo9W1JTGOiiHVbwPqMYU5QQ=)
                          13: MUKicFTzhC00zdrY_h1AYYxVa-M.roa (hash: Ids/SWcSu2QegMrmqZTQrwfmzaSd55FYqNM5CzWSoLA=)
                          14: NKBdNnKPToLI47Hnl3n9Lr0qpVE.roa (hash: TjUhViH8+so4224KmGJym6LJscd3XEc8YHqommmYBXc=)
                          15: PNUti3X7fTE0OHEkRLQFQxtKCuk.roa (hash: aliXDs58/kIRits7ot3W71lRxlaREa6XrlyMb3I4GP0=)
                          16: SEv5PYdinUVT5nM_RvN02I4WnPI.roa (hash: bEn83H7TItfWeMGBLjyh2LDH4cnpzc0XU4z33ahI6+E=)
                          17: _4zuoFfJ1lWOHRxbFgnICqvRYTo.roa (hash: 6Z3yT4Uro8UD6Kg7GG2ZeAaXcFVddN8U5JapvYxDnt4=)
                          18: _PMt2OoL3tDM4rKRYVgBBMfWRFA.roa (hash: Ix2jd6T1COBEpwRmmTUBGYHR6LZbzYxbMPftc77UFdE=)
                          19: aym9fFTlCOO6_TFKucqP8rQK7Dc.roa (hash: 9WJnq0EqKoeXj6Ls0YEvw8jPPKPCxSuUMIvPja3ohkE=)
                          20: eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa (hash: eglPjv/u5AlTJot/2QRfyPZBeks5h8j1RactwsszD4s=)
                          21: fKz1-9xo27dZ2S0IPacWOZTZsy4.roa (hash: Km7ntY5vzUDI+if2xFqUXvoglWfTB7cuYK1InFbKqaw=)
                          22: fN6-ucvixEMwzfEXNRUOgkq3p3w.roa (hash: QSoq1kjSTfa9vGe0ryYrcV8u0DdFoiJrIzt5wytYDbI=)
                          23: gGSxPt2Sh4M8i7J8HJfnceMCe00.roa (hash: O0jgtQJgjrWOC325S7JKGmv6jCCpS56jcL4dcIe6mxs=)
                          24: hS1jiuVl2dU6SMvZXo-aur-baIo.roa (hash: wRVp8ycxJk1e2oMiYTfs3ketnUSkqnJTyHStucSEmSA=)
                          25: kPALK0u_pJmbieCv7kbynfsqawg.roa (hash: r0Pzr2DCQpihDWBe0rVtTwTVSjviPIsMp30ZSdfUtv4=)
                          26: lC-MwQo01Gp82RT3mnQhOnXTNVo.roa (hash: txd4viUbMysMasnkwJrSk5DhmqAOC+f+W+IModM0p6I=)
                          27: rIGw4rvANHfOuMx5NCLXbIqwca4.roa (hash: Ax9z9G2JPoeUmfYGQQfPW9WibNiDAosH5QsVz6vOEcs=)
                          28: sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa (hash: GUZUDJYWdLrHKEBuVtLpBU6JuOIR3vdhCyBhBteo5W8=)
                          29: sgWOuS580F3ik2qbZoDfyyTVqq8.roa (hash: 1rWiUes/UGLhnsQQwqKoTOa3kTzfkG+OrqoT+5TD+hc=)
                          30: w_q7lMoSjsh87AtbKJG_MjZSzbs.roa (hash: aLEvMvWLIZ7MDfR1jeEEkQ6VSWVyC5TKwxKUplfky8o=)
                          31: yh42Ac90RZWWPXc_66CM7NZ_M5k.roa (hash: tzV8E5OYlSixUq1CthaGUqHvnzc4smQonJaVny+Z3SM=)
                          32: yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa (hash: p9i8I2Z2Hnlivas+hpBSidTPpg6KPMeUDk8C71jgMes=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:5e:93:52:a3:08:3e:2f:14:bf:7e:5f:52:e5:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
        Validity
            Not Before: Jan 31 12:01:00 2025 GMT
            Not After : Feb  1 12:01:00 2025 GMT
        Subject: CN=dc82eeb3c83c8d12f182d46b10bad190cede0800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:d1:1b:8e:01:c1:f1:06:de:73:2f:bf:e4:
                    4a:d0:ba:e3:8a:b1:52:84:1a:89:bc:6b:19:8a:dc:
                    a5:67:8a:25:f5:cc:20:56:85:5d:ba:bc:17:3c:ef:
                    3b:87:5e:5d:22:8d:c3:0f:a3:ad:4e:c6:2d:84:70:
                    6d:5c:f5:52:91:27:47:b1:b1:41:ff:5c:4c:5f:e3:
                    37:0e:4e:e4:97:58:dc:a7:90:56:b8:ff:7a:7d:34:
                    98:3e:59:72:a2:db:4d:cd:38:2c:49:5f:e5:20:8a:
                    78:3d:10:37:10:2c:0d:72:23:ae:10:28:a4:a3:32:
                    48:61:7c:9d:49:af:89:c7:ad:38:67:c5:6e:69:3e:
                    b3:15:58:00:57:f6:9e:53:b4:b4:1b:46:43:4d:e0:
                    28:68:98:7c:92:7d:37:25:a8:5f:e3:ec:7f:5d:cf:
                    1d:53:66:48:15:4b:55:10:3c:d2:18:e7:9d:85:a3:
                    27:cd:88:21:8e:2a:36:30:9f:a7:05:7a:57:78:50:
                    46:d3:01:cc:e5:c1:83:55:75:67:a9:d6:e1:8d:95:
                    a0:e1:81:d2:6d:e4:d9:fd:28:1d:64:88:86:df:a8:
                    63:20:25:d9:0b:e5:7b:c2:e0:5c:ce:92:01:86:67:
                    d5:19:99:68:6f:a5:2c:b0:79:ba:ad:16:e4:43:b9:
                    4f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:82:EE:B3:C8:3C:8D:12:F1:82:D4:6B:10:BA:D1:90:CE:DE:08:00
            X509v3 Authority Key Identifier:
                keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:12:56:32:fa:06:d0:db:2d:43:db:7a:62:85:6e:b6:a5:cd:
         d8:54:c2:8c:bb:d4:69:33:06:8c:b7:76:a4:2d:35:40:48:18:
         f5:10:84:22:6f:4f:e9:27:69:15:81:d0:2e:de:f6:93:f7:f3:
         90:b3:be:09:71:dc:1a:ea:a8:7d:f2:fe:79:9f:fa:84:81:02:
         03:94:fc:bd:f9:65:31:b1:56:6a:e3:3f:0b:57:c3:57:21:53:
         4c:98:8f:3f:32:06:a4:06:aa:58:17:1b:10:c4:91:59:25:3d:
         b2:f8:ee:76:cc:ef:2c:13:9a:d1:b8:c4:86:42:2d:be:f6:20:
         71:53:29:5e:91:a0:60:44:ce:fd:ea:9d:8c:8b:58:c2:65:1d:
         21:f6:66:7c:34:94:b9:b9:25:1d:16:39:16:27:d0:b0:99:97:
         42:9a:39:5a:aa:40:07:2e:ba:4a:3f:a7:3a:69:f7:95:4d:d9:
         a2:09:f1:09:78:a5:74:22:5d:79:df:13:89:86:6b:29:c0:48:
         da:d0:9c:18:41:a1:92:89:af:8b:4e:86:04:c8:71:e9:95:b1:
         81:80:a5:2e:07:71:37:3f:58:0e:8d:3b:28:18:d1:e0:c8:2f:
         11:bc:07:7c:4d:83:ca:e1:1b:2d:09:86:e3:38:d4:8b:82:32:
         d7:80:e0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:12 2025 by rpki-client