Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
File:                     xm2dULO4nVHIqiST5-9HAdYlHa0.mft (raw, json)
Hash identifier:          1nvRkqcf8vwoOaWRdgeKB/sldxLzPuPLTIwcUFPAjeA=
Subject key identifier:   53:8D:FF:9B:75:65:67:4C:B1:A1:49:B3:58:CC:23:7F:53:82:89:8A
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Certificate issuer:       /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial:       0194BC3C62EBAC703B5C4697C3745EB6AB4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 12:01:01 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:01 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:01 +0000
Files and hashes:         1: 0nCCSC3jIA4FtUJpFXhtsrFG7Qg.roa (hash: 5DaOp8ZEA0DdA9vlG0RLC+R1LA0L0gjUqxRcz3w4hyE=)
                          2: 1-et3egkL66ACcB8XxsgEBnm6VII.roa (hash: 4ZZwKzLoU0lcA0OohX7bJJeDfSc2RrBHj0/VmzWrgQ8=)
                          3: 1PQvYvTM-0mR2uhRrTfqzRzMCZQ.roa (hash: 57vgEzjnfLTeN7idUdr0XJ8FMClFRQnBo8Ax2ADKNVY=)
                          4: 2EJeRyglq_bitBoLjmGYPseJnFw.roa (hash: iq09eKCl0P4CUfqAdcU4qbrkeTmb5Gthd2g1mHR44NI=)
                          5: 37NN_qFZ9oT5ulT_0M_9BF1YCCs.roa (hash: SNkWXgQ1nsWscthwB0+O68nLlOKJ5rDLzgKc8BQLFNE=)
                          6: 4emO2JW9OCEuV19QBkuS5-P0s4k.roa (hash: 7Nh1o+zzoXalioorL0iJcHjWDslCqg4c5QQSS4+kcTk=)
                          7: 5lROaiYign0Tncsnuf4DpK7LKpU.roa (hash: CaZKfeoWB0BVzdzVhDocsLIaQtNRrZrO2kmI6Ik5mVY=)
                          8: 7vSowqY3zLVHcKRQmKhaSah-tyY.roa (hash: GDJHFB+LVsf5zCvLRtIdAUjiaeVjh1VRpfPOoUeuJ3c=)
                          9: 84fRK7OwW7YBpBtUSGSy4bB1f8A.roa (hash: F0BZ2PiOSrSxrlUmn6WrV3u4aEEX/cL0H6Lud+66Cn4=)
                          10: 9k6Qv6Q1Icyly4BTu9TZOCUpUxI.roa (hash: 2gkAVJuBXl904G9xnDFvD8OEhhRxc1cTHhIMjnLEM2U=)
                          11: AnGCXExWaebwYfpzVolGb5SPJ_0.roa (hash: n/vTx/H96a62Bta4NE7WqD6azMhmZyvAYZSHsJH6umA=)
                          12: BUNDUMts4ESalMK-ljVnP9FAnRQ.roa (hash: oy9sVfZrNWTnfu5PH2ylBjau+cF2gxb98XThyI6lOdc=)
                          13: DpaFmJAPai0xaXP7QAreQeSbrjY.roa (hash: FyuIYwr801YWvdCNbt/J8XAVUeBVWYj34IWltEFHHsg=)
                          14: KHWXU61nbuAvt9t1WCNbKv5_l0w.roa (hash: E9nPdxldKDh3yJv85Wm4ujXcG5a7CsMNQgxdzW3WyPM=)
                          15: KZxZSP8zxqhzvH1RhiZOsKLojdc.roa (hash: 79Za4ffHNm/35yqEIEXZzJt7VPi1r5OHEywYNdUL3rQ=)
                          16: Ka96-7xmUJHL1P83ddZSPTnIito.roa (hash: A3j4nr1SyHQHtFJaNRlAwCyTXlwC3Gmo5Vos/lZDRjc=)
                          17: L9eXoOzloyfByegWKWMIHSuYWXU.roa (hash: 0VEFznzUQQMlCk6q903xJ+gBbGsXZIaen1RH1RLLoj0=)
                          18: NaoxUETI4MRfs7Ku7ZS618oGav8.roa (hash: wQywEtha5ohZA/lDc9TGZQNBlHs8Tphdixu2SYdW/FQ=)
                          19: OJ1S0TSC0ulKkFQoexZdeyDj_Vo.roa (hash: K+mGf5tAj8Awh18X2x44DzS5EhLS9o2grru1GE/6gKU=)
                          20: PGOlAJ2_UbtZt1cjsWcX5kaxtE4.roa (hash: yllK3pne9YzRUhTjD6bVU9YW7N3Ndf4gfPLt+eRd9lg=)
                          21: QfJGcICUs9Ej1AUv1rRUZ8Xctk0.roa (hash: 7q04UG21qkwmFM+hFjcJQPmY1tVuJ6d7O9TElKsVV9M=)
                          22: Rv-Y6rHAhSJPoQHdCJLNBVXc--w.roa (hash: M7l/qsGDZqsfsCy3P3qXjnQMiv57RlRkHNf7JU+oLbI=)
                          23: S-w0HsGwAZFQF2Ks8Sg-IkujD2k.roa (hash: 97QhOeDn2Ynbz47Ce+Ud4P3JM4AhVHpCC+sCishuJQw=)
                          24: SIN-EqwjuVJ_uVTDZcaFfYV-2y0.roa (hash: 69ilVtRvoLW9898G/5j1Gs/FnTheitxDGDBUUK5AC2s=)
                          25: TydRWxXZQOtNWFnr_XG63P2ou-E.roa (hash: PU14BhgBvKt9TLPY169A5YplJZtkio02RHMWbiyDjpo=)
                          26: UVTZDoEjk1YI37FQ_IvaaRHJnnQ.roa (hash: NOafG/qLvJxLyZs2q5FGTZ54IzUEYlZgdrCLQIm1dW8=)
                          27: X3T4KMvuCFlcstKpa1Pxb7curP0.roa (hash: LoC0jPPER3qkcRvKhWoTxxMuuQdxUgg0flbHYv5ApjA=)
                          28: Y-Hi5v4w9rmIrRykzYfMnnMw0Rk.roa (hash: UAOni9fizzaasLtiSWgBxbS1fhAciTYBxVO8KzIk04s=)
                          29: ZvCU0K83780pIZIKt_iuhN7EffU.roa (hash: I105+Qqc4XVe/r+SKIg5LTvj890qAzeBPOv1IQSm4eo=)
                          30: annF-tYuzdXS1ALv0qyj5X5E7jY.roa (hash: +ABYTVUrAak8XwcnVULCGoDqh2JX0sMrrBCuyRBlGCU=)
                          31: cQDUoTmzh16X21EUYU6Rst7gwN4.roa (hash: VpP4wKEnD3uBwSFEK90HjJtm7jaN6/opZLM04PiBqsA=)
                          32: dfYA_gqdKjROQHjOnShCvA5AY90.roa (hash: nKdsw604i9Vaa2hSxMrh60iPJo8NyoMxUK+ERIm9tmY=)
                          33: kQmgrAanOZoOdA-4PbXWYAS9_Cc.roa (hash: OvdkZzlx4GDhrRDRIhoTB0lqGB519lq0sYMZBqzO8uc=)
                          34: mv8me-CMOrietHYR0QyeHWpK0fY.roa (hash: h7ZeS8a6te+lDUFZmSGqV6CiQhkMVqKUNLmw+yYraS0=)
                          35: vkUX9hV92VQst5LelEku-jzjmDI.roa (hash: 6t7C3jSP4Jkwuk3y3tOASPT2+HZn8Zja5tWF03TT/f0=)
                          36: xm2dULO4nVHIqiST5-9HAdYlHa0.crl (hash: oXY5deF/pqN5MxwKArnHUe9o0K6ru7v5UBtHpZ41KQQ=)
                          37: z-YOtG9p5k4OlqtEFKy2WK9ixms.roa (hash: iNo3KEz5ULECFwTpK+2HmaVlQM7jtAD9hPXyoY/n1Fs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:62:eb:ac:70:3b:5c:46:97:c3:74:5e:b6:ab:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
        Validity
            Not Before: Jan 31 12:01:01 2025 GMT
            Not After : Feb  1 12:01:01 2025 GMT
        Subject: CN=538dff9b7565674cb1a149b358cc237f5382898a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:51:7b:78:9d:97:10:1f:4d:a1:1a:a7:7d:d0:
                    e2:b1:9b:a2:65:38:9d:03:3d:ff:62:e1:0c:f7:ea:
                    67:c3:68:bc:ac:8c:ed:d7:14:90:b6:70:a1:68:62:
                    a7:68:a9:6c:b4:1e:3b:80:2b:9e:c9:86:cf:d4:bb:
                    17:14:0d:8f:e0:96:d7:c9:25:50:19:05:37:f1:6f:
                    c0:93:61:9d:25:a9:90:6e:65:2f:fa:7c:fb:a8:bb:
                    08:ff:8c:95:8c:2a:47:c0:e2:a3:f9:9c:48:71:14:
                    81:fc:3f:b3:68:65:13:ed:8a:2f:81:26:9b:a6:c4:
                    bf:17:dd:f8:20:03:24:60:05:8d:48:12:0d:2b:6b:
                    62:82:6a:61:c8:ce:1f:02:02:f1:db:31:c3:1c:43:
                    cb:ed:e0:1c:05:fd:04:c5:cc:e7:14:b6:33:9b:4f:
                    7c:c9:e3:b4:d6:1b:1c:30:f3:7a:32:0a:f2:fe:1d:
                    0e:49:b1:28:ed:8e:09:f7:79:1f:b4:8e:f5:e0:34:
                    1d:ab:c2:5b:c8:12:a2:64:81:b8:58:48:cb:ff:ff:
                    63:5c:fd:cd:e8:fa:67:93:12:cc:af:ee:de:bd:08:
                    e6:5f:53:97:65:2e:5e:72:5f:12:3e:a3:69:e8:76:
                    da:9c:1e:09:65:d7:23:0b:3c:66:92:f7:71:a7:1a:
                    e0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:8D:FF:9B:75:65:67:4C:B1:A1:49:B3:58:CC:23:7F:53:82:89:8A
            X509v3 Authority Key Identifier:
                keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:ce:d7:21:7b:63:a3:ec:a5:e4:04:b8:66:4e:99:3e:9d:95:
         7e:1c:92:82:4e:80:f6:bd:d5:a6:cf:18:fb:2d:c9:3e:0e:fd:
         d7:55:aa:e4:df:6f:7d:9f:56:a7:b0:df:0f:33:f7:78:6c:c4:
         5d:24:73:23:3f:3b:9a:5b:25:4a:15:4a:f8:b1:d2:07:50:0b:
         36:c0:55:ac:95:90:1c:a7:6a:8b:87:3a:e3:26:6c:7c:b6:72:
         3d:d0:05:8e:ec:fb:0f:3f:32:24:05:8c:06:ee:51:bb:e4:db:
         18:2e:ae:fc:1d:37:b2:9f:97:4a:30:db:e8:c8:c3:b9:62:bd:
         3e:b9:9a:fb:21:bf:2c:2d:ea:8d:5c:73:61:a8:00:f8:fd:8c:
         a0:45:85:be:ab:3b:2b:9c:42:f4:03:14:d1:72:b9:68:f3:fa:
         58:a3:d6:0f:b0:b1:90:62:12:14:6c:9d:84:9a:54:cd:a4:65:
         31:94:32:3e:f7:82:bd:60:d8:20:34:d9:df:73:7a:dd:48:2b:
         53:e4:43:0e:25:a4:9b:55:65:d2:42:e2:f2:cf:1e:eb:fd:94:
         a2:bd:fe:a4:18:67:5b:f3:04:81:af:af:9e:df:69:6c:cf:57:
         45:38:2e:40:44:da:5e:60:6b:53:16:16:82:e7:8c:70:d3:65:
         e3:24:8d:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:06 2025 by rpki-client