Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
File:                     zYMT5B5kagnNAeLm9HOdO9I2xP8.mft (raw, json)
Hash identifier:          VLMb27roNzZzVDERYJfNqKikzhdDGCu95OvOqh0XG0c=
Subject key identifier:   FC:5E:DB:0D:A8:8B:7E:22:A4:8B:C8:84:94:ED:CE:56:27:8F:9B:E3
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Certificate issuer:       /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial:       0194BD4E432187E8A4A008CD624FF7040B41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
Manifest number:          1437
Signing time:             Fri 31 Jan 2025 17:00:09 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:09 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:09 +0000
Files and hashes:         1: 2PiS2J9-ItXkVvnefA7xUJmmHco.roa (hash: fm4Z7vvzHDMokg8lvCFW4L0Rre6/U9BEbHKtNsNHxxs=)
                          2: 8rqG868bxinU9rR8Rp2pSf_K4ps.roa (hash: V9V+c1j2la9ZnPBL40zfZX+lYwX1zDfrRunx69HIjCE=)
                          3: HkTCrKZqDwa8EUL4YflDFIxvuSo.roa (hash: zO36rkW4iEPf0HW9ThqXz35RBy/UdvCTSm39AhOu1Wg=)
                          4: KcTcayFrsZLodbwf3DiREG7aMgQ.roa (hash: 8/vbDhWMe2EfxMGVicJi+/pUGnJZy6R4MjOjEjkxjUk=)
                          5: LsmwcIccA3zM4d7kxqt3XhLcSa0.roa (hash: 98WTFaz7XPqlrJj7+XyfBTJEw1Sf7UEiPzA9D8zWsIw=)
                          6: PneAThfusF70GWHWywmhFb0vzKg.roa (hash: 0kjnbKbpSjxRU2te032pdWFUGrUsCjxiyKJ48H1DPUU=)
                          7: QPCXSoVGqmo5YTCi73-CSDuyZ-M.roa (hash: BYlFE9CUTQ67gGcO7goW8z5RieIlu+Sp4h/7HCES0Bg=)
                          8: T-x5NWBWP7z0RtMavKGuf9lbyTk.roa (hash: 5meL33wuT4ICoWjsr5JwrdL6iizp93b+W5Vq2RQt4cs=)
                          9: YPhWBSPHGs5SvVUlaCiCKWmqFfE.roa (hash: 5GbYaE22J8Owy6TgFxnM856qPEXWo4AxIXtfMEPnMxs=)
                          10: Yqt3Kg8k1YJOv7s88RcINuiKaCE.roa (hash: nWZ5K8Cmhazakp99a9slUSDcrdtW/sXazmS+lE8qgb8=)
                          11: d-qZVEez3-tqSbLZHyKHdZ5qcJA.roa (hash: +81/qDkled7/tuehBezhqXR9TX8Qi/57Cwe4Hugu7Ps=)
                          12: e3hNMZozjl2a8wTj5jqUKt2netU.roa (hash: z65fVe11ggvNgyomVpHPZ3mT5uEYvV6n9cNO6WIVkOQ=)
                          13: lcN6tqSn03IPMO2AvpfpxpGgDQY.roa (hash: 8fvPqg+8qqIeW9Kd8tRNl8Xlys8MO8b9CTy9FA3u9tA=)
                          14: lzFclAiK-AKgH976Yl_uXg9r5wM.roa (hash: H/cy8Ymyjy+9oeeIlZQHYMPSRfjOx2uqFxTFGhSTiGE=)
                          15: oLt7xT_rHP-Hxh3lUeggtdVEvTs.roa (hash: hblIrYC6F95+wg2sH5P/uCfjsNRvIhmQ2s3oU6U1S/g=)
                          16: p-aeeSEszU3aapQ0yEslN0bhQQ8.roa (hash: Mh/Q23651bJq9potJm5ecJKYPprCxzH57rPx/Ooy5iY=)
                          17: r40XtPdgr8Y3RxrHTUe0xVuomM0.roa (hash: t4ySxCeAxHkHkDK1q9KhuYpYVZshrBVi3KJ4uODs/8Q=)
                          18: rD4_vnlr510eZLzrr2aCnfyAvEE.roa (hash: dL+NP4nhH4zwWo5a+tL5dbCaIelO5RMTVy2uI8g69YI=)
                          19: rdclR5rmMPPiGdub64u9CAD4cr0.roa (hash: wXgXLOiDxEJK62XQ7DLJMuxi7/zXmFbGyGpgUuOv+8k=)
                          20: tNteV-bYipxacIdsneN2kRS27vI.roa (hash: DK40xOAWm2KZPWxZ02RGtb+aUbxm0wIjZBTHx/mZzWs=)
                          21: uzMFOnPKpMqU8CP0ss6Mpv56PiE.roa (hash: F8nsfvroSbli8FdaVZTheRyMCu5cUrtu6qwv9yns62A=)
                          22: zYMT5B5kagnNAeLm9HOdO9I2xP8.crl (hash: /l1Vx6k5ux1dGgL+KNP4jy+Dro3wo+UhWlU+dWqnhAI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:43:21:87:e8:a4:a0:08:cd:62:4f:f7:04:0b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
        Validity
            Not Before: Jan 31 17:00:09 2025 GMT
            Not After : Feb  1 17:00:09 2025 GMT
        Subject: CN=fc5edb0da88b7e22a48bc88494edce56278f9be3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e0:71:33:60:63:c1:2e:42:cb:13:31:64:f4:
                    9b:a9:d2:d6:05:ed:fe:9d:7f:a5:e2:a7:ed:47:7d:
                    0c:1c:ca:65:d3:88:fb:69:92:48:00:b8:5a:47:b2:
                    77:b1:91:37:c4:77:0b:1d:44:bc:7c:dc:05:2d:3e:
                    ab:e9:19:c4:9a:b8:e1:68:98:8f:93:31:da:77:c1:
                    99:d6:e7:4f:51:28:77:84:9d:32:3c:49:f1:f3:ea:
                    50:b9:1d:c7:cc:81:d4:c6:e8:5e:35:5b:72:3f:38:
                    e0:b4:5c:a3:12:4b:f4:a5:5b:67:c6:76:fe:6e:ce:
                    9d:96:57:e5:64:66:9e:ff:45:cd:35:46:e7:8d:6e:
                    e1:41:82:1e:ec:ee:dc:53:f5:8b:d3:c6:6c:f3:93:
                    50:75:b9:37:1f:90:aa:32:2e:b1:33:9b:72:03:8c:
                    81:30:e6:c0:8c:61:00:fc:29:9c:25:cb:d0:1f:d8:
                    e0:c9:b6:5b:a3:43:e2:fc:c6:f9:92:da:4d:7d:d7:
                    66:88:7c:c4:18:7d:52:07:5c:07:db:84:59:ca:ac:
                    04:c6:e5:bf:4d:be:de:53:27:37:fa:a9:a1:f8:91:
                    c5:e7:fb:ad:4f:fa:10:c2:af:e4:dd:6b:9a:99:e0:
                    eb:74:13:1e:bb:28:73:27:ac:dc:8d:72:48:24:3a:
                    fa:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5E:DB:0D:A8:8B:7E:22:A4:8B:C8:84:94:ED:CE:56:27:8F:9B:E3
            X509v3 Authority Key Identifier:
                keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e0:ab:a4:e0:e8:f4:e9:1a:2d:86:de:2c:27:cd:b6:e8:0b:
         72:b9:0b:69:c5:60:ba:b7:1f:4b:5e:df:2f:f8:db:0c:f9:c4:
         44:fb:bc:de:56:cc:6b:f7:e2:46:1c:16:79:aa:cd:ee:2c:e4:
         19:7a:da:72:92:c1:09:68:a9:e2:4e:9a:39:94:3a:b7:9c:b9:
         cf:68:d6:d8:49:5c:6b:d8:a8:e5:85:a2:2b:d4:66:3d:62:f4:
         43:3a:20:f5:8f:e2:b0:bb:0a:a5:59:db:ac:3d:98:91:10:9b:
         d5:9d:8b:a3:f3:20:26:16:e8:d9:2b:6c:79:0f:31:b0:bc:f3:
         10:44:c0:36:32:b1:9c:12:79:70:7a:d3:79:29:5e:1b:bb:a8:
         a2:fc:f8:d6:7d:b9:60:d5:60:af:21:93:ff:ad:ed:85:90:ea:
         98:04:04:36:d5:81:b2:b0:b7:39:21:62:be:bf:bc:3c:32:7c:
         0a:ee:eb:59:3b:77:60:ba:17:d0:f3:9f:8e:bc:e7:80:b5:f7:
         dd:c2:27:2a:6b:9b:12:79:3c:24:34:a8:83:b5:92:dc:6d:d5:
         4a:06:fe:64:e6:a4:9c:16:4c:df:e5:8b:b0:b3:3f:9a:98:ba:
         c2:0d:17:b1:03:9c:2d:c4:27:43:33:e4:be:9f:f9:c5:d9:47:
         84:cc:9c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:10 2025 by rpki-client