Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
File:                     OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json)
Hash identifier:          3DfW69hdLeMweongg4SJH8YxBvuljWZgblPBJFPb3G8=
Subject key identifier:   95:C7:C0:36:1F:2C:28:F9:B6:D2:4A:48:DF:48:C7:F7:5A:16:05:D2
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Certificate issuer:       /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial:       0194BD853FA3C5DBB9F66140632D4B808405
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
Manifest number:          1439
Signing time:             Fri 31 Jan 2025 18:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 18:00:13 +0000
Files and hashes:         1: 0D0scE_NIz1RAO_5cCYzYL7wwV0.roa (hash: hgn/zcBj613tWbLWkc+mdf+gauTh1eXBiQJGE4ew4y0=)
                          2: 3nAxOrqe3oi83iVjt7-kMzJ_imI.roa (hash: 0jNIl4uBhcm5LdIuubw+L/Ha2QMXka6zLLkNeAcF40c=)
                          3: B9dwnbBbiJenj05UDjyUy_TzXDg.roa (hash: s4Wv5YaGEZaX82N6dusRWR3tSJBVmvjmxniLSHfxYAE=)
                          4: E6umy5_OlHHb3NOgNKiaqTj372A.roa (hash: kmYIRPqCRch39x2r6WhmK+8aDVBlwYVLvzQIGAbOPps=)
                          5: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: DtsIQfbLlqO/aGt3guwOyKahnRfHLysZa6Bitmh2wPs=)
                          6: P0hYRZk_epkkwrcDiaxk_ejd9pE.roa (hash: RbP7Hj7hNb6SHmHJtPw1bzOEo2w8Ign3eKIaXKeZWz8=)
                          7: SOBAES4j7h-D6nKfccoc2NpSr8A.roa (hash: vmAKmT6VUkF1cozh164hgKJKVk8BJXYwDbwibYkkVy4=)
                          8: WBa-OMWvS5R9EiWcpIqPa_m7lKo.roa (hash: JhWDx8KAw0uX/VJGQRKzvoZLcAnbsOAM+D0EwwgJJrs=)
                          9: _6ucnx77KQFalvj5yEE2wp5osls.roa (hash: Xw55WCSv/8tmiRj4/KKvZ6v3swmB6TKO4qL1Xw6aI30=)
                          10: hmNo0lfF6aVfLa7MkqmEKjtbdyQ.roa (hash: +xwhsq1RdvJOWfeJtHcoWSMc+U0UkSWEqMUWf9xz80w=)
                          11: jtw47htspCaZBqLn-szAwwLDgRI.roa (hash: 4ge4ZfZPpCPnlsJ6k5nbKp3z9nIWCai+fnrSIWJ/WUA=)
                          12: jzrvK-bgXnpFKZtkluSwDEQbp08.roa (hash: ZM3tthCJVaSjXclzoJDdeWjLh7O5ICpnIBuMTiMEL9g=)
                          13: nDB6bqiXy-rzhdku9Lj005kPHfA.roa (hash: 0AJR+PurXnO7T0pJNk8Tq3MFQx7X/cSxW3eCAXJvtLk=)
                          14: pvCC0r4LUt3fsl1VHVQdfXh8Y18.roa (hash: 7j0tvWV4dVH4uAAkH8k/IyIqfSMk5UZQp8CnBxjMpFY=)
                          15: u50dx3Lab1g7VZDVh4T56LPcn_0.roa (hash: jDquIHZmp2NFyWqEfhpXVj8qaJ2TUhubdI3kfdM2qms=)
                          16: z5q48ktpf1eARPpbmIGK9GsvsrQ.roa (hash: tmWASzkDn54AHUg2VFq+szTIlcEFXE4zmXDoc40cFbw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:85:3f:a3:c5:db:b9:f6:61:40:63:2d:4b:80:84:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
        Validity
            Not Before: Jan 31 18:00:13 2025 GMT
            Not After : Feb  1 18:00:13 2025 GMT
        Subject: CN=95c7c0361f2c28f9b6d24a48df48c7f75a1605d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:25:8f:bd:ae:00:53:05:f7:01:19:55:68:0f:
                    ab:d2:2c:95:79:3e:71:27:21:09:b7:13:9c:fd:68:
                    66:b5:77:6f:3a:65:c8:ba:d3:af:f8:60:6d:06:d3:
                    6c:d2:ff:9d:e1:1f:09:55:77:40:50:e4:83:98:d4:
                    e8:04:63:3d:fc:63:74:87:42:45:e0:6a:fb:7b:b0:
                    63:6f:b0:78:e3:74:02:1e:13:52:5e:ce:f9:d3:38:
                    d2:50:0a:d2:b8:e3:7b:01:65:d6:19:97:94:4e:7d:
                    b9:65:f8:d6:c9:25:ea:b4:b3:ce:30:69:50:98:67:
                    7e:da:1c:d3:b7:53:ae:b2:61:93:b2:61:7a:f0:28:
                    36:e6:b9:53:b8:83:8e:05:59:d9:19:ba:32:d7:5d:
                    58:13:fc:ce:ff:20:9e:e4:9f:dd:07:94:a8:98:84:
                    b7:31:c2:46:82:5b:4d:d9:2d:ac:90:29:fa:69:b1:
                    e5:ea:58:08:c0:32:4b:9f:7e:f4:6e:d6:b1:1a:f5:
                    b1:03:95:3d:79:54:76:db:11:27:19:54:3a:2b:63:
                    41:77:b6:7e:fe:3d:56:27:8a:60:07:08:3a:f9:40:
                    6d:7c:54:d9:80:6b:5d:59:92:88:8a:17:56:a3:df:
                    0b:72:52:5a:8e:32:e3:de:7b:32:9d:7e:6a:e8:8e:
                    90:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C7:C0:36:1F:2C:28:F9:B6:D2:4A:48:DF:48:C7:F7:5A:16:05:D2
            X509v3 Authority Key Identifier:
                keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:07:21:06:b4:d1:b4:df:93:57:5d:a8:ec:3d:26:1a:c4:e3:
         24:be:84:29:d9:ae:6b:b1:67:b1:78:71:76:8d:8b:2f:fe:6d:
         bf:b2:56:05:fd:29:25:17:eb:1a:eb:56:e1:a4:4f:1d:0c:d2:
         73:fe:4a:bd:c6:c8:3a:15:ee:78:f5:15:ab:e5:bb:f2:7e:7c:
         d6:2a:43:dd:82:33:4e:95:61:5d:b0:94:73:e3:15:34:51:d2:
         e8:1a:6e:39:b9:8b:b1:7a:54:d2:d9:9f:32:d8:5a:53:98:f7:
         ee:db:b1:e9:7d:78:ce:6b:3f:c6:55:72:43:8d:e4:84:84:cb:
         9d:45:87:3b:bd:21:f1:91:cb:94:fd:7e:22:8e:c6:b3:f6:06:
         5f:43:a1:21:7e:e2:fd:8b:d1:0b:3f:f8:65:7c:d9:e3:26:ea:
         f6:58:71:85:28:50:25:a2:79:0f:12:5b:52:89:88:e2:2d:af:
         12:0d:ee:88:63:e6:04:41:90:0f:33:91:8a:af:d9:8c:34:12:
         6f:a2:41:ec:a9:f0:38:7e:7a:65:d2:11:f9:b0:4f:e0:64:b3:
         b9:9f:7e:d9:9b:2a:59:d6:8c:86:0e:16:6e:3f:46:f2:f4:4f:
         9d:7e:54:57:7a:34:b1:ba:23:fc:e1:e5:1c:fd:1a:0c:fc:a2:
         40:fc:f1:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9hT+jxdu59mFAYy1LgIQFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM4N2Q2ZGY3ZWI3NTQyZTAzMzNhZWVkZDE0YWRmZjhmNTFm
OGNiZDgwHhcNMjUwMTMxMTgwMDEzWhcNMjUwMjAxMTgwMDEzWjAzMTEwLwYDVQQD
Eyg5NWM3YzAzNjFmMmMyOGY5YjZkMjRhNDhkZjQ4YzdmNzVhMTYwNWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyWPva4AUwX3ARlVaA+r0iyVeT5x
JyEJtxOc/WhmtXdvOmXIutOv+GBtBtNs0v+d4R8JVXdAUOSDmNToBGM9/GN0h0JF
4Gr7e7Bjb7B443QCHhNSXs750zjSUArSuON7AWXWGZeUTn25ZfjWySXqtLPOMGlQ
mGd+2hzTt1OusmGTsmF68Cg25rlTuIOOBVnZGboy111YE/zO/yCe5J/dB5SomIS3
McJGgltN2S2skCn6abHl6lgIwDJLn370btaxGvWxA5U9eVR22xEnGVQ6K2NBd7Z+
/j1WJ4pgBwg6+UBtfFTZgGtdWZKIihdWo98LclJajjLj3nsynX5q6I6QHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXHwDYfLCj5ttJKSN9Ix/daFgXSMB8GA1UdIwQY
MBaAFDh9bffrdULgMzru3RSt/49R+MvYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2Mt
NjA5YTQ4YjJiMTRkLzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9kNGE4OWMtNTRiMi00NDViLWJiN2MtNjA5YTQ4YjJiMTRk
LzEvT0gxdDktdDFRdUF6T3U3ZEZLM19qMUg0eTlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKQchBrTR
tN+TV12o7D0mGsTjJL6EKdmua7FnsXhxdo2LL/5tv7JWBf0pJRfrGutW4aRPHQzS
c/5KvcbIOhXuePUVq+W78n581ipD3YIzTpVhXbCUc+MVNFHS6BpuObmLsXpU0tmf
MthaU5j37tux6X14zms/xlVyQ43khITLnUWHO70h8ZHLlP1+Io7Gs/YGX0OhIX7i
/YvRCz/4ZXzZ4ybq9lhxhShQJaJ5DxJbUomI4i2vEg3uiGPmBEGQDzORiq/ZjDQS
b6JB7KnwOH56ZdIR+bBP4GSzuZ9+2ZsqWdaMhg4Wbj9G8vRPnX5UV3o0sboj/OHl
HP0aDPyiQPzxdg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:43 2025 by rpki-client