Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
File:                     mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft (raw, json)
Hash identifier:          usZUtnBAM7ceLmMBReIzIwK8vvaRTt/YPl4kzqMOl7I=
Subject key identifier:   42:3D:F6:29:35:8E:3D:78:CB:4A:F7:46:3E:9E:4B:9A:EA:A0:49:65
Authority key identifier: 98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE
Certificate issuer:       /CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
Certificate serial:       0194BD4EBC68A0D961EC8E261E77261EB150
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft
Manifest number:          14F3
Signing time:             Fri 31 Jan 2025 17:00:41 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:41 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:41 +0000
Files and hashes:         1: 1UWB6DiO5XdV3re-o8rnuoqA6Ms.roa (hash: acQwekWVQZ/8nvJFITjzBnRus/D8fEtyc11Q6KELe7w=)
                          2: 21_l98tMuuHtah8-s1GQ4s9w80o.roa (hash: kBh4jdwY3MGZ4Pq8reV1XfNIfs+7zVu2WLUGJ+5lgvc=)
                          3: 4w30D5KawwaEKeLXCLppZs-985Y.roa (hash: D2Lwmoer5qGID/4i5fsaA6M5CcgJmrhikqoV9diBlTk=)
                          4: Brhkd2-auvvZmCyvxy5ORhHeQ6E.roa (hash: g8WF2m4nW9TPwqD2pE0ddCjVXs1fr0m/MHPrZ/Qj2HI=)
                          5: GvKIQgl1iO-dugbsKuhw7FNxuHs.roa (hash: TqaFs/yLAnRS9/gxois1dNbWL2jGhaiFgXhDothuXww=)
                          6: IrnlAQa6M1A96HHiDasRUfVGqbQ.roa (hash: xgq5FcKSqvltS9tf8414o9TbLoeW+VIxwonV5uaPruw=)
                          7: LOKrZEDDVhVnSlJWlOLgQ5nPcM0.roa (hash: 2CeUB6HU9O6IboYshEwLG/p+jYhiKQ64ZtA5Y3idzrs=)
                          8: LbbsmkI3GqawDuN3XH6acheMxPw.roa (hash: BqWA3SYDAKLfoYVuIlyCld31iNDXkXCl/KtIv69jNUw=)
                          9: OOYkNDqqDn1Unj3M-yrjf_S9VlU.roa (hash: oCGvjVeC4FC9ueufaA6bhsrNhxHd2pd306IA0XGXLfs=)
                          10: SWbtiDhJekAGKrMxaIr0DPXQOzg.roa (hash: xUg9JN0E8iV/LnVbnu54/5qiJiwqupilOIRHtpvUcCQ=)
                          11: UlqMdzKNjKKz7GVAWhNQ0GeC6iE.roa (hash: vyjrNuYYOAehZPhyITO+Q5uPp2e1fJC2nVGYypgHEhg=)
                          12: bq4QrMng5D-R6b_wpUMxfHQJSpc.roa (hash: misJApzr/+miUSLldUfVkJa7dLjRsQ1KaqB75GDsmmE=)
                          13: eChAGDbdQGMbx-CgEa8ktTddF6A.roa (hash: WaY78nyI3A8kBY4pFd0TG8ZJI0s+NCkhF+OV6SV5Crw=)
                          14: g-kEdXPQbrbF1SYHSzWVJZWyNiA.roa (hash: xCfDgxXi6GOKp/4YHK5qs4mNBYx2q/RvxsJq7l2zrIQ=)
                          15: gN00iWVZ4X9ImdixtPXeB88eR_k.roa (hash: DPVgneYPbYS00UaxJyd5C7zkqYJRRcPWgn4xBTn6bHk=)
                          16: gnHztlWIUEkbfP_VpJDgy1aZ-q8.roa (hash: 8IEq5Il4ymKT0XR1RNf3aEeBm7YPqbccSq4VWhr/cXU=)
                          17: hAUEVxf5JXCjD8zlcYTk-dUlBS0.roa (hash: 3KyG4mTOUOEN1syMVJWS+WFJpsLs7yfEfhM8XQ1aWMw=)
                          18: mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl (hash: OadBYgwHQjJwI0cgy1NikJK5J+goAZrZFr+yM8s14v0=)
                          19: owD2F5PTIfIuOH1ResHlD6bHqfw.roa (hash: FwwD5nwDxuakINFZYh01TzvwO9abW6HL7q42RgazHtQ=)
                          20: pw9MMHu4I_q20ErkI6FpxJnYad8.roa (hash: gcYhl/VRF/ZVc9aRAoUmbSNZlprjgXafqdNbEJQUSG8=)
                          21: s5Ai9g5eYYL8Bgx7ZWiTovq-xxE.roa (hash: BtApyhPvW43mqLBFeRPcKdPRw6DTk5KYzme6TZtVXns=)
                          22: sW7iMiWbwjQZ4JTr9eqMstrH0fY.roa (hash: fl3fF4gUVsev8QdVZnLOIu5u/5rzRWGxzrZRrAPXabs=)
                          23: tdG4gwbiCDTl2DZU4EFrqi-57Fc.roa (hash: HXWAwqtUcnHFWl+ei5dmWCUQV5Bz5IiYmO9iAB6ydxI=)
                          24: tknXucZVczrziUt3TxZyyd4zoHE.roa (hash: fZyhy1ZEHV3i0UcIge+cXPVVDI4sNT1gqHZeXRDeWAc=)
                          25: w23_TR4dcsNa31LTX8HVMLWRN_w.roa (hash: rfdkH9NAgBWGbrUS8/d8Rmrz5XY4u8KepKOXwjiNknw=)
                          26: wC6DsFwXeb5eGnIgBiuuCnh9et4.roa (hash: sGsXZWDl7SypOrlv+5/efuocDxm8kzfpm5Fu/6yQLrA=)
                          27: wWRDfWHup1u0k3UjICPfUYIPuSY.roa (hash: yzH1M2v1GGWQRBkb4bWaRfefbh3n4eH1xoy+GhWge5A=)
                          28: wYxMdXSUEDjU1Cv3_j8xQDvi1yg.roa (hash: WyaQu0KrdFh/xZS6g5xHvbw77OL9Wai9qSXwo4Oty1g=)
                          29: xeXsIqRyNQ8tCJjLiS_SWkibat0.roa (hash: JByqNQHgtIum6mQVh/2h0Z7sUMkRsbp23RZvkf78Q8U=)
                          30: zA8L3Jvv9SEACC4CD6D8SPMP2Sk.roa (hash: Tngvw9PMaTEzEGc2VaqgRFM8azKZIG82ga5hio7GHN8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:bc:68:a0:d9:61:ec:8e:26:1e:77:26:1e:b1:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=982cf809c0e3e8e5552f9d0dd2e27e0dd2d8dabe
        Validity
            Not Before: Jan 31 17:00:41 2025 GMT
            Not After : Feb  1 17:00:41 2025 GMT
        Subject: CN=423df629358e3d78cb4af7463e9e4b9aeaa04965
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:43:7f:70:2d:55:a4:2f:60:5c:a0:6f:d2:12:
                    be:ca:81:19:64:12:be:7b:73:69:18:6d:48:b4:cd:
                    b1:85:82:02:4c:19:d6:05:6a:5a:66:df:f5:bc:09:
                    bf:23:91:82:6c:37:16:fb:91:42:2f:a2:d8:8b:64:
                    6c:4d:f2:f4:57:40:c8:21:64:8e:a9:5b:4a:a0:ae:
                    06:e6:54:27:c1:7c:85:20:43:6b:6d:ed:a5:82:31:
                    6a:87:2b:10:6e:64:1f:58:ca:a8:87:7a:b9:7a:94:
                    c9:d0:ad:a6:24:15:8e:de:87:74:8d:b1:1d:9f:28:
                    79:96:c2:e3:a5:02:fb:3f:62:01:f4:1d:08:cc:9b:
                    fe:60:81:3a:27:64:a7:f7:96:a7:29:91:ed:9b:a4:
                    6d:23:52:b6:72:f0:c0:a3:96:44:1b:89:8f:a3:48:
                    82:cf:f1:26:23:f7:38:1e:e9:66:29:0f:6e:a6:ce:
                    00:90:85:d4:29:ce:ac:29:90:1c:5f:49:3c:d7:b9:
                    45:32:d3:47:ef:1e:18:8b:31:f6:28:0d:1a:dd:7e:
                    b6:47:77:26:39:59:45:d8:4d:21:40:5d:a3:ba:4b:
                    76:78:cd:d2:ca:97:d9:f6:d5:88:ac:80:f1:aa:d4:
                    6d:43:4c:b4:00:6b:8d:23:18:1d:42:21:58:4c:f3:
                    13:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:3D:F6:29:35:8E:3D:78:CB:4A:F7:46:3E:9E:4B:9A:EA:A0:49:65
            X509v3 Authority Key Identifier:
                keyid:98:2C:F8:09:C0:E3:E8:E5:55:2F:9D:0D:D2:E2:7E:0D:D2:D8:DA:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mCz4CcDj6OVVL50N0uJ-DdLY2r4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6168d7-946c-4574-91ea-82ad14555eaa/1/mCz4CcDj6OVVL50N0uJ-DdLY2r4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:77:c0:52:3c:15:d6:c3:35:77:1e:18:7b:bb:33:4e:c8:39:
         61:8d:94:e6:37:b9:8f:76:05:4e:f3:35:4a:55:96:61:64:a4:
         2d:bb:5b:3a:33:89:a6:1c:dd:1f:39:cc:5f:fa:bd:64:ee:7f:
         f0:a2:90:2a:6a:9c:ae:1a:4a:95:07:bb:37:f0:b3:e0:43:47:
         b4:61:b1:2b:e9:da:a4:11:db:c6:ab:7c:ae:8a:73:7a:f6:86:
         83:55:2d:56:c9:ed:a1:5d:af:16:75:bf:fa:99:33:51:f9:e3:
         ff:d1:61:e9:3d:6a:e7:b9:eb:b3:8c:e7:97:d4:27:2a:5b:a8:
         80:4b:63:b7:bd:5c:26:d5:29:c3:6c:fd:bf:6e:1e:7d:68:9c:
         bb:f9:b3:98:69:0f:26:0f:66:78:17:0f:c3:a2:70:d2:13:ac:
         12:2d:48:12:40:ff:31:4b:db:19:ef:1e:ad:81:9e:c8:70:24:
         b0:2f:c3:6e:7d:f4:9c:9a:14:c0:d0:39:b2:32:1d:f5:0f:b6:
         ce:e5:35:e2:b2:0e:df:24:3c:87:99:e1:81:07:9e:dc:92:87:
         1d:c6:ce:00:3b:ce:f0:1d:e5:21:39:9b:51:b8:50:53:03:ce:
         34:8d:f1:22:cc:af:e5:36:66:4d:13:4f:10:25:56:ef:1e:34:
         a8:3d:ea:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:32 2025 by rpki-client