Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
File:                     mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json)
Hash identifier:          4QF7jvqAXIjr2h22lKSBqh6BSIySAcSLHPFu6JFIhdw=
Subject key identifier:   E5:E9:7C:8F:55:66:F6:74:20:6A:65:49:05:E5:6A:1A:1A:0C:5D:B7
Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA
Certificate issuer:       /CN=9a1e69368abd34538fe77ddaabcdc835af595eba
Certificate serial:       0194BCA9C6B5AFA78073B1D2B45F94A392AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft
Manifest number:          1456
Signing time:             Fri 31 Jan 2025 14:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:30 +0000
Files and hashes:         1: 0RyrSS5TsuNkSrgX42mZlqnL_6Y.roa (hash: BRzu0fdIaz6Lovt3QNbsRMaTYaq8KePDTC4YuQ5xp+8=)
                          2: 13v_SFUUaJanH2ti7gyyAMAe4E8.roa (hash: 9BOoaT9u38i4PO8whYYhUIN3eU3jwn/DC/9uSOlK5Wc=)
                          3: 1JXcZFx0cVgp_nurSkDz34ejXRw.roa (hash: eT3VUKiYG35yZHjK8chZuS2ARmnYiiATHH1jK3UENw4=)
                          4: 6z4rHWGcADRparknQzyj2yRTc7Q.roa (hash: n4ymMhjOhAWzzuUuICwnt0DuPDacCxWlW+NEkRCL8OQ=)
                          5: 7-CIZj9uif--br5voFAmQlLSW6c.roa (hash: uTSjmKpL+cFNc34iNkcWzIdWbLSiGj8LHYTNjwuj3bY=)
                          6: 8JryklODS-H6RCW3s1L6jAA10aM.roa (hash: N4V6jxdE6ULDTseAhDT5eiy4WHG+mdZx70Ca/CGSOis=)
                          7: A31_B2nuhoGFF02yDR9tIcsA9vo.roa (hash: xg/RP32VB0XjW0/mDPvjyFUORhRt5edu/HqQYElspR4=)
                          8: BAByn752h23LDapbWtvPQCf7FGA.roa (hash: aEzN77kDLNn/k0lFsBHzbqjz++GYSZ5QPiWUhv2jUcs=)
                          9: DgqNbF9iJTN6tJqFHFsmrsPTN-0.roa (hash: LWJhYWGLPkv6XiCgsYq7ikNGs7uAsKZdQqaT/g/DLbI=)
                          10: EA04VGqvrPQszKxiTiYT5otCGRs.roa (hash: jxzccstOx8k+w6FBDeBmh5NVBQOSYOxvaie7YTOrrr0=)
                          11: EHXBWUxeWMDtm-263T3CeCfIQg0.roa (hash: upykUfWusTim+qPavoonZ87RcamCDQGsa5cCnxfzAXA=)
                          12: EJJjIWEkSJVR16lMZ3JAA3Erae4.roa (hash: cEYNtBA9K74UcwqPRIFv+v9Gz/Ga0WnXLgpuQ29y8a4=)
                          13: F8f4kxW24uJzOzniLERBk3yZc8g.roa (hash: Ve8YWI7OVk2wPQ5uGjmWzFVz86n7rtMNCFhPgNLkgZE=)
                          14: Gf5l1q8M-R9ATztiNG1wYa5QWW4.roa (hash: 97mQ1AfgdstY7yHk40JSfso1yc9R8LG4mzhYmCvo4E0=)
                          15: IUoj14L85V7dFoSNxHQERg8IME0.roa (hash: yLZKOBB3BN8zxQwSxMgLL7kO6gXgb1541/UgXA3XP8c=)
                          16: Jf79I31rpbTO5W9IPaX7rIB_nKQ.roa (hash: v37HfVcSPPGTt9P/qQorvZQf7f7Dq5xgbuMnSpO2rw0=)
                          17: LZ4tnH9lGxh0iu-rU3u9Fkm-pFk.roa (hash: +JM6B0zdaawDdz8KRtRSCTdjUiYYSokishxaS8i4x7Y=)
                          18: QO4VVs5SI_NodctTdkKAUO1ebEc.roa (hash: Lg34OgBQ8Ox1b1e+BjsftLuK02aFfjJ/oJTA/t+0XB8=)
                          19: Qgnr5pBRl_rZGcPCmikTzbpdRhA.roa (hash: CsJlJBJH3+6jV3tl9xVBuGfLlTLLS9kglg9jMQQ1KqQ=)
                          20: ZIBj51rvzdxNBOQu45s1TsXZfA4.roa (hash: Mlg1sMaq1AzoqpdQv0YafCX4XwaQte0j2dMM5uFDd64=)
                          21: b_rI4TYzOidB7VM9UUtKiSxW5LU.roa (hash: FSPXI3Dcd4NYJhk5Uaoa5iEsUpA3P4ClToZPryW5vs4=)
                          22: cJspXZBTRkOp7Qt_iJd_u0-CVXM.roa (hash: +Q93BMqAczWnkXHr2ly5zbZ8kF90gI/c8DRSS/XTs0A=)
                          23: eH9NeYZ6476-_LV8hEYeX0fc0QI.roa (hash: qpYMUOd5FFvMlQNvSubLKokumQC5dpDSUWn6yu3Z38Q=)
                          24: fiXZjFVhkN8HnCYHCQ4y4EM5tTw.roa (hash: WGUlo6TBZJCZDArB+udlJuMvOeQwlu964bRVTQeiYz0=)
                          25: hgUVlBMr-3weLeCDxLmYbzcEvDs.roa (hash: uNZAsOSUtlXYpFt0EPAGWC7rkjy2E7P557kov/78pUY=)
                          26: hsXTdDwIDQeR8Y4thDk7zd5XS_E.roa (hash: WxjjzedasgKM79/0bmtsmVyW63ILl73WxBDKWi3e8Sw=)
                          27: iiCSGGgxN2dI_YNYAYnLsWSzIvk.roa (hash: rHuaFNuztgBdjSOmq2nEo94MqWDd+bV87f0qBWPvt94=)
                          28: kjCBwq1j9xX1EaDBTI424dSK14A.roa (hash: y34Z+vhK1gAu2AvvEzAPgCnHcDqbgumJZa/tYihBKvk=)
                          29: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: UMh1cv9HnNrRFm1IYH/zqA7yAvZDe4kXTt91wo2b7DE=)
                          30: npSbX89ppW1EvXT8SquAkvP6voE.roa (hash: MxmtVOWJZ2CbOzuQXF5iaQtC+5JJ6zax1Xsv1/neKxU=)
                          31: olZgy9U7ThNnepinAJEKzkRvZJg.roa (hash: 4b9F9m0pUTdzvwoF0mVT1XODHic5uNOOg/5TKG+EAGE=)
                          32: udpFcarhA2Di-ueqJLzwdxMkwFU.roa (hash: /CtOZMK/oLqOqAo2qZJtD+fd7exGsI2oA16cE8ogLbU=)
                          33: vtUVPmF_sR2bn9GK3_hTbEIy_h0.roa (hash: EgxlYUmqGL8wGtFTWH2dHB4zW0mfcmREpW1FWRXtq8k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:c6:b5:af:a7:80:73:b1:d2:b4:5f:94:a3:92:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba
        Validity
            Not Before: Jan 31 14:00:30 2025 GMT
            Not After : Feb  1 14:00:30 2025 GMT
        Subject: CN=e5e97c8f5566f674206a654905e56a1a1a0c5db7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ca:61:a2:4a:31:a5:6e:4d:53:4a:fd:d3:3c:
                    ef:9c:3c:7b:6a:94:d4:f8:45:85:1f:2c:2b:02:5f:
                    5f:14:e3:e4:3d:92:98:84:d2:b4:ab:71:2d:03:9a:
                    ce:f8:f0:63:f3:ad:9d:3a:a9:0f:92:9f:88:19:73:
                    41:5f:b9:e1:3b:e4:33:5d:46:11:b9:0b:73:0f:94:
                    30:22:1e:cf:af:b1:b4:8e:a1:ac:99:5c:43:5b:d7:
                    cd:35:4b:99:a8:17:c4:9a:cd:45:c2:f9:4c:02:fa:
                    63:31:59:7f:12:f5:fb:e1:2a:cc:56:59:f4:a5:80:
                    61:20:f5:3d:23:d3:27:94:67:dd:b6:8a:92:7c:ae:
                    c8:c6:c4:44:46:46:df:20:71:24:66:03:d6:9c:08:
                    d7:40:a8:19:31:06:79:03:5e:80:58:f0:15:d7:e8:
                    71:74:99:ed:45:70:db:6f:36:6c:1e:60:9e:1f:25:
                    ed:60:cc:f8:09:8f:27:dd:6e:08:be:d4:4e:36:c5:
                    e0:cb:93:b8:4c:a6:c6:8a:ec:8b:cf:e8:27:5f:df:
                    93:11:3a:02:6d:14:a8:df:09:5e:e3:bb:96:ab:b0:
                    9d:fe:5a:d8:99:03:33:e7:59:da:b2:2f:8c:c0:14:
                    a0:ef:cd:0d:17:7f:69:19:6d:b5:a4:f1:96:2e:ad:
                    68:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E9:7C:8F:55:66:F6:74:20:6A:65:49:05:E5:6A:1A:1A:0C:5D:B7
            X509v3 Authority Key Identifier:
                keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:4d:18:79:2d:e5:42:9e:18:a0:9f:7d:db:a0:82:e4:b5:1f:
         31:f9:c3:2c:d7:1d:6d:23:16:ed:ab:a8:af:64:74:f7:af:8d:
         0b:2a:39:8c:c1:76:b2:6d:24:7b:3c:c6:58:81:ba:e9:f4:c4:
         7a:ff:ff:93:bb:df:00:43:ca:78:8c:24:af:cd:43:25:61:48:
         4a:d9:7f:f6:dc:20:e5:47:b7:1e:a0:dd:bf:2f:46:f8:cb:f9:
         d0:9f:de:76:46:40:c7:7e:0e:a4:64:83:65:ee:04:43:6f:f7:
         25:96:a3:dc:16:5f:ee:5e:ad:26:67:92:21:8a:b0:38:8a:07:
         ac:54:5f:92:c9:b4:6d:5d:a7:de:d4:d2:0d:b9:9b:fd:5d:be:
         3e:76:dc:8c:48:bf:5f:be:41:98:3f:38:b1:48:e4:b0:ab:05:
         89:11:fc:81:49:73:c5:b8:aa:fe:6b:d4:86:b2:65:ba:a1:01:
         f6:90:51:63:19:7a:44:2e:e7:b6:c4:71:d9:7d:f7:2b:9a:e8:
         5d:79:a8:1a:99:47:71:ed:e0:af:6f:b4:dd:fb:8a:7d:90:d2:
         63:61:43:3a:d4:f9:bb:10:77:2f:a6:a6:02:90:5c:e4:0d:27:
         e2:3f:4d:7f:c5:95:be:60:82:ed:ae:e1:63:29:c1:b4:48:3e:
         ad:35:75:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:55:52 2025 by rpki-client