Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
File:                     SAXxfC1xM9La06jffjUxXjfvXa8.mft (raw, json)
Hash identifier:          iRCmmaAzfLirlTzioaf4uWV42YIDR0OXzLfS15g/qZs=
Subject key identifier:   37:F4:54:C4:B6:F3:40:F6:04:9B:7D:F7:03:03:B5:6B:63:7D:9D:4E
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Certificate issuer:       /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial:       0194BD17493AFBBE2D636FD5804162041E4D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
Manifest number:          14C2
Signing time:             Fri 31 Jan 2025 16:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:07 +0000
Files and hashes:         1: PLHlOEI8OTEsrWEb9gcEoJkppTI.roa (hash: HqryYXEFzx4Aim3Zpzxpc+c6ErO0nPq1Js+lyJLuXYs=)
                          2: PX7jnfJ-GQ63ZXhESKa-7dyj3as.roa (hash: SI+xYnjW5Yzfv/cd1FMz5qgFJlZ0Gx5/fh7uQLlxGZc=)
                          3: Qad6wIJmZ83SE5oKYn8XahTuMr0.roa (hash: uNVW4IYWebgKkbmSwS8alvx5J1KlQVfuMzp1TT4hHoU=)
                          4: R3xayF97XK3f6WN53ZX5sxR54jo.roa (hash: 3PZ+HViUokDQMZxJmaE1uzBy+pQRq/4nLFWrCe3sMjU=)
                          5: RGb2A8Ia9BqT4R1Ew8eMdnr5de0.roa (hash: in778D45ovt2nfj/TtYw3pqSW1oopZW5L8V2RgV3wRs=)
                          6: SAXxfC1xM9La06jffjUxXjfvXa8.crl (hash: pcVIwMG1nFi6f2o0+WfYLpF5bwdMHrvqGl4nLUO5CbE=)
                          7: U9JKjRKHCxdIsPDNQPOR88OqmCg.roa (hash: lajLKbejzI40eVa7BHAS4fdbPpPskr27n+GpeXAUSBk=)
                          8: V5zbutGfbh5lgD5tOB55BSZL6mM.roa (hash: 8dfbuUOKEzC/ptg0//A1zNKfTmzKWKS3nTLCemG3GRo=)
                          9: VgwcNuoBbQF8vGnu87-98unWzYI.roa (hash: xzpL3I9r8p4R1FCkPrlQ5XYcS0wswEmNqu/eM1IOMwU=)
                          10: WP02YgRSYpHODBkoxQfpjXzD_DQ.roa (hash: KcxyA0WEgg5frvF8DNiL8pSYUPuuv7jO36XG5grRQbA=)
                          11: WclbZXzoRolOPnP1txTGa2N2wfw.roa (hash: bkUop8nfZL+I8FoNjqYPn2viT45YyNvKLtfeDigIXyI=)
                          12: b3_n-UrtNamrXIeSfErtAw0UQnk.roa (hash: UQXo8xiVmkRF14THP4jQqdto8hCAOHQuMNOfeStFa50=)
                          13: b81Y2U7ou3gE7qnhOIrH6wzIwHE.roa (hash: evIbesfBnQDx6fK9X24u14Wb1m4RUjoEvZ0+mfP0N8E=)
                          14: bZniM2QlgkpTXR-OwANLXtwZtPE.roa (hash: 1uGphNb2cimTL54FLmsjWSi2OJxcMRM81uY8UPnrcpo=)
                          15: c2WtzyhUfMkOGeOzdwQ4aAJh8HI.roa (hash: IBQc5DSsXoXGwdNqC6nTgm0duz6K2dumf2SofrBrlpQ=)
                          16: eu2n2knAmnjo9acVSEpPw1sYCEU.roa (hash: Uh/jLDF9qunyJDNaR1QtZTY7VSEjFi//8f8iTFuCC9k=)
                          17: pzkAj4_zAVXkRe0C_QHjEgzBj0Y.roa (hash: 3G1cxIfKvcRktJjL1ylmN8MQ4xGHLKTVnlOoY7cNz5o=)
                          18: uE7Yr0mrdBcUX1IW6FuzHWklFWE.roa (hash: Txuv8knFAVKbDTm6XQpLWHHm/zIqEkh3sPLdu38MgYQ=)
                          19: ulYg4AG1ul90cUDOSHCVqM9kgX0.roa (hash: YyEEkcY+cM/W31h/eE29O/fYkGie+5JT9vHD80X8ftc=)
                          20: yAovCx547nNNqT1C-VxfyyBSh-w.roa (hash: Ez+LaUznI1kOaOhKM6LzqMC4HGfJv/JhmnV6XyVdwx8=)
                          21: yF60MXomOPXicQ4dVy_gu3Jce0c.roa (hash: 5FKE6qFccFKdKUpBcGBwVGHo07CqDvWyXp8ktMwwG+M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:49:3a:fb:be:2d:63:6f:d5:80:41:62:04:1e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
        Validity
            Not Before: Jan 31 16:00:07 2025 GMT
            Not After : Feb  1 16:00:07 2025 GMT
        Subject: CN=37f454c4b6f340f6049b7df70303b56b637d9d4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ae:c4:90:4e:3c:e5:60:f4:5f:31:10:2f:62:
                    71:39:44:a0:51:7c:3b:4a:6c:3c:af:0e:28:ed:92:
                    e9:5e:96:d0:6e:b6:5b:ad:29:a5:6d:13:59:76:38:
                    52:b5:88:78:43:51:8a:7c:82:a5:09:c6:18:fa:c3:
                    96:4d:0d:cd:15:10:1b:ec:ae:ff:25:fc:e2:5e:4b:
                    38:b2:c1:35:0f:41:ad:6c:94:2d:b3:32:59:82:f4:
                    aa:f2:46:7d:b0:5f:50:42:c6:1d:4e:8d:36:e6:75:
                    2c:01:d5:a5:61:7f:31:8a:e1:eb:e7:e7:2e:be:a7:
                    0c:6b:16:b2:fd:d3:96:b4:4a:ca:8c:a3:d6:b7:d6:
                    5a:33:00:c0:99:bd:87:fb:d3:39:82:a2:c9:f0:b8:
                    8c:df:e8:02:f9:23:ed:96:82:d6:6f:f5:d5:64:9e:
                    ac:d3:f4:23:64:be:eb:d5:2b:c7:c5:45:a8:50:a3:
                    4e:51:4d:83:88:18:55:5a:87:07:6a:43:7b:77:27:
                    ad:a5:68:1b:6d:29:67:45:47:65:bc:68:7d:53:e8:
                    e4:44:e5:04:91:6f:99:50:b8:e8:f3:34:06:a4:8c:
                    33:d7:df:67:64:c9:59:4c:3b:90:74:49:6e:0a:5c:
                    3b:5c:4c:93:28:b8:da:0b:8a:2d:4a:5e:59:60:e4:
                    8c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F4:54:C4:B6:F3:40:F6:04:9B:7D:F7:03:03:B5:6B:63:7D:9D:4E
            X509v3 Authority Key Identifier:
                keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:20:26:6f:5c:3d:07:1d:86:62:7a:0b:61:03:6d:61:49:24:
         c3:44:9c:c8:be:97:01:a7:46:68:74:2c:8b:6f:2b:8b:5d:39:
         f2:cf:ca:86:9a:d6:5a:b1:5a:a8:97:f2:d4:d9:fb:22:52:3b:
         46:31:97:6a:36:99:9c:71:f7:5f:c7:b9:cd:9a:e1:56:cc:9d:
         c2:05:b8:cf:39:44:fd:74:ff:ab:3f:0e:ff:00:66:16:32:37:
         bf:77:69:54:8f:f3:b7:a2:60:ae:7b:a6:d5:a9:b6:4c:f9:db:
         93:9a:cd:f6:a7:59:08:52:db:9a:ae:c5:43:da:3e:36:9d:63:
         7f:dd:4c:ff:78:6d:85:e0:a6:ee:89:e6:15:71:18:d0:ff:6d:
         ae:b1:fa:51:53:cb:ae:61:ad:58:37:0a:e0:f7:29:80:f2:29:
         9c:ea:d1:b1:d9:cd:b9:34:71:b8:9a:1f:a9:41:84:ee:93:15:
         02:70:ef:0c:8e:c6:f2:c3:c1:2a:91:e6:6e:a7:57:0b:12:40:
         a9:dc:e2:d2:81:5a:d5:90:3d:e8:43:14:a5:96:11:87:c9:9a:
         58:ff:30:a7:c8:8b:7d:96:74:c4:f7:f5:14:d3:f3:c3:16:4e:
         5f:b3:df:66:6d:35:1c:e7:5c:5b:61:18:2b:b5:d1:ea:b9:36:
         cd:f1:5a:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F0k6+74tY2/VgEFiBB5NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ4MDVmMTdjMmQ3MTMzZDJkYWQzYThkZjdlMzUzMTVlMzdl
ZjVkYWYwHhcNMjUwMTMxMTYwMDA3WhcNMjUwMjAxMTYwMDA3WjAzMTEwLwYDVQQD
EygzN2Y0NTRjNGI2ZjM0MGY2MDQ5YjdkZjcwMzAzYjU2YjYzN2Q5ZDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K7EkE485WD0XzEQL2JxOUSgUXw7
Smw8rw4o7ZLpXpbQbrZbrSmlbRNZdjhStYh4Q1GKfIKlCcYY+sOWTQ3NFRAb7K7/
JfziXks4ssE1D0GtbJQtszJZgvSq8kZ9sF9QQsYdTo025nUsAdWlYX8xiuHr5+cu
vqcMaxay/dOWtErKjKPWt9ZaMwDAmb2H+9M5gqLJ8LiM3+gC+SPtloLWb/XVZJ6s
0/QjZL7r1SvHxUWoUKNOUU2DiBhVWocHakN7dyetpWgbbSlnRUdlvGh9U+jkROUE
kW+ZULjo8zQGpIwz199nZMlZTDuQdEluClw7XEyTKLjaC4otSl5ZYOSMhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDf0VMS280D2BJt99wMDtWtjfZ1OMB8GA1UdIwQY
MBaAFEgF8XwtcTPS2tOo3341MV43712vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUt
NWRkNmUyMmViYWIwLzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi84ZTA3ZGQtNGZlNS00ODIwLWJjYmUtNWRkNmUyMmViYWIw
LzEvU0FYeGZDMXhNOUxhMDZqZmZqVXhYamZ2WGE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVCAmb1w9
Bx2GYnoLYQNtYUkkw0ScyL6XAadGaHQsi28ri1058s/KhprWWrFaqJfy1Nn7IlI7
RjGXajaZnHH3X8e5zZrhVsydwgW4zzlE/XT/qz8O/wBmFjI3v3dpVI/zt6Jgrnum
1am2TPnbk5rN9qdZCFLbmq7FQ9o+Np1jf91M/3htheCm7onmFXEY0P9trrH6UVPL
rmGtWDcK4PcpgPIpnOrRsdnNuTRxuJofqUGE7pMVAnDvDI7G8sPBKpHmbqdXCxJA
qdzi0oFa1ZA96EMUpZYRh8maWP8wp8iLfZZ0xPf1FNPzwxZOX7PfZm01HOdcW2EY
K7XR6rk2zfFayw==
-----END CERTIFICATE-----
Generated at Thu May 1 11:24:34 2025 by rpki-client