Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
File:                     xhlTwImArclPL6OjwbqVxA0h59M.mft (raw, json)
Hash identifier:          B6YtyVg4c888sDRsfDHsecQstMYmFgNJH1asmkZmlM0=
Subject key identifier:   33:47:ED:9C:EE:D1:6F:07:42:03:F1:16:53:00:88:EF:DA:F7:53:47
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Certificate issuer:       /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial:       0194BD17BA9EC7AAC9610425207DBF24342C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
Manifest number:          0AB9
Signing time:             Fri 31 Jan 2025 16:00:36 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:36 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:36 +0000
Files and hashes:         1: 7uN2APKNMZUlxFAFIqYBRSCqDys.roa (hash: QOcGptnbwVOmKz9OIjxqVqiamHhCIYE4sShS5ZJ4aTM=)
                          2: IczkJXhr43WZT8v3yUWzEcJkBw0.roa (hash: LTXwRLr/WDRhlKr3y2cS8nQZO+NDEwmFh5j+X2jc1m0=)
                          3: LBUZqsrF0Xi_tysp5fgmsqKHu6U.roa (hash: bW1H7SUVyNKU/d0SmTWJeMi8GRblO5Rw7PlbZQty7ek=)
                          4: NTeC-NbINKuWXIN2JRj2jE73cMQ.roa (hash: usN4QfuBj821Bx/aBMyN171iAsEpZjNXNiVf16Jr2OA=)
                          5: NulfbGD931XSEsWr8c6jWUL0R7Q.roa (hash: D+CXPQA8XOJm5kR7y6lx84ZALTBUpzFwD/yKT0THj0Y=)
                          6: Pn1Np93Fy5qllPMGwWd35SbCmNc.roa (hash: cJbqPsoGlyN2ttzOkuToXlqtqEo9ySrbCbr6liDOEGE=)
                          7: UTfZZSLqjbV1b8j5TUYR5Vzy_C4.roa (hash: afv6e1K0oUB1wMQJgOwOvShcyd+lLD2cZw6tI0PhiEQ=)
                          8: UsNIdz_x5mIF5xcKEVGVl_xXGJ4.roa (hash: DsadB7AkI1D6cE6zFHkD7luRohhY7h45wj6tqzPB3BY=)
                          9: VDkpUnsSEJjoQKN_SH5M51QJ0lQ.roa (hash: QbW1pR7wXkDRNg+GzvouMFRHYHZ7/eJ/CEgLt387C28=)
                          10: ZWxFi9Fv9GS72fJajNeTg4BwdjU.roa (hash: nmTx2tJXn3h43rUjd3DekYfRTcjzFWvgC6QNfBdlrm8=)
                          11: i7rWRuwzlkV8xCOhfpRpRle8KzA.roa (hash: At8E6e7EApB6fVuxCLUU7eIRYkhnemVz7pgrhH1erSM=)
                          12: mblfFy3mNdc1SwdAwOx5WQVE19A.roa (hash: C/C7a/Hgr0VETCqfGTruKe1/3x5QgzdC+FE6I3TYrWQ=)
                          13: o-58M0Oov2ZZz-Rl1Tywa9Uvd40.roa (hash: 0gFyw1TvnqI82S5Ak8R3q+0sFKi4FqNHCfwpsRB+ZM0=)
                          14: rQUffzmZx3UaMv2Z1sJaJ9Cotdw.roa (hash: 6IztPYrajYy5c8tTQhRlMBRKi0qqEFrjSmseUv+lHCw=)
                          15: xhlTwImArclPL6OjwbqVxA0h59M.crl (hash: HbVtQPkKa/TAnO9xePBfhbE4P9aKYjatxD57YyQIp8s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:ba:9e:c7:aa:c9:61:04:25:20:7d:bf:24:34:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
        Validity
            Not Before: Jan 31 16:00:36 2025 GMT
            Not After : Feb  1 16:00:36 2025 GMT
        Subject: CN=3347ed9ceed16f074203f116530088efdaf75347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:08:e0:21:c2:88:ac:c3:6b:b2:f6:9f:f7:c5:
                    59:9a:15:31:cb:a2:52:38:72:6e:a0:00:d8:14:71:
                    e9:b4:fc:aa:bf:fb:2a:eb:4a:20:03:91:8a:93:73:
                    f0:e6:93:b3:00:15:9f:a3:65:65:3a:c0:fc:a9:86:
                    a3:0f:74:ae:60:e3:5b:09:83:01:a5:5d:4c:41:0d:
                    4c:11:3e:80:dc:f0:ff:06:bd:2e:3b:93:72:b2:49:
                    55:11:3f:0c:82:ea:4f:1c:d4:9d:7a:a7:6c:02:43:
                    7e:24:fb:80:0f:c5:ed:11:2d:1b:79:87:44:cf:2f:
                    9d:23:85:a8:c9:0f:a5:6a:df:e9:dd:4a:24:27:a0:
                    37:fa:ce:c5:76:75:32:83:c2:45:f3:35:4f:69:8c:
                    af:c2:c7:95:6b:79:a8:27:d7:c1:1d:d1:4e:0a:44:
                    14:d9:1c:a1:68:5f:62:bf:97:27:81:b9:9e:b7:0c:
                    96:ab:c5:d3:10:9e:9e:ea:48:43:ba:26:3b:0b:5a:
                    1f:48:e8:fd:17:3e:8d:b4:54:f4:51:8a:e2:06:3c:
                    be:df:21:2e:b6:3c:92:43:db:bd:b3:1b:7c:4f:39:
                    f2:ce:70:45:25:26:ad:13:53:f4:be:3e:8d:f7:0d:
                    46:a9:66:24:80:2f:4a:d9:85:da:a2:6c:96:1d:6a:
                    1f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:47:ED:9C:EE:D1:6F:07:42:03:F1:16:53:00:88:EF:DA:F7:53:47
            X509v3 Authority Key Identifier:
                keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:ad:18:00:c3:46:1e:75:e2:47:0a:cc:ae:be:cb:52:3a:20:
         39:06:75:18:4b:27:e8:8d:c8:93:41:ac:f0:06:70:9b:9b:29:
         2b:f3:2e:60:7b:f3:90:2a:a2:b9:ec:35:ad:7a:4d:26:34:11:
         38:5e:29:e8:2c:97:7a:4f:2c:9c:bb:da:e2:a7:3f:8b:90:cf:
         27:b2:7e:31:5a:21:3a:94:d2:63:fc:af:2a:bc:d3:73:e4:1c:
         2e:8e:a9:74:55:77:e2:dc:0f:4a:2b:35:1b:50:27:3f:55:4d:
         c6:93:7e:19:21:51:7b:03:a2:38:7c:ae:5f:3b:f3:91:fb:bc:
         03:ff:ce:3f:7f:59:1c:7c:dd:2b:b7:d3:61:f7:bf:34:77:37:
         f4:71:7d:35:62:6f:d9:57:1a:f3:16:c7:b5:02:cc:af:c6:d2:
         dd:e0:fd:08:59:4b:bb:89:76:e5:70:95:0e:dd:ae:7b:63:29:
         1d:ac:00:cc:65:ca:25:ee:0f:32:d6:29:07:ad:27:80:98:19:
         eb:6a:21:29:85:7c:51:8f:2e:a3:bd:4a:2a:70:43:b7:14:84:
         91:20:0a:66:34:b9:7d:f3:9d:75:0c:f6:84:93:8f:87:aa:b0:
         b9:95:44:23:4e:8b:5e:05:79:8f:4f:3c:e7:17:56:2e:8d:22:
         1f:c4:f5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:44 2025 by rpki-client