Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
File:                     ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json)
Hash identifier:          i6TJcvbyKiiY4TLRwqV6TYPT3gcYrcXjQeRUcxNDTVw=
Subject key identifier:   A2:F9:48:B2:95:1B:C4:01:96:98:3E:FD:23:9C:2E:30:E6:16:46:51
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Certificate issuer:       /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial:       0194BCE08678BC08F15EB5B327403A8FB320
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
Manifest number:          1482
Signing time:             Fri 31 Jan 2025 15:00:18 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:18 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:18 +0000
Files and hashes:         1: 2_z48hJvW9cSrimqDQBgMrVpEQs.roa (hash: oE4HqjwZlQTv4ObB0KpkYDlK+xOPSCz/U5+L5QyTFnI=)
                          2: 4e5pIyH-5Elgfcqbgv__FOG63l8.roa (hash: 16h88AqJ7GzCv5plzgfUDX/bZIVuf4Ci8HhgyLVJXV4=)
                          3: 5cpMF4gywWh4TSF3WyLtzpEIguk.roa (hash: OtbGKrZ7YrSxXH5K8jC9MppIQd02GNRo1inboNoBRxM=)
                          4: 61tSV3QXLbjs_o_29J3y2Sz7rgQ.roa (hash: 6WGDu/T4fPA2CuqPdnDUedMj+jXcp4NfWsWrHmBy+tw=)
                          5: 8BSNOYyVDFZxdK6Tcxvw22iK4m8.roa (hash: +qLExyvNPSTVOOA92aPeXt0S4hRJ4I0dXrN9T8T2uoU=)
                          6: DVsFv0t_ecOVNHO3HwANDhXlask.roa (hash: Lwozg5a0CSQqgCd1wpNSUT8JWSsH0h6hmDldcmW800Q=)
                          7: E0jD3zaQKNcY4OwTowy1qkc7UII.roa (hash: LFEZv2sUyTiQuviAPaH5GVDhB6qp78p/+LRpCeIzCx8=)
                          8: ESVrWrjx7uQrIu0OVLySmaVBfAA.roa (hash: 3It2cHEioDdRd+vQFpeUNpMQgEGw5qFoe8Q/XwN8mJY=)
                          9: GUW7yMHSxMWKPOxBZPmYfJyT23c.roa (hash: ja5FNbrm3KfTJUYoB/uc275n0oYgzZBEDq6fXdub3G4=)
                          10: ILWOt7E0VcSN53t_NxyVxlZk5U8.roa (hash: fDXYQZD5ADS6uBj8cli9WDuucKNjqNS/JRawIUfAzxE=)
                          11: M0j7_1LaERciPULQ9bHyFVdlekg.roa (hash: st0UHombc6Z8INz/2/VOrk1dCPrSkjpUcNTVU3Gvg+Y=)
                          12: WXqpX2cUzR8srh7EQXKS6ZsVr1k.roa (hash: iKPqe2rKMp5bbd7ax1HJv4fDxF+WBcNpcpJkO6bLbGs=)
                          13: WdrZxhy3fLo5c5Ai6MRdTyqQ468.roa (hash: IrU3x8n31DYJH+OdZCgSZpf1IPCjbwcXSyqOIAQwYlI=)
                          14: Xfh8zrRZw7A0aXC3E9LebWyErd4.roa (hash: FUQj4hR3WY/C5r364dxzUxMw4OF2Ggqd9oIi1o4fn10=)
                          15: XnKhkIj8XU2HxSZI-PPO4P-cC2I.roa (hash: RZJBztvaM9qOkXAu1EUg2oUvPjGzxSs7nEvJhyJK0qY=)
                          16: XymxCebgP2iZukhvR2MoULKQYg8.roa (hash: Gic+qBu6uDav81P9UIqh8LoxizRVVE2tkjr5RFnItJo=)
                          17: baWixGmdwdkSX9TDGN-Qlb4lmGA.roa (hash: GhZuR5USZpNa0EDpXlmYqKRP7MC168zFvx0Rz6R/PK0=)
                          18: bs-Ks38HPiFE0Vzu9hCOAT_v2qk.roa (hash: 59dDdRNblQTB9SVjvDy4pNzxWykMNeIW4S3L/KbIT9A=)
                          19: c0ZnvHQrmnuJhbdNtuSYX2OHS9c.roa (hash: Xwx99qFCWbgDS7FjLjIYXDibpdvOr8Iwvs0X/aUeNvM=)
                          20: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: TFk7HCN9sY+xmN7DRM3a4ja1bmRDphueN/F97Ta3mK4=)
                          21: hABxVjfNOUJpj-z5UorT-xdaa44.roa (hash: 6sQ9BTmeHNBdeeQCTv6P6DGLQnjJuSvy0rz9LS1SIG4=)
                          22: j63jZRnMUiDSsXvYQHecWgsCRyQ.roa (hash: K8+M3lFPQKubjIsmYzQtDktqmYXELL1jNbS29/gsyAA=)
                          23: mA147Xd7z63TDz_x49XUByd9djA.roa (hash: QizndFGS4tu424cwh2ulp0h3A1hTFAM9aqHWhGGLPbA=)
                          24: rIgcdTeWZFGqJKg9n3iWHMAsC7Y.roa (hash: a0sp1XHVAFftpd98cWn25wYJYIERTkIsIUmu6LiYvzk=)
                          25: umw1f8KATzlinkc94jrVNM7O5FM.roa (hash: nSUZvuLB5WOlfTLV7B/9YHvz7jophepWeg4X/O79XDM=)
                          26: wBmGKXHN8M3c7OBKyxuRTU7lBLA.roa (hash: NjB9Qp+zgAcVCYv6VDKIdB6u1ZpCafutoKC8Tsuys6o=)
                          27: ynIgMwcMUfu6aoySdoB2_fxZ-2g.roa (hash: Ad2Ob20F2PglYmj0nGXoA2H7TNg37jxfUh38S1QtL8E=)
                          28: yxTjGPj_Qglxr_34LiTpZhaydeQ.roa (hash: Vz8qidNibQKtCnGpm2NL5uzzI7FPXB8PEr1lT5su1wg=)
                          29: z3aZTQKZFzM29IIBXsAtxZGZ_Tc.roa (hash: fjct9lWmGvHOEo0YjITzcQBCzb1QrDPT5eJeyB+eK+k=)
                          30: z80MVwRUXWgMDbcJ_g9xksS0uHs.roa (hash: SUb3bn81u2CP978uSjnzY5A3iGrgJwGR+seJyNzkQWc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:86:78:bc:08:f1:5e:b5:b3:27:40:3a:8f:b3:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
        Validity
            Not Before: Jan 31 15:00:18 2025 GMT
            Not After : Feb  1 15:00:18 2025 GMT
        Subject: CN=a2f948b2951bc40196983efd239c2e30e6164651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:b2:92:dd:11:aa:33:8c:45:4d:f4:a2:1d:
                    e4:35:75:7e:91:51:1e:f8:c1:ee:b3:cc:b4:20:a2:
                    fb:a6:2d:1e:7b:de:72:12:15:11:dd:2a:2f:bf:08:
                    21:24:e3:21:27:b1:b0:39:9b:85:45:c1:0c:fa:95:
                    7d:c1:fb:d4:49:b7:7c:f1:77:ee:0d:64:f8:e1:be:
                    37:3a:38:67:ca:f3:f1:6a:3a:a4:51:06:30:2f:d7:
                    0b:9c:a2:d7:69:6f:0f:7a:cf:98:52:7c:b8:9b:e4:
                    cb:63:42:ec:a3:92:9d:21:27:4d:67:8e:5c:3f:a9:
                    b3:76:0b:0a:20:cb:21:01:41:68:cc:4f:ea:b1:45:
                    31:0e:38:8c:94:2d:3b:13:ea:48:24:80:66:42:84:
                    9a:cb:bc:3f:34:05:c5:eb:86:7a:eb:f6:ae:ad:09:
                    7d:8f:9e:3b:3f:d6:14:17:bf:27:17:de:08:71:60:
                    c3:f3:2b:c0:fd:83:b5:40:3d:e5:cc:9f:74:49:c1:
                    2c:d5:eb:39:43:00:63:01:c5:3f:0e:66:82:d6:78:
                    e6:dc:04:e3:c3:93:29:fd:f0:16:89:2f:1b:6b:17:
                    8b:93:87:86:ce:15:cb:c4:6e:12:dc:a6:61:eb:86:
                    3a:04:7d:9c:54:cb:12:ce:20:30:e4:55:f5:60:3a:
                    bd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F9:48:B2:95:1B:C4:01:96:98:3E:FD:23:9C:2E:30:E6:16:46:51
            X509v3 Authority Key Identifier:
                keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:d1:c2:57:f8:25:6a:f2:6c:c2:b5:f4:1b:e2:be:90:19:60:
         84:10:00:81:14:9d:f5:58:5a:22:0b:ca:7c:f3:53:24:0f:0e:
         c5:24:1a:0d:03:dd:ad:d3:af:ac:22:20:6d:fa:e3:9a:75:d9:
         76:80:a0:c9:1b:3f:ea:f0:9b:f2:ee:68:ff:11:7e:e9:cf:8c:
         a9:2f:b1:6f:75:05:ce:9d:b0:42:49:e7:9b:ab:9e:fd:f5:5a:
         07:22:53:8b:74:9b:b5:6e:36:ed:f2:46:27:78:b2:56:7e:36:
         34:83:da:92:6d:f8:40:61:57:6a:fb:d1:3b:3b:d4:6f:59:0b:
         3f:a6:ad:b8:c1:bc:5f:bc:d1:f3:cf:bc:4d:e2:16:4e:61:c0:
         89:b3:d0:90:00:59:d6:ff:a7:68:cb:c7:87:f1:4b:a1:d1:6a:
         a6:de:ab:5e:98:ea:7d:d9:29:34:02:40:3e:ab:75:8e:8b:1c:
         9f:c7:81:90:4c:5a:38:b0:e5:9c:d4:dd:13:92:5c:f2:fd:82:
         93:68:02:b6:26:97:dd:e5:cd:9a:ac:14:29:9a:b0:29:94:93:
         a7:99:86:eb:f5:c3:39:39:c7:b7:08:73:d8:eb:e4:c7:a2:7e:
         ac:c1:57:9c:73:17:26:c8:83:a4:fc:96:44:a0:a8:41:e2:57:
         45:79:33:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:16 2025 by rpki-client