Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
File:                     52ASbc54vBbmbC5udjWEisRoRq8.mft (raw, json)
Hash identifier:          tVVqTod2DhaZKIaDJ6Mnv0l1uTTB2DQagdhxtU6UNk4=
Subject key identifier:   53:AE:4D:EF:9D:83:85:78:3B:65:59:2C:4B:B7:88:3A:CE:91:85:72
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Certificate issuer:       /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial:       0194BC3C32B9C40D04FD01DA3D2F5B2484FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
Manifest number:          146D
Signing time:             Fri 31 Jan 2025 12:00:49 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:49 +0000
Manifest next update:     Sat 01 Feb 2025 12:00:49 +0000
Files and hashes:         1: 2mVfV49Z4VOJNxOYjQ8U5su-jXI.roa (hash: 4B8NDf79dTd1lmhu+DlgTxMCto2uI5jnWGoSRhBcicE=)
                          2: 52ASbc54vBbmbC5udjWEisRoRq8.crl (hash: AQc0wjckgC9d9BjWIMDHT9yyye5whbFowg7b33IyEFY=)
                          3: 7tiEv9a2cte9CpBTPcqjs8xnBKQ.roa (hash: Lp0nRST7H/IZB0m5wIyra+a/lX3Kx1yfYMfJAqiypu0=)
                          4: MrqpvKVhGghgWqjcBqKvEuXDI-w.roa (hash: 2m6ct1yYKNn97oNHEpEMtqOhuEyZV5Dslxg+dpwmv70=)
                          5: cHgsLum03vUPk1ZqgWFlR06D1Gs.roa (hash: cQZtsmDbQpAD/17b4zQranEZKH1IDqAE5jHDvC9CNKs=)
                          6: kPSNnw4_4qELTdWvaGuzZV1m1HA.roa (hash: 4wdK73NzeZ3ZvPINCQjy0JUV5WCBpYsSrh/XOjnZGIg=)
                          7: l-ZGsydBxlaDCYmuUrju9FPVJ5k.roa (hash: YsEoIsYTsiy+kVjmNva3VAJhJXaXEqZJGws2DjhqC2w=)
                          8: opmTxamDTTGhXXB97pQEAvfnlEA.roa (hash: +a21sRDHCzkVFGym6Uca5XjXTPbBTo6ZNir2uKNCj3g=)
                          9: uQU12zYitg_amaVlwJpXM9XCEAY.roa (hash: IYdpyZTPtIiqFILl8uMqJOM+CkHBFW5wOhN+3p4JTWU=)
                          10: vfMSVp4XTyEruVHZ0YrpNiPStvU.roa (hash: 2s9I3jze/b4F9Z53KMQkFVMQoIYg81frFvNsI+IKcNg=)
                          11: yQbINQJvUHC1dH3mQkH5rb1td-g.roa (hash: DnYO/+H1u/BVnwIyhPJluAtSzIgI8JTlUaWCc03ojok=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:32:b9:c4:0d:04:fd:01:da:3d:2f:5b:24:84:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
        Validity
            Not Before: Jan 31 12:00:49 2025 GMT
            Not After : Feb  1 12:00:49 2025 GMT
        Subject: CN=53ae4def9d8385783b65592c4bb7883ace918572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f1:21:4d:ec:0c:d4:2d:5f:83:21:f0:a7:37:
                    3c:85:97:9a:d0:4b:04:74:c9:28:e8:2a:9f:4f:15:
                    75:f9:19:a0:06:c9:6d:09:d0:b8:02:9e:50:7c:d4:
                    e5:5c:50:15:2a:d6:36:03:85:22:5c:dd:b9:66:94:
                    68:23:a1:3d:a2:57:a0:d4:32:7d:64:1b:30:6a:9e:
                    e5:03:70:82:12:c4:de:bc:84:74:9b:62:58:26:26:
                    f0:02:44:f8:e1:2c:77:07:e8:62:00:b1:f0:e0:8a:
                    85:79:3d:7d:55:e0:b3:01:7c:12:94:c2:66:bc:f3:
                    3d:ec:f8:ca:8d:70:4a:77:d2:a2:e3:56:18:59:24:
                    5c:06:70:5a:8f:8b:19:20:01:b9:18:ec:c4:75:a9:
                    66:fa:ae:ee:f0:40:ba:60:94:6b:f0:b8:f2:16:a6:
                    23:25:25:8b:15:42:43:ce:1b:e9:e5:02:6e:cb:55:
                    d8:b1:3e:4c:52:8f:7a:9a:3d:95:99:55:e7:3b:89:
                    94:92:5d:ec:92:7e:b5:f1:b2:12:2a:88:76:c2:a6:
                    23:93:06:9b:3f:07:bb:f6:af:c9:1f:ca:fb:42:1c:
                    54:93:8a:d4:81:9c:37:e7:c2:ed:76:e1:ad:fd:36:
                    a2:7b:48:ad:6d:97:29:45:d9:80:17:bf:67:6f:af:
                    31:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:AE:4D:EF:9D:83:85:78:3B:65:59:2C:4B:B7:88:3A:CE:91:85:72
            X509v3 Authority Key Identifier:
                keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f7:74:de:be:49:61:9e:cd:0c:4c:fb:2c:f1:79:d8:04:c4:
         ec:31:a9:6b:ea:62:02:e4:98:cd:75:84:bb:cf:8e:ff:d8:79:
         04:03:09:8c:56:27:e8:d8:a7:5e:d4:6e:da:18:a2:ec:af:51:
         ee:f6:bf:aa:5a:ad:1a:27:4d:1f:56:d9:a1:55:e7:3b:37:77:
         f8:01:0b:bf:91:d2:3b:13:ea:6d:c2:0c:82:33:0a:07:df:44:
         7d:91:39:02:4d:ab:7b:de:b0:4d:0b:25:7d:56:15:b6:4c:af:
         3f:f4:15:ba:f8:93:fd:bd:55:31:4e:24:d6:7d:b5:8c:fe:18:
         fd:30:26:83:1c:50:8c:95:c5:f6:3f:d9:20:f8:2f:c0:9c:b1:
         de:06:02:36:28:ba:a6:a2:ba:5c:6b:7e:e1:1c:b3:df:4e:65:
         d5:b2:48:7e:73:4f:8c:2f:5b:b9:fc:40:53:25:38:c2:e9:d0:
         66:f2:0c:59:8c:14:45:d2:03:1e:fa:ce:bc:82:e7:ac:e5:00:
         98:45:92:56:2a:dd:a4:f4:d3:5d:e8:97:d8:3f:9c:b3:26:78:
         03:3f:3b:a7:ba:6a:1d:c5:9f:e5:1b:87:a2:83:d4:fd:c3:69:
         07:c3:78:a2:cd:2f:7d:0b:88:cb:bb:1b:0a:37:dd:72:38:5b:
         2e:bb:c8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:27 2025 by rpki-client