Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
File:                     H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft (raw, json)
Hash identifier:          4uQ2loLkNPWH5LgfVXvK+cDDISoNGcOONtyy9XhzcJo=
Subject key identifier:   FA:D6:0D:8F:CA:E8:0E:29:07:1A:41:AD:75:D5:D6:82:DB:9E:1D:99
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Certificate issuer:       /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial:       0195E0EB39C45E856FCDF8522296D3D2FD11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
Manifest number:          14DE
Signing time:             Sat 29 Mar 2025 08:01:06 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:06 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:06 +0000
Files and hashes:         1: 0UeT5v9kAog4Vy_9d6T-L38uB2Q.roa (hash: c3R0NvI9wSQVTmaH5yGuGplsQLYtXrXERE9zYTzHhy8=)
                          2: 4AS-0AOLUx__wmNhCGTeWPEnAQo.roa (hash: 1yOTh34TCVsaX9HiMqqafQzrMBKAhMm9U+yl1SEcoNw=)
                          3: 5Z9zQYiQT-9bbmf1gYjYtdMqh-A.roa (hash: dwoCL98zxAribSjy38tsgE74R02P0uk7PsgJvptX1JU=)
                          4: 6Ebu0HcrsLkrrgDBeBB1A2dy2BM.roa (hash: TccVrsP1WNA2hyHvabl2Zj8Mx0JoLI/zobG0dsNCzu8=)
                          5: 9OZxkpid54x2rsU5VRKfjY_gB2A.roa (hash: 38cpSiAtwD6roS3bP5O86nTXrnPOD+5Jin9ozETV8sI=)
                          6: Ay-SweIqjTD5x-W0BgOFlXFvGto.roa (hash: ENRR9lHZ+JRK+4SQ3UrX8bD9aFZzV05sOeoNCH2LeFY=)
                          7: Ctu_zdT55QvC6-G-SxIKwGi4wDc.roa (hash: wdlWguNWI5zFZbP+4kdzwSssF7MRzveLv4qiPvTiQro=)
                          8: EppnmZl-hivZ6yXCw8PIfVHg8ks.roa (hash: Wiyihq6BaYpeBkE31BV7I7S5C0Ot3rbB+PhwUmAMu5Q=)
                          9: FqYIT9v1PIigYUXlKqygd4WMyec.roa (hash: tv8mfQBReWKdNDNzaDeKywrzkQOxW77WcbdZkUDG+AU=)
                          10: G8IgPHN2FXyIl75Djei3X2y2GYc.roa (hash: mISIjy6aMOLzu15LO7KCjeFGNl/oTWf1+M4gWrvBkCY=)
                          11: H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl (hash: A5S3MHKBdoRFDuY3Gu321pgaftKIX+hCH/whZAhELIM=)
                          12: KcaXY5GqNLQM-eAtasEVAbUL2j0.roa (hash: eFzhogYKRZ4wuRZtpbVGGo9W1JTGOiiHVbwPqMYU5QQ=)
                          13: MUKicFTzhC00zdrY_h1AYYxVa-M.roa (hash: Ids/SWcSu2QegMrmqZTQrwfmzaSd55FYqNM5CzWSoLA=)
                          14: NKBdNnKPToLI47Hnl3n9Lr0qpVE.roa (hash: TjUhViH8+so4224KmGJym6LJscd3XEc8YHqommmYBXc=)
                          15: PNUti3X7fTE0OHEkRLQFQxtKCuk.roa (hash: aliXDs58/kIRits7ot3W71lRxlaREa6XrlyMb3I4GP0=)
                          16: SEv5PYdinUVT5nM_RvN02I4WnPI.roa (hash: bEn83H7TItfWeMGBLjyh2LDH4cnpzc0XU4z33ahI6+E=)
                          17: _4zuoFfJ1lWOHRxbFgnICqvRYTo.roa (hash: 6Z3yT4Uro8UD6Kg7GG2ZeAaXcFVddN8U5JapvYxDnt4=)
                          18: _PMt2OoL3tDM4rKRYVgBBMfWRFA.roa (hash: Ix2jd6T1COBEpwRmmTUBGYHR6LZbzYxbMPftc77UFdE=)
                          19: aym9fFTlCOO6_TFKucqP8rQK7Dc.roa (hash: 9WJnq0EqKoeXj6Ls0YEvw8jPPKPCxSuUMIvPja3ohkE=)
                          20: eC_DqBJXUL0bZ3NGBuH9zqfQGg4.roa (hash: eglPjv/u5AlTJot/2QRfyPZBeks5h8j1RactwsszD4s=)
                          21: fKz1-9xo27dZ2S0IPacWOZTZsy4.roa (hash: Km7ntY5vzUDI+if2xFqUXvoglWfTB7cuYK1InFbKqaw=)
                          22: fN6-ucvixEMwzfEXNRUOgkq3p3w.roa (hash: QSoq1kjSTfa9vGe0ryYrcV8u0DdFoiJrIzt5wytYDbI=)
                          23: gGSxPt2Sh4M8i7J8HJfnceMCe00.roa (hash: O0jgtQJgjrWOC325S7JKGmv6jCCpS56jcL4dcIe6mxs=)
                          24: hS1jiuVl2dU6SMvZXo-aur-baIo.roa (hash: wRVp8ycxJk1e2oMiYTfs3ketnUSkqnJTyHStucSEmSA=)
                          25: kPALK0u_pJmbieCv7kbynfsqawg.roa (hash: r0Pzr2DCQpihDWBe0rVtTwTVSjviPIsMp30ZSdfUtv4=)
                          26: lC-MwQo01Gp82RT3mnQhOnXTNVo.roa (hash: txd4viUbMysMasnkwJrSk5DhmqAOC+f+W+IModM0p6I=)
                          27: oM5327UG2mWTAGTtGcOz-JmJhgg.roa (hash: h1ZmVFDbPqTV4L0/Cf60sFkuro5CPdVUS191+lmyuUs=)
                          28: rIGw4rvANHfOuMx5NCLXbIqwca4.roa (hash: Ax9z9G2JPoeUmfYGQQfPW9WibNiDAosH5QsVz6vOEcs=)
                          29: sT-XqmsaKrnwKY9Ra9wzvok_kNE.roa (hash: GUZUDJYWdLrHKEBuVtLpBU6JuOIR3vdhCyBhBteo5W8=)
                          30: sgWOuS580F3ik2qbZoDfyyTVqq8.roa (hash: 1rWiUes/UGLhnsQQwqKoTOa3kTzfkG+OrqoT+5TD+hc=)
                          31: w_q7lMoSjsh87AtbKJG_MjZSzbs.roa (hash: aLEvMvWLIZ7MDfR1jeEEkQ6VSWVyC5TKwxKUplfky8o=)
                          32: yh42Ac90RZWWPXc_66CM7NZ_M5k.roa (hash: tzV8E5OYlSixUq1CthaGUqHvnzc4smQonJaVny+Z3SM=)
                          33: yzwX0PcQhkzl7kpV2tBHUCY-ZU4.roa (hash: p9i8I2Z2Hnlivas+hpBSidTPpg6KPMeUDk8C71jgMes=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:39:c4:5e:85:6f:cd:f8:52:22:96:d3:d2:fd:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
        Validity
            Not Before: Mar 29 08:01:06 2025 GMT
            Not After : Mar 30 08:01:06 2025 GMT
        Subject: CN=fad60d8fcae80e29071a41ad75d5d682db9e1d99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:a6:32:aa:33:93:e7:04:50:6a:4e:90:1b:9d:
                    0f:64:ea:d3:6d:d1:d4:4e:8a:08:3e:22:46:fc:f9:
                    88:27:dc:7c:88:6a:0a:f3:38:05:69:cb:02:45:1f:
                    82:00:cb:d8:fa:40:bd:23:9d:04:a7:2b:de:cf:99:
                    0f:dc:89:37:c5:ed:c8:5c:df:53:e1:69:0e:2d:50:
                    e5:5a:88:4f:01:e4:60:a3:a9:0b:75:f8:a5:4f:e8:
                    9f:18:ff:2e:4f:ec:ee:35:ee:dd:46:e2:b1:b6:86:
                    7a:ed:3c:05:69:47:8d:c7:2e:bc:51:1f:09:51:5d:
                    ea:aa:46:ea:15:14:1e:cb:4b:62:10:15:23:04:01:
                    ed:5b:31:8a:0f:99:8f:84:fa:02:6b:79:3f:81:cb:
                    ad:9d:9a:99:bd:22:86:15:ee:4b:8a:01:bb:55:66:
                    ab:c3:a1:4c:51:09:ec:c5:9c:5c:06:d0:d4:0b:b7:
                    bb:06:f3:a1:b2:aa:ff:1e:35:4a:84:70:57:d6:b1:
                    bc:41:ae:5b:0d:a8:bd:49:ef:e5:d5:f9:61:67:b6:
                    38:eb:b0:e9:70:cd:3f:9b:c6:13:1d:38:ec:2d:69:
                    70:23:2b:08:73:d3:9a:74:63:15:a4:01:00:8f:89:
                    c9:7c:76:b1:85:23:9d:f1:39:b5:38:d2:ac:63:65:
                    d7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D6:0D:8F:CA:E8:0E:29:07:1A:41:AD:75:D5:D6:82:DB:9E:1D:99
            X509v3 Authority Key Identifier:
                keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:03:47:a9:27:0c:e1:c6:03:b7:fb:3a:c5:f1:4c:b4:1f:5d:
         49:9e:98:9b:e8:84:46:8c:3b:02:52:c1:50:5a:fc:43:0d:ad:
         27:76:94:27:e6:8a:ab:ce:38:d8:8f:ff:f2:97:60:3f:b1:21:
         88:0e:99:ab:fb:b5:4e:46:9d:cc:ea:bc:7c:d4:5c:c1:ef:0d:
         6d:96:04:32:f4:e4:dd:29:48:95:31:83:2b:69:ff:d4:49:21:
         a3:f4:d4:cd:09:16:39:cc:47:4d:fc:03:a9:45:68:21:dd:da:
         d4:3d:69:cd:42:52:b0:4b:03:ec:e1:31:fc:75:d0:21:20:df:
         a6:ec:f9:cd:f3:b3:6c:51:dd:06:be:0f:17:93:35:3a:da:16:
         83:06:dd:60:52:3d:ea:82:ce:37:03:4b:fe:b3:76:94:b8:4f:
         37:9a:a7:45:0b:ea:85:3b:d9:1b:b0:60:2b:de:28:fe:74:b4:
         d6:7f:c4:e7:0a:8e:f9:c5:89:2a:dd:6e:6f:ff:e7:1b:de:c6:
         0b:fb:b2:c5:90:cc:81:14:27:71:4f:c0:16:e2:68:14:b2:04:
         0d:3e:8c:c7:92:44:c4:4f:ec:42:cf:1a:68:e0:45:3f:59:ce:
         2b:a6:98:fe:c2:19:c6:f4:26:ef:e8:4a:a9:42:66:97:f2:04:
         d4:c3:1c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----