Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
File:                     3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft (raw, json)
Hash identifier:          m6PFc3+jWIFRfovVx633IgJwqlN9Tf0AMVgCgdsti1s=
Subject key identifier:   46:7A:A6:F8:B8:73:82:6A:08:E1:35:40:5C:98:93:C8:2B:BA:F4:75
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Certificate issuer:       /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial:       0195E0B434CDCFF75B1183322FBEB5DE8701
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
Manifest number:          1434
Signing time:             Sat 29 Mar 2025 07:01:01 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:01 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:01 +0000
Files and hashes:         1: 3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl (hash: lWkdIcsRG6F50AIBLIYzJ55ULDlSgTnSwf7lli2cwRc=)
                          2: 41fVJkrPbHKQA079D4QVuoSoMHA.roa (hash: sr+TybZqUtIImaDgTqztSGD1XE6oloq4BZ2M4Xpg+u0=)
                          3: 4pf6JhZ2ZrbzDs3KIhxGjElBlaw.roa (hash: vXT1uBYUu9e7P+u/IiXkrVdl2Zw3UbzSeW2UWFK34Jw=)
                          4: 6klSWkjjUTbGuPtDfN8cALab9cs.roa (hash: sdgQjkXScGhQKnR4al8+skMwfxtoqagBTslhZkfSKNY=)
                          5: B3w7E9gvZEzFwMrG99Xq-T1MEBw.roa (hash: X2c/+qNKKXp5+FBng9aKxlFFZbDBWHiqkfhHgQbP6bg=)
                          6: C2H1BSmYMIrZggVB3V-MZ8CR5SY.roa (hash: MAmDjDLmFQyW+O4vZbG4q4tWTwrvQlayeoQlXr+Fu/8=)
                          7: DJ2HKm_1c1O48zC-cc12FURV1-w.roa (hash: odPYR1sTJx4nskAcxBKfAydZplTxWpbfAnjmQhPzJX8=)
                          8: GmlPqmYgpg61oCrtTG9RzmgTZRQ.roa (hash: lOFhsoN8S3GIIvzatAuS7mkyT16CCVPA77MjKa8aWWc=)
                          9: H2lVKMz_X46KFKjX_6x9tvmH1uE.roa (hash: RB7IG/Ldoyl84GgxDa9yMrGgoraAfien6HZCweyoCaw=)
                          10: RZCNuFYkMVfet6khSeCWtqT4r3s.roa (hash: bz5sfARWaL0oWhzQTAMOexVtHrjfBeAF+vBi8eYpl/U=)
                          11: Sn1YHf-JTelJa8AbFEu9eCrJc-Y.roa (hash: 4RQ4/nSSdbUjaSMtOe+F2ienAydzSYTXwrbRmuUcEJY=)
                          12: UE3TFsD19f6wQr0gTHDaiwhGdqA.roa (hash: h9a9K3MMF0WQfDnzSvLb5P+n54cp7dIKew88pGDYldk=)
                          13: VicyF_0e_bvvcn0fKM8q40zu1n8.roa (hash: C5AQCG/2PEYP519Z6IOs4YDYOnLl0s41qulpvbJvJ4g=)
                          14: _HxOSGDLp42EFmYvwzkWMgsUDRc.roa (hash: ld3Ed4rdMoSUbT+R2+5BJt8zZUTSFFBqMJ22iFdBG+s=)
                          15: cHLxjuzlgoGDINIVaFsru4PZ9BE.roa (hash: o3eUI2kqgbIKISwJ6D+XZ6uUN50wRiiahX5yY1sTPn4=)
                          16: lknEfiAWsTgVxunxpJ4Cim6vi_Y.roa (hash: 9nT6QBaPn6YGSLcfszLUc2cPb60rXG8wS9MlLTeVBhw=)
                          17: mdB3D_zcc3ZMQewiv3J0UZ_sUlo.roa (hash: NsB59ITpkzoeK9pRuPozIMWrvt6Lae+60ChrUSCRg50=)
                          18: mjTSWLEuvIRJ-mDUVhSblHWE7N4.roa (hash: rmzWSKN3Yb/xA6p/q8UxEXQjDhun2rkoNnE76zOjZHo=)
                          19: pxtXnWk-oYZ7Qby89ddSCgu91ts.roa (hash: RB8UdezmP543bft1AFoJ1CEu6eopqGc7lCF9jSa1eTc=)
                          20: q74_W6xdG6goIDi1c08_8gJ6uTE.roa (hash: pxdR0KPAM6OXX14ayHaIWzZB+fjREFkJhs6uGstYGhI=)
                          21: r3Ck7fpoOKp57Mk1jJgw8XHWAxg.roa (hash: jDsvxvKf5uFW/4bW6b3NOwjRJy48sDgwtQTJJofZqGM=)
                          22: v99_kaWjoTKnpnOcBogb8Emjk4M.roa (hash: unshnZnS3tg5XPSrGj9Iy+gxnhESQoD/3z5Y8oIxogo=)
                          23: y38_fk_dl6De5uovg7WKuAzPolA.roa (hash: PsHTMj/SkJczqFC8znjT596YhybynG/bm1yXYsS6Cxs=)
                          24: z6d9djVL2RnXuevi6Ot8E8e62tc.roa (hash: o9Kh9fFp+5NbfQXFw6W0ABs1khVR+g751jXSLlxLU4c=)
                          25: zUeLco_9U8ifNR5PMJI3zpijW74.roa (hash: 3lduL1beP27BPGmbMBwONs6g5YeSTXx0lXyH1JulpN4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:34:cd:cf:f7:5b:11:83:32:2f:be:b5:de:87:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
        Validity
            Not Before: Mar 29 07:01:01 2025 GMT
            Not After : Mar 30 07:01:01 2025 GMT
        Subject: CN=467aa6f8b873826a08e135405c9893c82bbaf475
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8e:2f:86:58:67:40:60:ec:21:b0:0e:a9:7d:
                    83:81:96:57:c1:07:89:9b:d6:46:07:b1:2d:8e:2e:
                    46:10:95:24:94:b7:b9:13:d9:ed:8b:2c:56:43:e2:
                    3f:c4:7f:c7:51:72:48:d5:95:a3:da:85:70:f7:20:
                    46:f9:8a:30:f6:e0:2d:a9:02:ee:5f:ff:f0:89:5e:
                    b0:47:5e:d7:96:e8:0e:4c:7e:6e:d6:86:3a:48:cc:
                    89:2b:c6:08:da:fa:f4:89:b5:bc:50:57:fa:f2:06:
                    e3:61:8a:28:5d:67:53:e2:db:4e:e6:0c:af:3b:fd:
                    a6:5a:12:5a:7d:d5:66:b6:cd:47:93:3a:3e:a9:fd:
                    d0:ae:19:a3:7e:f6:29:04:55:75:37:b5:be:7b:68:
                    85:52:47:14:ef:9d:ea:49:5a:b7:f9:7a:1f:68:f3:
                    55:d8:94:16:8c:8a:d5:c7:16:f4:7a:7f:2b:59:16:
                    20:9c:75:16:92:8b:09:3a:88:db:95:88:e3:1e:4f:
                    c5:52:90:dc:c1:1f:73:cd:0b:0b:1e:ea:9f:2f:50:
                    70:c6:c9:29:f2:6d:d7:a6:46:57:c3:40:0d:e6:48:
                    4f:13:16:3c:7f:88:cc:6d:ba:f2:d4:b7:8c:e7:bf:
                    07:00:30:d2:fa:11:b1:30:aa:34:45:d7:b9:ad:a6:
                    78:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:7A:A6:F8:B8:73:82:6A:08:E1:35:40:5C:98:93:C8:2B:BA:F4:75
            X509v3 Authority Key Identifier:
                keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:b2:6c:a3:b6:1e:52:84:c4:b5:c5:0e:00:98:b2:a3:f4:2a:
         e0:56:a3:c3:81:77:e5:a3:d0:20:e3:10:09:fd:6f:89:8c:d3:
         3c:c8:14:c1:2f:18:8a:a7:fd:af:c4:91:66:d7:cd:59:dd:19:
         ef:da:76:89:17:6a:da:63:aa:ab:75:52:2a:d4:93:de:cc:bf:
         8c:87:92:a5:d6:ca:8f:32:a6:44:53:46:0e:be:b5:0d:5f:1f:
         0f:93:a7:30:2c:73:40:98:ff:73:61:e6:86:9b:2e:9f:69:08:
         51:2f:23:26:84:7a:ee:2c:da:03:db:44:ac:40:f5:d5:f7:99:
         8c:88:10:a6:63:b0:40:a7:d2:f3:13:a5:e8:99:b9:4e:4f:59:
         8d:12:7a:56:36:75:2b:3e:85:e8:db:da:63:40:70:7a:8e:8a:
         4e:66:3f:25:6e:5c:3a:ac:ee:02:d5:59:22:02:0e:52:33:63:
         33:a8:07:2a:6a:9e:51:3f:2a:d7:05:2e:21:15:73:0a:2a:da:
         21:74:fd:06:8e:f6:63:78:a2:f8:3f:02:dc:d6:8d:dd:32:b7:
         46:c6:29:2c:a4:3f:f6:79:59:0e:41:05:d3:6a:09:fa:cf:81:
         01:1b:57:12:ae:32:c7:09:90:5d:39:f8:fe:9b:6f:ed:bd:b2:
         07:5e:12:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:02 2025 by rpki-client