Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
File:                     IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json)
Hash identifier:          FkzxPZopH8ZpodelFqGWz77yRocgkBSjF6yRQ5G896k=
Subject key identifier:   DD:8F:B5:9B:27:CE:83:A3:E2:20:A6:E8:A1:34:AC:9F:C1:89:8D:14
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Certificate issuer:       /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial:       0195E0B44ED0951740EF1FCA5A67544E546C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
Manifest number:          1099
Signing time:             Sat 29 Mar 2025 07:01:07 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:07 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:07 +0000
Files and hashes:         1: 1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa (hash: z+MqJylNHYWp3NqFgOzBgiG5CjCUL0P0np/w7hgCYN0=)
                          2: 9uepVP8jCNblGgDml0purQuCeuI.roa (hash: krAEUA7J3c4hHlcNHTYBnr7lBIoDvqw3IUws2vLaSSg=)
                          3: B2yHxHbEm9GmCNVxvcrZFxarDHM.roa (hash: bgz2Ull5wnGI0goKFONDZrQdSvmkexqh99prCGIqdUQ=)
                          4: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: 3tu5s+J294f3bkvDtYwDRN2IBfELvPpGczDG3ZlFGAA=)
                          5: K2GN8Q4wuI9TOv_O5rPOY6UOVuw.roa (hash: x81e2mavHKbR2e6iStjfXJXmlwyjRYwbRrSYSDYjLu8=)
                          6: Rqg6__jB0I59YqNi0V3OG_MGBp8.roa (hash: dXgwdC+H6aPwaIuzA6ajakpboy2/DkMtHCDvVma8C2I=)
                          7: Tj6608f-1a6fYqa_z-5d8FeCzjM.roa (hash: anRpP2NDSpzZ3SrjHh0tnQVCsHbMwvsJQ4PMBnavsdk=)
                          8: btDz2u-l_wj6W8KIfCMAlnW0P24.roa (hash: sfK0ptsNBV2+LnneQNYSIHQ7XVoVHUaME+qXGkJagVw=)
                          9: d-S7YgetzEwMrrxbSdTzmhWIDOU.roa (hash: 3G/Eu15jWX5wqv+LVcJ9iVdKlsYAltsvYTFwqOC6jKg=)
                          10: f6GDqb9nJIgj_F1z2AEUbY6YnmQ.roa (hash: jKya+L5/uP3Dz7PfxR54wCUY1sMiu+aWWncKs50X+nY=)
                          11: hI0tUC415NEH9XUX9W5_NYjc6b0.roa (hash: vIUGWL+jywzP4nOG3s5yRhGXD3r26uV/UoGJVBb5x6o=)
                          12: y72ioZ9vcp7DqGWY8rVyBxu728s.roa (hash: PbIGmtWe0+HcZ3GBbrnUP6pZwodFKUDC/Q3NIX5q6Jg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:4e:d0:95:17:40:ef:1f:ca:5a:67:54:4e:54:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
        Validity
            Not Before: Mar 29 07:01:07 2025 GMT
            Not After : Mar 30 07:01:07 2025 GMT
        Subject: CN=dd8fb59b27ce83a3e220a6e8a134ac9fc1898d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a2:2e:1b:a8:10:33:50:60:e8:ff:9c:18:c2:
                    a9:4a:cb:fc:93:18:7d:ec:90:74:88:dd:26:73:95:
                    82:81:a8:9e:3b:25:e1:a0:5c:e3:36:f6:9f:ff:94:
                    76:64:31:1f:34:dd:b8:fd:5f:d8:37:fb:7e:b1:66:
                    a8:94:24:2e:f6:5a:73:89:2a:a5:d0:ed:00:ea:1f:
                    28:d4:83:68:18:c4:8d:17:a6:62:da:9b:52:bc:a4:
                    18:8d:30:68:f1:3f:8b:6b:45:07:55:f4:fc:58:3c:
                    40:0b:d7:da:82:ec:ac:7d:7e:14:fe:4d:8b:e9:2d:
                    8b:a2:6e:d9:52:94:26:60:dd:44:e9:83:8f:a0:93:
                    8f:21:7b:46:51:80:e2:12:bb:b8:58:aa:49:ce:98:
                    b7:4a:7a:3f:77:1f:70:8c:87:6a:aa:7d:33:46:cd:
                    65:11:f1:28:a1:79:03:b7:2f:19:ef:56:8a:15:12:
                    b1:81:d0:36:51:f7:21:53:b0:b7:1f:e4:d3:6b:17:
                    80:f1:a2:45:6b:cf:f3:1d:a5:0a:7b:8e:44:4e:05:
                    10:28:29:25:12:55:79:05:6d:63:91:9f:f3:77:57:
                    ba:61:e3:ea:c4:2d:b7:83:78:fd:85:39:a3:8c:b1:
                    27:61:dc:fd:61:01:7f:6b:22:cd:bf:61:60:63:f1:
                    4b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:8F:B5:9B:27:CE:83:A3:E2:20:A6:E8:A1:34:AC:9F:C1:89:8D:14
            X509v3 Authority Key Identifier:
                keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:72:b3:dd:03:a4:44:c7:59:a7:d2:58:9a:ea:7c:4c:cb:86:
         89:82:c0:33:b4:f3:dc:e5:16:4c:eb:e0:79:61:38:5f:67:64:
         5c:6e:ce:8d:4a:79:cc:39:fd:fd:75:6e:09:21:c8:97:13:59:
         78:e4:5d:f3:3e:21:75:98:ec:fa:e2:3f:7b:6e:55:da:08:81:
         82:09:96:bd:50:a3:4d:0c:84:37:8e:0f:ff:6a:24:18:07:1d:
         25:79:df:e9:2d:40:ed:39:67:3f:96:34:db:3d:dd:31:be:bf:
         5c:09:97:23:57:c8:49:27:c7:f1:b3:cd:45:6e:01:0f:cd:10:
         4b:e4:4c:97:02:89:7e:9a:b8:ba:53:ef:d4:48:dc:e0:33:48:
         ec:02:8c:8c:81:33:91:18:2d:85:2d:54:f4:fa:15:af:38:40:
         9d:fc:a6:63:06:e5:78:5a:e0:40:42:b9:d4:3a:e6:ef:eb:c4:
         0a:4d:b0:6f:5c:7e:0a:70:89:84:21:32:80:fd:6a:f4:11:e2:
         d7:46:85:ed:af:37:99:87:94:25:3a:f2:67:3c:f1:e1:12:21:
         7e:f2:10:1b:c0:4b:57:a3:46:e6:cf:40:67:6f:2d:e2:93:3a:
         87:d6:be:a1:e4:fc:86:56:a0:af:9f:dc:88:b9:d9:58:d2:37:
         81:ce:51:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:40:01 2025 by rpki-client