Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
File:                     OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft (raw, json)
Hash identifier:          1aXDLUD7lq5asbO/MwYq+BbFETbuTiPqbvCWvqB2tGs=
Subject key identifier:   17:BD:CD:F1:85:A3:2B:A8:D9:BE:1F:56:19:E5:64:DC:E0:80:4D:5B
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Certificate issuer:       /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial:       0195E0B4D077C35DC1F5C8C3CD2392569A9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
Manifest number:          14D0
Signing time:             Sat 29 Mar 2025 07:01:40 +0000
Manifest this update:     Sat 29 Mar 2025 07:01:40 +0000
Manifest next update:     Sun 30 Mar 2025 07:01:40 +0000
Files and hashes:         1: 3nAxOrqe3oi83iVjt7-kMzJ_imI.roa (hash: 0jNIl4uBhcm5LdIuubw+L/Ha2QMXka6zLLkNeAcF40c=)
                          2: 7B2j1343QblR9F6iTWiRinHn8x0.roa (hash: Bp/dbOZRIjunqnEsDuN3X0tRwg1SKVjgcGEA09U24Zc=)
                          3: B9dwnbBbiJenj05UDjyUy_TzXDg.roa (hash: s4Wv5YaGEZaX82N6dusRWR3tSJBVmvjmxniLSHfxYAE=)
                          4: E6umy5_OlHHb3NOgNKiaqTj372A.roa (hash: kmYIRPqCRch39x2r6WhmK+8aDVBlwYVLvzQIGAbOPps=)
                          5: MP0FknZx-rt-jXqxm1yu7mNghjg.roa (hash: 0IVLTHz5qrQC3E0s/+3I0aF+dTWKqMK9+O5p+t6rJac=)
                          6: OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl (hash: eY65rwLHgfIirNH0t9XLfnjvaeHSpkOhysrAH4du4hY=)
                          7: P0hYRZk_epkkwrcDiaxk_ejd9pE.roa (hash: RbP7Hj7hNb6SHmHJtPw1bzOEo2w8Ign3eKIaXKeZWz8=)
                          8: SOBAES4j7h-D6nKfccoc2NpSr8A.roa (hash: vmAKmT6VUkF1cozh164hgKJKVk8BJXYwDbwibYkkVy4=)
                          9: WBa-OMWvS5R9EiWcpIqPa_m7lKo.roa (hash: JhWDx8KAw0uX/VJGQRKzvoZLcAnbsOAM+D0EwwgJJrs=)
                          10: _6ucnx77KQFalvj5yEE2wp5osls.roa (hash: Xw55WCSv/8tmiRj4/KKvZ6v3swmB6TKO4qL1Xw6aI30=)
                          11: hmNo0lfF6aVfLa7MkqmEKjtbdyQ.roa (hash: +xwhsq1RdvJOWfeJtHcoWSMc+U0UkSWEqMUWf9xz80w=)
                          12: jtw47htspCaZBqLn-szAwwLDgRI.roa (hash: 4ge4ZfZPpCPnlsJ6k5nbKp3z9nIWCai+fnrSIWJ/WUA=)
                          13: jzrvK-bgXnpFKZtkluSwDEQbp08.roa (hash: ZM3tthCJVaSjXclzoJDdeWjLh7O5ICpnIBuMTiMEL9g=)
                          14: nDB6bqiXy-rzhdku9Lj005kPHfA.roa (hash: 0AJR+PurXnO7T0pJNk8Tq3MFQx7X/cSxW3eCAXJvtLk=)
                          15: pvCC0r4LUt3fsl1VHVQdfXh8Y18.roa (hash: 7j0tvWV4dVH4uAAkH8k/IyIqfSMk5UZQp8CnBxjMpFY=)
                          16: u50dx3Lab1g7VZDVh4T56LPcn_0.roa (hash: jDquIHZmp2NFyWqEfhpXVj8qaJ2TUhubdI3kfdM2qms=)
                          17: z5q48ktpf1eARPpbmIGK9GsvsrQ.roa (hash: tmWASzkDn54AHUg2VFq+szTIlcEFXE4zmXDoc40cFbw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:b4:d0:77:c3:5d:c1:f5:c8:c3:cd:23:92:56:9a:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
        Validity
            Not Before: Mar 29 07:01:40 2025 GMT
            Not After : Mar 30 07:01:40 2025 GMT
        Subject: CN=17bdcdf185a32ba8d9be1f5619e564dce0804d5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3d:77:5a:e7:3a:e5:0f:71:58:51:6d:94:09:
                    25:7f:2a:c3:e0:56:b8:1d:61:81:cd:12:2b:9a:84:
                    b3:8a:ff:95:ac:ab:10:9b:b3:c8:a4:9f:d8:f0:83:
                    74:d4:ef:28:ac:5a:32:03:f8:42:8e:73:4c:4b:97:
                    26:60:de:b4:5e:64:11:f5:37:b7:92:14:18:3b:59:
                    7d:50:70:d9:d3:dd:65:63:63:2a:b6:eb:f7:dd:00:
                    7e:0a:ef:6c:94:96:1b:a8:5c:3b:df:46:63:01:dc:
                    62:49:41:89:4c:d8:6f:f9:ba:1a:27:f9:54:8a:e0:
                    68:b1:42:a0:cd:8e:da:45:21:10:41:72:8e:14:fa:
                    85:a7:cf:34:21:e5:76:dd:da:df:45:64:64:c5:30:
                    98:99:4e:e8:e9:99:92:60:cd:a6:0d:c2:eb:94:d9:
                    c7:43:d6:32:a9:04:3c:cf:66:65:8d:20:b3:74:32:
                    b0:e2:70:bd:4f:a5:2f:c7:c4:24:90:f0:13:0d:a4:
                    ff:1f:22:75:ab:aa:af:af:19:db:ef:07:c1:ca:7a:
                    08:57:f4:83:ea:5b:22:16:18:92:a1:9c:cb:0a:24:
                    51:5a:a6:69:c8:48:67:a5:eb:04:62:bc:11:68:7f:
                    27:b3:40:8d:2a:b8:bb:d0:e0:c3:8a:24:2a:62:3e:
                    ed:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:BD:CD:F1:85:A3:2B:A8:D9:BE:1F:56:19:E5:64:DC:E0:80:4D:5B
            X509v3 Authority Key Identifier:
                keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:77:5c:4f:18:f2:b3:31:f6:22:56:23:a5:7a:d6:9c:b6:5d:
         89:0b:9b:29:b5:24:a2:c8:b4:38:ab:0b:5e:1c:cd:6c:70:39:
         f3:3b:ef:ff:93:f0:e2:87:09:2c:f2:b0:8a:2c:13:fb:92:0b:
         2d:7c:a5:d7:64:7e:f3:68:b0:28:b4:83:6b:0e:29:8a:21:0d:
         d1:24:32:99:c3:34:d3:fb:81:f2:3d:74:cc:2b:f7:5d:07:4b:
         02:62:09:dd:be:8c:08:27:2b:b5:b0:ca:be:7e:9c:88:a2:b2:
         8e:36:3f:97:32:0d:a0:68:f6:34:4d:7f:7f:b0:9a:af:be:16:
         44:d5:43:f0:f7:cc:b3:74:31:76:21:41:50:e2:27:10:60:a8:
         c0:43:17:2f:20:97:f6:81:54:a9:4a:2d:60:5d:08:e9:2a:72:
         53:90:77:45:40:a6:3e:a7:de:e4:bc:3c:11:3e:40:a4:3a:5e:
         65:c9:40:27:26:fe:a4:69:06:51:54:90:cb:e1:c5:f9:37:c7:
         16:b6:d3:8f:f8:5c:f2:1d:30:1d:66:7d:af:5d:45:8d:3a:f2:
         aa:12:21:e9:ea:10:76:10:a0:e1:3d:60:e7:fd:6c:07:40:50:
         34:bf:30:62:e3:e0:f6:17:41:d5:93:23:1a:b2:e9:b9:18:76:
         bc:d4:52:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:34:10 2025 by rpki-client