Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
File:                     hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft (raw, json)
Hash identifier:          17xTcqwRUeujbi8f0LXe0PSoyhApK4S+7FyNxrLoSIk=
Subject key identifier:   56:7E:E6:A7:56:B0:99:54:E3:9E:21:3B:23:B0:C3:D9:48:04:05:68
Authority key identifier: 85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC
Certificate issuer:       /CN=8533ef46116fd9d21bfb533e44bde517890c24dc
Certificate serial:       0195DFD8A303606CE8D15DF26E86FBD8B565
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft
Manifest number:          1286
Signing time:             Sat 29 Mar 2025 03:01:11 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:11 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:11 +0000
Files and hashes:         1: 0dOOZcxouEyBwDParynks7StwHE.roa (hash: JJ6ZudJMCas3SwJxwt6lm5WwMowMP1vWjiYzBqRT97Y=)
                          2: 0j_F7ObjeWM_-MDv2vnltyDHFUk.roa (hash: OsaLtzwPIW8gqCsltJsusg8e34JBn85Om/z5CrRK5Uo=)
                          3: 2sVCpnUAKblWh9v7qVEsEKRUfWA.roa (hash: 1CKYprr2EavvDbIEOzey7tbCXji3ClAfurVr7rHadc8=)
                          4: 7-L8h3vxgPMOucvJUyn6jvtlWq4.roa (hash: JqzKMiGM9qG/KoIssHAuY0XkXfUrBvh/Eg7mCU+N938=)
                          5: 9oLYcSPHMvCe-Pv2M_rza63XTow.roa (hash: wcB89ybRT1IhIFGZVbatLp94YXi4OhrbT8jvmNnsE+Y=)
                          6: FlI6inWj2TmnnIGOS7ZVGBf_bD0.roa (hash: 5X+YWS6gSiJ/Tn7alo0GG3dyffx54L0u6yH14DDRlbA=)
                          7: GaWyzUO0HJeBjasyRqC97NsCSD4.roa (hash: UvlgjWI3E2c5HU/6Dd5CAeuvj7bfQfjld2BSF5GNKKQ=)
                          8: IVO47FxImh-y3rWgAak5j9Lhqu0.roa (hash: UCZgxxNbeCBV4XvQFqq64x8nscbBvfYrvynDklgIEQw=)
                          9: JA31DZScZvYIwJfErV7LU6Pm8FI.roa (hash: j2dwdPSin1EaN8bZ47DvZWD73l5sMHPdzBMxjZwMols=)
                          10: OeMnrV0nVX6DCpX5ruJ0icY3qZM.roa (hash: CYtkRKt0tKCgVnuKUn9N15L60FkF9ZK/0wKUSmI7zGM=)
                          11: P3PfwPwkcE040d3Qr-D90iwF4_k.roa (hash: T1rptYAIYRS6lWsTlrVwQbPRhxvEwgxKU1Xm6hHDr7M=)
                          12: SYg89xuEXUG6bMD7Pl2CsVBcmVo.roa (hash: FafX8OoXWchxsyj8C7cAZtH+8tr3bEqU6ajEo9eZfcQ=)
                          13: V05XtxLuNAQpoO5H9P1IS4dSoX4.roa (hash: LXCIEksdGEPZzBTCWjbFwGM6+GL06zblhdET9a+UUAU=)
                          14: h6WkXFQCalKSUE8qQsL0s6At9NA.roa (hash: xC7sZws2p6+JMX2/NZkkNUsOt0/rPDjC11vfXSnqVOc=)
                          15: hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl (hash: 0Crn8XTAHO366DDGVHY52sdtqBgNwvkkTqmPM+76Rq4=)
                          16: ijQaYqsX36Iual-crRkacGaVc58.roa (hash: ccJw28PP5f/TupBMNwlADhguaBvKtjfCXWHuFYXPLzA=)
                          17: tta7Y8CGam3Bk5ymO6HtDo5JmhU.roa (hash: XDbIU4BmGkvASLJz4BGT9b/lR8c31GenOVU33j6ph6w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d8:a3:03:60:6c:e8:d1:5d:f2:6e:86:fb:d8:b5:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8533ef46116fd9d21bfb533e44bde517890c24dc
        Validity
            Not Before: Mar 29 03:01:11 2025 GMT
            Not After : Mar 30 03:01:11 2025 GMT
        Subject: CN=567ee6a756b09954e39e213b23b0c3d948040568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:eb:f4:f3:fe:2a:4b:56:7a:f8:c3:3c:bb:cd:
                    72:e3:fd:0f:20:0e:34:25:f0:9e:17:38:a2:f4:53:
                    d5:63:31:04:f7:3a:e4:4f:24:4b:c4:d4:03:b0:b9:
                    da:eb:0c:53:a4:a7:79:f2:39:75:21:ab:a5:5e:ec:
                    82:e6:82:71:20:ad:8d:8a:d3:08:df:90:6b:e7:46:
                    f0:b3:22:dc:15:be:51:f9:ed:c6:40:45:21:db:b0:
                    75:fd:40:14:93:aa:cd:5b:56:a0:32:c3:0b:3e:5e:
                    d6:34:ad:97:4b:45:27:d1:75:c2:a0:04:df:d5:a7:
                    f6:64:71:99:cb:5b:c9:67:8b:19:79:a7:68:c3:cf:
                    81:b4:99:b5:fc:4f:98:0e:b2:d5:83:52:ce:5d:ff:
                    ca:81:24:e0:e3:f4:09:34:6e:36:3d:77:ad:21:17:
                    ba:28:9a:9a:fe:9a:71:75:ef:76:f3:9b:58:1d:79:
                    fc:91:a3:53:c3:a8:3c:b2:b5:42:4d:f4:22:ef:13:
                    c4:44:02:83:42:f1:b5:7b:3e:ec:f6:30:ee:f6:fa:
                    3d:23:1a:3f:3d:4e:10:92:0c:3d:e4:21:f5:8e:09:
                    e5:7c:8e:4d:19:8d:f3:c8:b0:f6:61:8f:36:54:8b:
                    00:8f:3e:47:ea:bd:4b:e1:1f:08:fe:a4:e8:a9:52:
                    9b:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7E:E6:A7:56:B0:99:54:E3:9E:21:3B:23:B0:C3:D9:48:04:05:68
            X509v3 Authority Key Identifier:
                keyid:85:33:EF:46:11:6F:D9:D2:1B:FB:53:3E:44:BD:E5:17:89:0C:24:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTPvRhFv2dIb-1M-RL3lF4kMJNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/e0472a-3adf-43cd-bf30-73923daef114/1/hTPvRhFv2dIb-1M-RL3lF4kMJNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:b3:c0:a6:76:d8:2b:50:b0:c7:51:ce:61:b5:0b:a8:42:45:
         9d:fa:95:a4:bb:3b:cf:33:21:14:d0:7e:f4:df:ea:9a:d5:a8:
         60:95:20:85:2b:48:1e:d3:12:88:6d:c2:24:73:a1:5a:ff:15:
         ea:94:96:34:b5:65:22:78:9e:9a:99:36:a9:53:0b:e4:39:38:
         cc:e6:c7:cb:55:95:0d:58:86:3f:cd:9d:30:82:ab:6e:45:2b:
         12:b6:00:24:4a:5b:af:49:81:2c:c9:ee:14:95:b2:75:c3:c1:
         28:17:4f:06:c8:86:08:11:cc:9d:bc:9f:55:15:40:25:2d:ed:
         89:92:2a:ae:d9:10:ec:48:2a:cc:28:d6:82:08:b8:0e:ec:41:
         8e:c4:3e:52:39:b1:84:8c:17:c7:e6:92:9a:38:0c:11:3d:4f:
         fd:41:29:40:39:39:42:95:99:88:2b:5a:04:b1:81:06:12:b7:
         25:60:4d:31:a0:dc:86:8f:af:74:06:d2:cd:fc:d2:cd:43:8c:
         32:fe:fe:66:14:c5:ed:a5:c9:98:43:e2:02:72:ea:09:6f:38:
         31:7a:36:81:48:fc:73:f4:a6:e4:19:7f:b0:6b:8a:81:bb:fa:
         ea:7e:48:34:27:95:f3:cc:b4:77:59:86:d3:92:d7:f2:f9:df:
         01:aa:a5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:24 2025 by rpki-client