Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft
File:                     520NqzR6OOK4e1oiovfJ4hwYybw.mft (raw, json)
Hash identifier:          mxK21cDfR7X7s5RTc6QJPfr5dpF0vkb8jNzGIV0YJPI=
Subject key identifier:   B8:2A:32:9F:42:F6:75:26:39:E3:26:60:D0:64:8D:BB:86:2F:09:D2
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Certificate issuer:       /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial:       0195DFD8F73217013A1FCB4154CBE0BD84DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft
Manifest number:          0FAC
Signing time:             Sat 29 Mar 2025 03:01:32 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:32 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:32 +0000
Files and hashes:         1: 1-i_ESwYWDKjvxe-cLQFb33q5Qu0.roa (hash: MWN71QN/v297mIABIQi0BIqexEx6vQv3LxWHulQ1lh0=)
                          2: 3uMGCa1hGu4z3o3-_G7z4ipL-iU.roa (hash: W9UTR4UDUFmqfh0USMFmsobpW7zQlT5fd2b07I+b238=)
                          3: 520NqzR6OOK4e1oiovfJ4hwYybw.crl (hash: IFvuTwGPTQxlVdoCx8RuF+3bpHQnv5qBJrjz6Z37J5A=)
                          4: 53Cd6ksm6jJ9RlO5imUtuWj1rJA.roa (hash: cQll3lCbJxJtoxzsBZdQMm8ZJ1gmBBCp3yO2flYfKKU=)
                          5: 5aybWk2Ky5dF88Dl5BHsEFM1SO0.roa (hash: H+JwBN0SZWGViTYdzpWvA1lltG+ihuV8ot5mKPyc2Ag=)
                          6: D51k8Yufzem8ogKjVaG-BE3-N9Q.roa (hash: LfZnqpQQPapIc1GbVrcmd90U2aDXCgwED1y7JLo14nI=)
                          7: EEzCfGegHPEpdqTqvMRMlcFre1Y.roa (hash: uwoju1vAFdOs3H0Q+w/qT7aEQBJpMP98DiaXonyIQ9M=)
                          8: EQAhdlSS1FIFJlau-mazb3tbQD8.roa (hash: EYIWh35VYrIjFevk0wSjam09x/CTgAsspbJddnJMeDU=)
                          9: QCPaGZ8bi2Da50RQ4k8ya1w0dq4.roa (hash: UeTuehE3XWxqnHJAwNv7xL7hPz4xW2vyEJKj+BsbTow=)
                          10: aAu5S5IbLCTcHF2sjNSq_YvIkRs.roa (hash: Ofs8Vq4O2KmWTmDnq5aKJmZojKw/IVecQ8WTuC45ixk=)
                          11: fjY_g_wwgFPVt57q0tJYGzzoSDw.roa (hash: qq4Ldl54/taiWut/8vwq9PH71gezdeLMf1VMPmsHUe8=)
                          12: pw1_qD5J6o76enPdGNTr_4Viub8.roa (hash: L6pLEncIISYEMGBKzu7DbyUXVYEOgT4kfh4modTEATA=)
                          13: qigZWtFurHaD054OcaOqq49am_w.roa (hash: Sa19eTl0ldE9k7oxfeYcou5g3EZnF3X8bF0Hbur3zdE=)
                          14: tKmEC4MB5hqVQbFF_5qlwwlDujU.roa (hash: DWWPvUtVR9Z8569/gJySYMoNxwD1GjHbMP8gxFtXEzs=)
                          15: tRNXUlx68rKP9UOE-hhExB1kws8.roa (hash: +Hd3tIKng2pbogIxn1dcX/j1LNU33NvuDwSbS4tdpEA=)
                          16: ve2cUb4I36o88cUncaHeOHK5tGk.roa (hash: 6gTupRG97QR/JQvN8ay2tdbOI4Q3EMkpnACGQxjxniI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d8:f7:32:17:01:3a:1f:cb:41:54:cb:e0:bd:84:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
        Validity
            Not Before: Mar 29 03:01:32 2025 GMT
            Not After : Mar 30 03:01:32 2025 GMT
        Subject: CN=b82a329f42f6752639e32660d0648dbb862f09d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:85:2b:60:e4:63:9c:47:d3:de:27:86:0e:fd:
                    8d:5c:b8:6a:d1:c4:3c:20:a7:5a:21:87:8e:ea:ab:
                    63:65:a4:d3:c9:eb:eb:61:30:e7:fe:9c:18:f4:9b:
                    47:f8:73:e7:4b:8e:0a:31:27:cc:7e:c2:bb:7b:a9:
                    5f:40:d1:ff:65:37:2c:da:1e:22:fa:30:83:0e:4a:
                    eb:6d:63:f8:58:4b:8a:0a:77:06:3f:eb:f5:e5:1e:
                    22:b1:19:12:88:78:93:b5:d7:ea:34:41:cb:2e:c0:
                    da:cf:78:a8:df:e8:68:5c:c0:8a:70:d3:0d:92:a0:
                    60:1f:00:73:44:f5:7b:3c:f8:c1:bd:9b:a6:23:77:
                    de:bc:bf:59:32:e8:da:fc:48:bb:c1:4c:9e:e0:ba:
                    5f:1b:2a:79:4a:bf:24:c9:36:e2:11:7e:54:0c:34:
                    d1:92:e3:31:f7:37:df:1d:a2:4e:77:84:c4:9a:38:
                    1d:06:9c:23:da:bb:c3:d4:c0:ac:e9:d8:03:48:0f:
                    4c:f0:8d:d9:20:3d:5b:39:7b:9c:fa:c1:0d:fc:8c:
                    58:33:6a:ca:92:cf:75:4a:14:12:7d:e8:9c:07:0a:
                    94:57:e1:11:71:98:6f:c6:20:a4:96:f0:f4:42:03:
                    2a:e6:2d:fc:e6:56:be:52:6c:d7:8c:89:d6:57:98:
                    3c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:2A:32:9F:42:F6:75:26:39:E3:26:60:D0:64:8D:BB:86:2F:09:D2
            X509v3 Authority Key Identifier:
                keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:60:39:3a:18:08:e8:83:b2:da:0b:a3:72:3a:bf:0b:03:e2:
         5e:30:16:55:19:bb:6a:c5:a2:1e:e4:80:0f:71:92:06:28:a0:
         93:95:7a:c1:01:b9:48:58:c5:7d:87:e6:f5:9b:e2:e9:96:6c:
         36:5d:d2:28:58:6e:81:62:90:80:d7:6a:a5:37:bc:06:30:48:
         86:1c:29:33:6f:e9:78:b2:de:7a:53:c7:be:b6:28:97:6a:ee:
         d1:5f:05:e9:10:ef:b6:93:ee:31:05:29:da:e4:ce:bc:23:03:
         4d:e3:4f:6c:1b:a5:b0:b9:b2:54:62:0b:61:d6:41:a0:d1:fa:
         8e:df:50:4d:5d:2b:db:17:0b:6d:a8:1e:28:52:c6:ba:14:57:
         60:0e:1d:40:af:d8:5c:b9:44:e3:8c:12:b7:09:e0:96:14:2e:
         ad:46:da:9f:c0:1b:e3:f8:45:26:33:48:88:46:58:15:57:0f:
         2c:fe:50:91:fd:31:ec:c9:9d:96:c8:c2:23:bd:f2:8e:cd:b7:
         2b:af:62:84:33:95:aa:b5:f0:19:57:77:8d:69:b7:84:64:65:
         99:a0:e5:2f:41:5a:dd:ac:76:43:8f:eb:96:c9:88:94:e2:35:
         de:12:09:e0:e8:16:2f:ba:cc:f7:f8:90:b8:fb:14:f2:41:11:
         27:bb:be:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:17:01 2025 by rpki-client