Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
File:                     x0xgresM1XaM91b1YrG1zFucGAo.mft (raw, json)
Hash identifier:          OTpM18DSF9L0n5l/PTgZWNWCZmV71lVtVj/rkh5fRag=
Subject key identifier:   48:E8:FC:BA:C0:E6:F6:E0:2B:8F:42:31:19:4E:F9:12:4A:D9:B5:55
Authority key identifier: C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A
Certificate issuer:       /CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
Certificate serial:       0195DFD96536971A75A2399E36086CE1811E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft
Manifest number:          0FF0
Signing time:             Sat 29 Mar 2025 03:02:01 +0000
Manifest this update:     Sat 29 Mar 2025 03:02:01 +0000
Manifest next update:     Sun 30 Mar 2025 03:02:01 +0000
Files and hashes:         1: 1-5xwCbYkw6n3KjUjQqrpHNycjsw.roa (hash: xnmXPX7h0AhX7fCrQfBlW4AC7vVtbQB3crm/g5LQBZ8=)
                          2: 44nY8xo2_DC63JpeIryBFG4szdQ.roa (hash: efIE2v0XKUD30sbluIT7ZKbMSQuZbTeUS/u2oPtbj6o=)
                          3: 7A6Pl3U5uu7pNsrAyeGlxHIf1OU.roa (hash: dnscxtqTmkxtlMB3gelGkG+4KCL2QrOo2QVlxJroGE4=)
                          4: CDi8vSg_fdYRotnSbMRPDSasq6c.roa (hash: 7OEMcqwogdkJNcoA2dzyUv5/KIyWaJVisinKvEvTiik=)
                          5: EtMkTWvI58D-qupiUEl0MY2JiGg.roa (hash: Uz/Ifsb2B9YKip4rb0sqaf9NKH2gpjgn6z0w/NesOiA=)
                          6: KSAJh59TBqB3nBc2swg-HhWD4HU.roa (hash: YuODHnc04OfbOoqG4f2goTKLkOcK+XMOJlxF0H5E6MU=)
                          7: MvwrdGGrm_TBTyOOfZJTIiIeWXw.roa (hash: Czfwbes361OZe+qWA/o1I6nT8cW6PcS0wLg8sWUe8LY=)
                          8: PMMRtrP5Zia_L993q-DTeiA0eMU.roa (hash: EDSJVdah5uVn4vudD7mvIJSeuN7pHg6lTwJI66X4+8U=)
                          9: aXl3woCDTFV8KOUCaI37GD38yqY.roa (hash: j3sOWjoASI5TGptHDgux4OEToltLJUpmg1hcSPVVS80=)
                          10: bJ8s7uGF8zV84bsoruoPN6w5eBc.roa (hash: tSNRGX8MiAjqATg2gnnV+WNgM9CkUv2i/cajQpTVHzQ=)
                          11: dAgwpgiRE2fhaRYA7R_57WtkW8s.roa (hash: 2UcKjGJubVOnE28cs0BJhOQ91W2EUDgFnVS+nrDVbZw=)
                          12: eTvI3fV2l6gXhWfOYGcPCndQ2W4.roa (hash: 4lXzTxLXjqfOX2HuxLyn4Q7cfie0cfVZXxLpWJH4PhY=)
                          13: fyZQsu5bzOst03Al5FJRpvSLsoo.roa (hash: MRRTMhVAXN/buVo3idrb+5O9n9y8Lo0sdRtwg3OeKfA=)
                          14: gY6-jVr97TeobNKsJqEIsFCfx1Q.roa (hash: GWcQFDLCJqx2wbPwhuGTM6ZqJ7XlkbdeE9qf+VAI0SE=)
                          15: jFA2rtAVBw_N1wvAZdDewkHHEJk.roa (hash: z1/fUeHvpi6n58b3xkn2+HMcpX9G3zKAfMExkbdSdio=)
                          16: ndpwXQr0DFZEYAa1c0O-3LbE2d0.roa (hash: vPOmxM9kg1tTyYliwSKFemIpfx1XBUWworUDWjHCOrs=)
                          17: p2vI0_PjYi8mnAQRBZG21gCvT7U.roa (hash: 31okJPnHq4SbgdiG4NvkIaYEEjg54d//5wBJpluxKCw=)
                          18: q13mGARa9r5QMtX1UkBNlLNiezo.roa (hash: EsDIM/kI3A6s/JVMlk0Lts4ZsihLHZ0jyyXXJqa6MdI=)
                          19: sIan_gZSxCDp0J2NEoJ_UhpywTk.roa (hash: nkLucyg7oW5vye0SI2a+c97+4cKSYQceh+g2nNuWyYU=)
                          20: t8HA_uc7gb7j7V6zDu16rLSfmbY.roa (hash: 65eTp9NXdbJh5u5INSJT1dWSnT06TM3hY9aEgJ3l7Ew=)
                          21: uiJCPf3ZYtfC8Ai59XFw_bFzUXs.roa (hash: ToV2fvQi+YWjL/E1w8mL3goa6Xi40QGLi0ZrnQOMuMs=)
                          22: x0xgresM1XaM91b1YrG1zFucGAo.crl (hash: RBmpEUaJsP1PPwYQ1fOIahlqpai1HM7Za+xiwMfZJjM=)
                          23: zvVbccPOezRcenUxgZYT6IshvbM.roa (hash: 012XCVnoNirJiTB9TmAZ50WFMIRiHKAXPZ8XS3U9P3g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d9:65:36:97:1a:75:a2:39:9e:36:08:6c:e1:81:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74c60adeb0cd5768cf756f562b1b5cc5b9c180a
        Validity
            Not Before: Mar 29 03:02:01 2025 GMT
            Not After : Mar 30 03:02:01 2025 GMT
        Subject: CN=48e8fcbac0e6f6e02b8f4231194ef9124ad9b555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0e:0a:61:b9:23:a7:9c:15:2c:df:7d:65:28:
                    44:4e:e6:70:98:e8:3d:64:b2:f1:d0:d3:25:12:5f:
                    e5:85:37:4a:8e:6b:1c:76:8d:20:89:71:85:8a:86:
                    1c:19:6a:4e:8c:c8:8f:12:02:83:c5:8e:ef:37:0d:
                    d8:76:4a:cd:76:bb:85:d8:b4:4a:0f:b5:3f:a4:ea:
                    ad:0c:61:07:36:fa:57:49:f5:e2:ce:18:51:55:5e:
                    66:2f:d5:c9:74:15:53:f1:be:aa:5d:e8:90:7f:d4:
                    ae:ea:16:8c:67:74:01:e4:70:e9:96:27:49:d3:6e:
                    30:1d:0d:90:5b:88:2f:74:34:7d:c2:c1:22:a0:59:
                    3d:84:a3:74:0f:1e:87:0a:ca:cd:cb:7d:71:8c:3c:
                    da:bf:82:cf:fe:db:7c:fa:d5:e0:0b:37:ae:cb:60:
                    b8:bf:0c:96:b3:c0:12:61:c7:68:40:9f:e0:64:db:
                    8e:1b:9c:5f:73:6f:85:a1:48:40:89:56:92:de:53:
                    05:df:3b:0b:36:13:74:66:a3:a3:f0:ca:48:73:c7:
                    d9:df:40:96:26:98:6b:7f:12:09:a6:96:3f:65:1a:
                    88:3a:27:18:a6:75:31:26:f8:08:7d:d4:89:d3:70:
                    84:13:2a:0f:d8:00:04:8a:b7:45:f6:5c:43:aa:66:
                    27:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E8:FC:BA:C0:E6:F6:E0:2B:8F:42:31:19:4E:F9:12:4A:D9:B5:55
            X509v3 Authority Key Identifier:
                keyid:C7:4C:60:AD:EB:0C:D5:76:8C:F7:56:F5:62:B1:B5:CC:5B:9C:18:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x0xgresM1XaM91b1YrG1zFucGAo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/adb65c-f6f7-4495-ba23-885e84e7512e/1/x0xgresM1XaM91b1YrG1zFucGAo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:6e:67:cb:9c:58:e2:92:79:10:1a:64:cf:48:20:b2:6f:5b:
         73:78:3a:cb:90:b3:3a:06:19:6b:be:f8:ab:f6:18:30:56:1f:
         87:50:39:62:4a:5e:02:c7:0c:34:c1:b0:52:e9:2d:63:97:be:
         1a:28:6d:66:19:01:1d:ed:48:34:09:e8:a9:d2:b6:4b:a3:cd:
         77:dc:13:32:00:1f:ef:7a:e6:84:a3:0b:b7:77:4b:84:b0:e8:
         95:87:b3:12:25:b0:2b:6c:f0:02:02:31:72:3d:55:7e:b3:9f:
         fe:df:5a:41:6f:8d:8b:80:bb:14:61:b9:65:d4:4a:07:e8:81:
         7a:37:b8:b9:24:b3:26:bf:b3:af:aa:81:9f:d5:1f:0b:bb:a0:
         46:01:f1:04:94:13:45:6f:a5:25:ac:4d:da:69:5a:db:ea:fd:
         2a:15:49:69:d0:af:ad:91:71:6c:c6:b5:be:f5:2b:b3:fd:f4:
         10:fb:d6:62:56:df:1e:04:f9:4d:02:06:ff:59:3a:6f:48:a0:
         ca:ef:2f:c7:b8:43:c1:fb:3e:2a:5d:5b:c5:13:29:86:75:26:
         30:59:98:a3:52:17:5e:c6:b3:4e:37:a4:d0:61:43:5e:66:ee:
         65:fa:69:c3:0f:2f:69:ca:c1:05:6d:20:97:12:81:ed:43:09:
         9b:cd:c9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----