Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
File:                     Zt93QokBc5J5NSBqKO-_SBI-eHw.mft (raw, json)
Hash identifier:          nFFHr8xlyXL25VvyI0Dz/rybAIva6G2PAJyWiUNmKks=
Subject key identifier:   35:D9:81:0D:9C:E2:65:DF:23:23:32:25:F6:C7:96:7F:45:88:EA:4D
Authority key identifier: 66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C
Certificate issuer:       /CN=66df7742890173927935206a28efbf48123e787c
Certificate serial:       0195E1224517561CA6D9EF22A4A909DD527A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft
Manifest number:          14F0
Signing time:             Sat 29 Mar 2025 09:01:14 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:14 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:14 +0000
Files and hashes:         1: Cd7cyChZhy9mMNvd0Nth-NseLV4.roa (hash: TLZJfbst8zmWkSuiSURO6a7dmcirf5v9QS7cBAmoefs=)
                          2: Fh6CLt6xczOHHemrrM4bMN7qnwo.roa (hash: hvSyiuRPH2Z9ZscYXJ/Gadi12dcqRqXvTeKlVkuzaPk=)
                          3: GO1i9KaUQd9e1KsN5sJzBZLzvMc.roa (hash: UNGsjCQUVlyQbGhoLaa4PzFAKisGXoC7LJXtiHCUs1k=)
                          4: I1XoXbCRQDzU94nytFVYdEpxlsY.roa (hash: x9Wg/IuXvM9pdB1fOvM4EOxkcoralT2x+DA/73JOviQ=)
                          5: MzbBL-KB16aNaaOWCdz_zlq5-Sk.roa (hash: EojRlQEsQxjmCahz4GI2JRZbd+U9Ggw+WBgDfZNnVQ8=)
                          6: Zt93QokBc5J5NSBqKO-_SBI-eHw.crl (hash: pzzfUuyPtPSgpmYjp1p5/qJwDJcSXxVysQYNyJTuQpM=)
                          7: bv4tcwtbryxLyYhV6XTH39AB-vY.roa (hash: Xi6BhRdiZvjQrRH2s9UR2MhITflZG1sNqXTRu0wxscs=)
                          8: fN1BDsW9C5C9Bqke6ry_fePDBlM.roa (hash: 3fdGseWrPkjGKUusjcENuIavE0xvyg7utbXjROm1P3E=)
                          9: mo5JK6v6R0SlbhL9bpJDUSnP2o0.roa (hash: 727Fnu3PPIa8ngtI0/OvrhrO6bIcmHl3XFKfTHPbhNk=)
                          10: pi020TsW0QReka4EU_X98LZY30k.roa (hash: gf5U/BiHkb9/XX1VONoBqkzZ+yxHvJslptQx9dyXOBA=)
                          11: qDEIt49JLY1H1gFAAbmQ8aaWUYI.roa (hash: xIlEw0FiUYRvplwXdUlAk/D6XIj861qLM1Kz3WS/HKs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:45:17:56:1c:a6:d9:ef:22:a4:a9:09:dd:52:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66df7742890173927935206a28efbf48123e787c
        Validity
            Not Before: Mar 29 09:01:14 2025 GMT
            Not After : Mar 30 09:01:14 2025 GMT
        Subject: CN=35d9810d9ce265df23233225f6c7967f4588ea4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b5:13:3e:ea:20:d8:dd:be:2e:a2:36:8b:9c:
                    a4:73:98:03:ef:e9:47:75:5d:ec:be:2b:ce:1d:ad:
                    d1:a9:2f:26:18:12:99:10:ed:75:27:35:29:1c:ba:
                    28:da:76:61:aa:6a:dc:3a:76:47:20:72:12:65:06:
                    5e:06:c6:93:4c:af:35:c5:34:11:ff:04:dc:ba:8b:
                    c9:4f:0b:a7:26:44:e6:ee:08:4f:b3:78:89:85:62:
                    61:37:d1:e0:ca:2c:d6:f4:94:56:6e:8c:62:e9:63:
                    76:08:ef:64:ae:1a:87:9a:20:25:ed:5b:5a:54:b8:
                    e5:76:a0:d2:76:d6:ed:a0:90:16:81:3d:11:f6:61:
                    bc:70:0f:19:de:5d:eb:3c:f4:13:ec:e0:bf:11:1e:
                    36:24:6d:0b:d3:33:1f:1c:30:9b:78:ef:d7:83:3d:
                    0c:bc:f9:d1:a1:5c:64:ea:4e:16:df:59:dc:d0:a2:
                    c7:00:7c:07:d9:45:ae:d4:5c:56:88:ba:8f:52:4f:
                    72:a8:64:8e:2a:91:93:44:2c:84:03:dd:48:9c:4e:
                    2c:a7:88:29:9e:60:7e:57:1a:c5:9b:ea:a7:d1:36:
                    d3:32:b5:f6:fc:2e:65:9e:b6:b6:4d:a9:4a:b0:4e:
                    06:2b:f5:f5:36:89:e1:3e:2b:20:70:20:2b:4c:28:
                    1f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D9:81:0D:9C:E2:65:DF:23:23:32:25:F6:C7:96:7F:45:88:EA:4D
            X509v3 Authority Key Identifier:
                keyid:66:DF:77:42:89:01:73:92:79:35:20:6A:28:EF:BF:48:12:3E:78:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zt93QokBc5J5NSBqKO-_SBI-eHw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e84340-128a-4497-946f-09787f152ade/1/Zt93QokBc5J5NSBqKO-_SBI-eHw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:13:3e:03:45:d8:13:80:5e:9e:24:8f:fa:13:54:b2:b6:87:
         76:81:ee:23:cf:7d:10:3d:98:a4:45:2b:81:01:cd:e2:3d:f1:
         6c:7d:f2:71:66:29:3a:f1:08:eb:cd:2f:bd:cc:a6:6f:fb:3e:
         38:b2:9e:f4:7f:42:32:36:c1:45:56:66:bf:e6:c5:a1:ff:06:
         fc:4f:d6:3d:48:0f:38:0e:55:f0:9f:7f:a8:5b:bc:c8:65:d5:
         09:24:6d:13:57:c9:88:f9:91:ed:b9:9d:e9:9d:db:fc:21:4c:
         43:28:33:b6:2e:04:83:a0:27:17:fc:7f:6e:7e:5a:04:ba:95:
         b3:92:08:f2:53:6b:9e:24:8a:65:10:df:f2:b8:58:29:61:fe:
         b0:6d:a4:ea:c3:4b:6b:61:58:bc:cd:a2:ad:d5:dc:91:9d:6e:
         4a:cc:a2:3c:83:da:b1:8b:ac:a9:f4:74:fb:c2:d1:a3:7f:ce:
         51:6a:31:0b:18:a4:1b:7d:c1:5e:a6:24:b0:40:ae:65:67:e3:
         5e:df:54:d5:a1:4a:ba:0c:a7:58:b3:76:7b:99:b6:4d:07:dc:
         a1:d0:ea:b0:10:f6:8a:b8:07:0c:e5:b3:57:d6:61:06:de:c2:
         50:6f:71:53:c2:26:7c:c2:ea:c8:c5:32:bc:f0:86:e9:f0:4e:
         de:22:d5:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:28 2025 by rpki-client