Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
File:                     1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json)
Hash identifier:          Udl9wlPNg2vObiQwrnXiyCGLwQO3r3SzutwqW6h8VsM=
Subject key identifier:   DD:A2:62:0A:EF:4D:62:14:E1:BB:E1:1A:9A:48:99:C0:9A:DB:12:28
Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7
Certificate issuer:       /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
Certificate serial:       0195E12230A7296F50F31E712821E11D0542
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft
Manifest number:          1548
Signing time:             Sat 29 Mar 2025 09:01:08 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:08 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:08 +0000
Files and hashes:         1: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: W+qzVh372CH+B34W9Gad8rLov/39Sj9f/eGyuT5NBYY=)
                          2: 97T1FKP4AB1wFygDf_IjY6gh_W0.roa (hash: b+uL1I+CF8JWEeaj5CSinTGLvmB9uwh7dpcntKLQtgU=)
                          3: DF88ZnxNDnDdL7m_tpQtBOrCA5c.roa (hash: i5iFKm2PhqfkKwRSQfA3liCU+8QARl8+rKyoXe3x8yQ=)
                          4: HoplqEj-n_AFspE4Wkk6llxhUjs.roa (hash: XwYiYjxVBKz7NNA9iHsZMV69zxlIHiKWQZD6RKH52y0=)
                          5: O4g-iW52UftISVHkW3-yPro5wkE.roa (hash: W/Q5kD3b3VDNOCdF88ASTOOY5t63U9RDRHLUOjnN+6g=)
                          6: eIIy3gr4iW31K7Z0TDyYfiPIC20.roa (hash: 1OhLz2GkEhqW74cgO0W31kCn0nMoyh5rygPNaedp7uk=)
                          7: hiw9x9M7apKuRetj8qEUAbmQtf0.roa (hash: JkGusM+dPuvy9HsNZt/bKA3hTyV4JBTt3zO2F1piB10=)
                          8: i0EkDiLWxZt-jEsL0cMNpe5XN_g.roa (hash: G7FDEuJ7pS++rTMrLx6g2e+BM36bD3Jhu4w4OIPcRCo=)
                          9: l0jj4z5jSnGrVq6SfJX7MgdMKJY.roa (hash: zr6mJ+QGATGBFggvtVLR1aKIxD8AyeYJoWqZ+pfFF7g=)
                          10: pkSBtZa2n54OQ9klkA4JFzfD7qQ.roa (hash: 2zQqYCNz+ENrqctrE57v3LCQOLHRix/k/wGkfpVsZTY=)
                          11: r_oI4FkYT4UMo61-qMxf7RT56as.roa (hash: QHRHaQp7G3TlD/hE646hPxyl+I0vmCCHbjHcyZSCcBU=)
                          12: tjmex91I7dJnD023VIWq1boNPLk.roa (hash: d7b90ryBvfYcu1eHmFplVZMJtAYKyEN3QoPLIOWafyY=)
                          13: ubCtS1VfMlpqc29JR5yJamthyao.roa (hash: UKhp7stItN8bt5SS2ldJQEedsCZck6Jd4Nur78oK3eA=)
                          14: vRM-SZQZ9WJ0XQQ278XKE1t0Eew.roa (hash: ox+5CMMHJyI+TwmBaJfMwL8IhAyocB1xWi95CBSAXM0=)
                          15: y74zxfc3T7TxFAzKOoJ3K2ImCgQ.roa (hash: 9cXqO6+RkqL3vFTAJ96TMt5j8uyMT6hOmvxxHIxVvmk=)
                          16: yYg3T8Ah1yuxHz6D5ehi7z823QI.roa (hash: BG6boV1lZkhAvIrJNBVNIFX81voSjiHSdy+yfJw4k5k=)
                          17: zh3tYkF9W9B32ZhFXjZlqURTi8w.roa (hash: LuGe5JNnsMIyvni5W1sQYvdwd6Mx268nNPMzIZyt2nI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:30:a7:29:6f:50:f3:1e:71:28:21:e1:1d:05:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7
        Validity
            Not Before: Mar 29 09:01:08 2025 GMT
            Not After : Mar 30 09:01:08 2025 GMT
        Subject: CN=dda2620aef4d6214e1bbe11a9a4899c09adb1228
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9c:83:70:b8:05:62:e2:77:f7:f9:e5:7e:96:
                    bc:99:3f:b0:e9:10:7b:8a:62:1c:ef:a3:c6:f0:42:
                    c9:9d:8f:59:0a:13:5e:c8:5b:c7:9e:48:ae:92:dc:
                    9a:bc:5a:6d:e7:93:63:2a:46:95:5c:63:5c:ec:48:
                    21:c8:23:94:3e:da:b8:b1:01:5a:86:68:1e:6b:f2:
                    c3:00:cb:ae:01:b2:36:e0:c5:81:59:9e:ff:bd:1e:
                    ed:1b:8b:6f:0d:18:a8:7e:10:90:ae:45:76:ec:ef:
                    b6:49:f3:84:46:90:9b:b0:d4:ea:4c:47:23:95:5a:
                    ef:20:19:3f:45:91:9c:fb:85:49:df:c4:a3:7e:76:
                    63:d1:ce:33:32:aa:ac:27:f4:f7:da:ae:4d:df:f6:
                    d6:e1:18:97:b1:bf:fe:b9:91:05:bf:77:f1:c1:0f:
                    19:ee:21:35:bf:61:7b:6d:ec:b3:cf:4e:4c:7e:a3:
                    76:85:fc:61:f6:18:e6:ac:4a:21:c0:62:0a:4c:bb:
                    57:4a:5a:50:7b:8b:00:ad:43:3d:d2:b8:2e:d6:66:
                    e2:3a:10:31:aa:d7:fa:90:23:3f:d2:52:49:eb:e4:
                    06:7a:3c:8e:99:88:39:e0:06:6c:2f:62:3b:ba:30:
                    63:7a:b9:54:6f:cc:85:92:e8:ed:4a:49:39:f7:ee:
                    ac:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:A2:62:0A:EF:4D:62:14:E1:BB:E1:1A:9A:48:99:C0:9A:DB:12:28
            X509v3 Authority Key Identifier:
                keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:10:f7:c3:49:ac:f3:57:62:f5:9a:7f:87:56:38:d2:aa:3b:
         65:97:9e:e2:df:0d:c7:42:0d:fe:48:ed:0a:08:65:59:8b:75:
         d3:9a:ba:c5:48:55:1c:a1:87:e2:e8:4e:15:20:53:54:cb:f6:
         50:2f:a7:1f:a2:78:d2:7d:c6:2b:23:76:c8:ce:f1:89:d2:bc:
         1f:4b:0f:a9:32:ba:88:aa:02:8d:69:a0:0b:8f:bb:9f:39:aa:
         e4:7b:ee:25:23:ca:1c:e0:17:e3:a2:05:80:48:7a:4c:95:1a:
         72:0d:dc:f1:35:fe:87:c9:2c:06:85:2a:4c:4b:98:93:a4:b0:
         49:2f:7c:c8:56:1e:cf:57:28:b9:20:3a:b1:d1:4f:34:57:49:
         c8:67:57:56:c6:a2:bb:1f:12:fb:a2:7e:3b:f2:d5:46:53:b0:
         8a:89:d3:b8:9a:e6:e3:d5:78:14:de:c9:55:61:73:67:24:c6:
         87:df:c2:8a:55:a2:36:48:de:65:b4:f5:62:07:e9:d2:81:c0:
         1d:b4:29:32:de:28:c3:12:1f:d6:f4:78:ad:c3:8b:18:ca:c7:
         32:e7:e9:94:c1:09:72:0b:68:20:cc:63:7d:2d:e2:14:26:dc:
         c8:13:53:b7:0a:49:f5:ef:3c:a1:e4:9e:be:c1:4f:69:37:ab:
         be:c2:06:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:21 2025 by rpki-client