Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
File:                     r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json)
Hash identifier:          MXf+fQhxf0/0P3JxDX8lLSD0hoik/6UEtb6aqnB92FE=
Subject key identifier:   60:91:36:37:A3:82:44:3E:F7:3E:97:99:01:F7:D0:2C:63:CD:80:8B
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Certificate issuer:       /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial:       0195E1591B609B925A10532805EAC3132054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft
Manifest number:          1152
Signing time:             Sat 29 Mar 2025 10:01:08 +0000
Manifest this update:     Sat 29 Mar 2025 10:01:08 +0000
Manifest next update:     Sun 30 Mar 2025 10:01:08 +0000
Files and hashes:         1: 6Fi2x6-MOtr7a_1fOFW30-_zrig.roa (hash: 2IN+YE3CMZAPD+uK8qRy2OV0W4x3OCpS/TO8CF/76aw=)
                          2: 9dKLMSVNZ94HFqMiXKaUvq-_Wjk.roa (hash: 3TIv5c08KCsDbJFNq+WTb4IZP4ym0IZZX1CdjQGX0PE=)
                          3: AX86DsLSoXFRNkCv2pCL1_EPY5g.roa (hash: GQZE5H1ow5zCrtLramjrChLPwPl7V1YC5vmeyk2QXn0=)
                          4: GNoD4VldON0fRQOsfwgnZbDlm30.roa (hash: blIx8D3DZyU+DHXOsnwJBmGsut7rhQArkG8R7KyjOw4=)
                          5: HZf1jyTRmr2QM_G1wNT6J3F6OmM.roa (hash: oR/Hq9WxPGajOgdVUFWze40RSUPdBlPl+1xVQoSJxOo=)
                          6: MJg7tjZ2YS5zYW2u8iw1g2oqMU0.roa (hash: X+QXFsSzhee86ausU4aiKnbqtRl/bpo3u3VYz3YOas0=)
                          7: Vfz_XI34h0n1ABRWW0I8TbCl2Ks.roa (hash: 5McLJpTXPeaX6NxvYmzQe8oLwKFov9vgW9zM/HLDWFk=)
                          8: Wa5j5jUmUSd1vG30ktnaqL3uHDI.roa (hash: MKz77Ewok0vz5vQRzaJNzC9kTJYYYuPm776x717x2z4=)
                          9: d7zRd6MptHTWJQgyfw6tgdDV_9A.roa (hash: oELlLX+h376OqFFHKdf5s0R3SvC5xRLsvCJ5JL8+PK4=)
                          10: eaT289O4FWfLSNPSCfCVS50JLdA.roa (hash: 6Ydw1aV3kTAxyagbcZrClYDAIJBPqjkvUlwgRk8W+YE=)
                          11: nZaqbX4b0xd3UwU7l5sM7yoGBBo.roa (hash: OWNumqHHHp/8gdqH67NYyJSDu9rO3vPuBbgXU7s9BgM=)
                          12: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (hash: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=)
                          13: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: vNEf7reLFev7XR1cu7pd4OJCiP+VR3nteJnFfEDzJ1g=)
                          14: r4c3fyT5mEicBTcplHGkCHGu1DU.roa (hash: TN1KtYP5BnSUVtiFLbJe3+UWbigxirFk6LMWIHk9G6A=)
                          15: vsZmI73j1l0F5LUFB41ZYaQs_Cs.roa (hash: nZ33GCfbpIYKPXjqivfkgFha5BmKCs/riEjE4yHbJng=)
                          16: xaaOuiTsUCwOo5hhwkfZiBvLcJ8.roa (hash: Iz6qbI3mhpm0/uLd5TTzINoKeImEElZtBrUi0Q8Z2Ek=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:59:1b:60:9b:92:5a:10:53:28:05:ea:c3:13:20:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
        Validity
            Not Before: Mar 29 10:01:08 2025 GMT
            Not After : Mar 30 10:01:08 2025 GMT
        Subject: CN=60913637a382443ef73e979901f7d02c63cd808b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:38:ad:48:e3:f7:bf:aa:9c:21:70:a7:2b:70:
                    60:51:ab:3f:4c:28:77:0d:d9:38:83:c0:50:3d:ed:
                    e5:be:5c:92:bf:a7:34:36:30:9c:f8:86:78:20:f0:
                    03:0f:99:63:d1:ed:09:cb:23:73:ff:5f:67:3a:4c:
                    7d:ae:e1:8f:22:96:3d:6e:a1:5b:3c:36:47:9b:98:
                    f3:bb:e6:a9:9a:0f:c2:d6:d3:6c:6d:f4:17:16:65:
                    56:4b:ea:1d:7b:f6:0d:f1:70:bb:d2:d2:e5:77:28:
                    d9:fd:80:e2:14:67:0c:c0:6f:85:40:a2:35:37:86:
                    93:8f:96:45:aa:27:d3:8d:37:eb:26:51:2b:f9:8f:
                    8d:bb:cb:0a:b9:6b:23:0d:0b:fc:57:5b:88:f4:83:
                    7d:6d:0b:ee:d5:52:d8:e0:a5:45:8e:16:3e:65:9c:
                    f4:fc:66:6b:9c:e4:69:49:2e:f1:f8:05:3b:9d:ea:
                    45:2c:e4:b4:40:56:dc:f7:63:01:86:b3:77:09:a9:
                    eb:00:1b:bf:cd:73:3e:e6:ad:55:1f:7c:b9:fe:22:
                    66:0a:c3:45:56:c7:4d:f9:ae:16:5b:38:09:cd:4f:
                    ca:86:a0:e4:1a:8c:2c:fe:c6:05:39:91:47:45:61:
                    a5:9b:cb:86:fb:00:e9:f7:d2:3b:68:20:27:0d:97:
                    6f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:91:36:37:A3:82:44:3E:F7:3E:97:99:01:F7:D0:2C:63:CD:80:8B
            X509v3 Authority Key Identifier:
                keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:83:45:ec:fb:ac:ad:64:50:62:79:38:96:67:5c:4e:5e:06:
         f7:ff:6b:56:dd:40:ff:5e:bf:b1:83:98:f9:2e:d4:4a:88:d2:
         57:35:49:0c:6e:84:43:e8:51:4e:89:24:6d:55:a0:b9:31:2c:
         54:68:6c:94:ed:34:3e:73:af:77:73:2e:43:86:f5:c0:60:31:
         d7:94:ec:30:3c:a5:3e:b4:81:e1:06:c4:a3:d8:09:f4:57:95:
         51:1b:d1:3a:5c:bb:32:cb:62:31:ea:bb:0b:b5:b4:78:44:02:
         4f:2d:f1:b3:db:02:50:cd:ba:b5:86:04:8a:c3:34:2a:ee:a2:
         4b:bd:7c:8e:7b:ac:40:1d:80:7b:61:fc:18:ef:e6:f0:50:f9:
         c3:e4:f7:da:2a:d7:9e:e2:98:7a:61:51:67:17:6e:21:4a:67:
         ed:66:15:ef:4b:cd:23:9c:59:85:7f:9a:5d:2d:a2:cc:38:db:
         b6:7e:d6:13:a3:f9:84:78:5b:32:c3:bc:e4:9d:34:7b:b9:18:
         3c:fe:92:32:c9:e6:07:64:88:9f:22:1d:cc:ce:d3:61:ff:7b:
         81:2e:7a:17:de:db:bc:5d:07:3a:bf:ec:1c:64:58:0c:ec:83:
         21:32:33:60:c8:09:85:04:7e:2d:6d:8c:f9:20:b2:4b:a5:82:
         74:6c:bd:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 02:03:05 2025 by rpki-client