Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
File:                     IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json)
Hash identifier:          VCb/0qitSl57o3N55P4G4XMBUmIXIPJCMQEtCPDvxRw=
Subject key identifier:   A8:31:54:C8:0C:A2:E9:44:0C:5A:40:CC:B0:2D:16:9D:F9:D9:4C:16
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Certificate issuer:       /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial:       0195E190603028B0379DFDE795A074D54C98
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
Manifest number:          14D1
Signing time:             Sat 29 Mar 2025 11:01:30 +0000
Manifest this update:     Sat 29 Mar 2025 11:01:30 +0000
Manifest next update:     Sun 30 Mar 2025 11:01:30 +0000
Files and hashes:         1: 4Gcae_TgkqRGfUsxPV5DJhfgyWI.roa (hash: paAdpC7qR+39s63v1lKKgqBwKLqwrzz8gisXlWTAmhc=)
                          2: 5E90rYIvCMDpGsIs3-NkraLYuv8.roa (hash: +YypfQeEbAGU3FeS2PhNIE1YSOJOl4GeH2O/62cFjDI=)
                          3: BhPcXGYnux6Htrr0geNPo2dWGdU.roa (hash: PTzfPxeNLPc/h/6D3ZpRk3JrHog5IaXB8oZUZl5iIcI=)
                          4: CV8BH6QqqPLT40ybYR57zHuITz0.roa (hash: wm6WquYdkguvcYg3PAEhLwWwYG/+gCf3lNo5BB9WLJU=)
                          5: HWr5mjO0pCI1Vd4EP8Vsj0SbdDk.roa (hash: +GccY64PF6EoLu4o0b6AELGvN60tAWxw+ayqy5DT/8Y=)
                          6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: F2m7XYwoq66kG3EV4tfGaDYxUi5nBqxxtyufQG0uk8E=)
                          7: IJfxzs2X4cnbV8oPCRMYN2tzTtk.roa (hash: AwHWst2zHFb3hOVHS8cOQNZo/ytidV4zeGK2ViUjB10=)
                          8: Jb3G42rmQZaFwwdUOSNnbExAB1A.roa (hash: 1th08y4K0FUm4z+TLV/vXPdjR8Ng5KU2mnpnZhL8EBQ=)
                          9: MVj7HeSBvInIalrqufIBH8fKRoI.roa (hash: DxnNzMl8A0PYv0GRWFqxaL90B+shZhnUh2ZmOg4PM8E=)
                          10: MewT8wuMGfdVhTwmRM4TncORW08.roa (hash: 6kSDhYAugYSl0WrTiw8QRQya1ahduQViXnb9qN2HSOY=)
                          11: OTrigJ7_aPNFptL9-1H351sJknI.roa (hash: K/oqf4mDjIXLt7R/zbvZCfYf4v02mbWbP2zavJ0lff8=)
                          12: P3f_XNSuhVmZyRxdAPRJ84YNlXA.roa (hash: lo7iZTplZ87A4iJ++BaieabRH6sKtCtDX2XXqRtA5yU=)
                          13: RrbTdF6fRUGHl3RbUer2JdR3V6Q.roa (hash: NjhRh9Ynh+xjxteJ6n1t1coSm8Ha5SNUei3SRsgIj9Y=)
                          14: TjSH3W6imQ9XDjdn4GvtR5L0ThM.roa (hash: oS+XHOTP0lr+oOSwM3Jm1wiP14cg9ppm8BuvyOD/XlM=)
                          15: XT5hbM3hN0uWeQo78-4wXcwwUT0.roa (hash: SvbDE43Viqioo219I0DAuxFJK4VGXf3/3TDJAtfLyTs=)
                          16: eWk2WvIGvufYh6GSD7WPRpEjVmk.roa (hash: 861KbddJZFU31BhF9p6+lRipwRX0U3jrOqqTaMuNKdU=)
                          17: ejzl0ofmzawIFodS3w9DT80Q_Sc.roa (hash: pqNkIe/f5LGm6clq4rxSpp7oiX85pDpRj/cIU4SqPjI=)
                          18: fWnPtpRNC8zgbKiXYtNqxhdRL6I.roa (hash: m/6fVl/bjmqyGI5dn716lOlRlKQjcsdkUb01DH+aLtU=)
                          19: js3FolXTNbl9FECoYSqnW-MLw0A.roa (hash: l+vnWLzEj6U/PJzE4BCRuD1dAjg4yzYHTVAeiPyP5AQ=)
                          20: w_oxaJYBSRv6YGnAjIebPG-6n6g.roa (hash: sU92Ri+ayKRIGTYAdjVvh3Xj8xCFrEDz6vd3EC74pJ0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:90:60:30:28:b0:37:9d:fd:e7:95:a0:74:d5:4c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
        Validity
            Not Before: Mar 29 11:01:30 2025 GMT
            Not After : Mar 30 11:01:30 2025 GMT
        Subject: CN=a83154c80ca2e9440c5a40ccb02d169df9d94c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c5:05:d0:5b:04:1e:d7:67:46:54:7e:77:0d:
                    3c:2d:14:be:25:80:14:66:28:1c:b3:68:49:16:87:
                    22:88:7a:40:de:41:58:05:e6:b3:d6:ee:26:74:8a:
                    94:9b:09:4a:1d:44:36:d4:57:a4:56:3d:9d:b4:bd:
                    09:6d:df:e7:7a:a4:6b:bc:3e:2f:52:5f:7c:4f:51:
                    b8:a9:85:f1:39:79:13:0b:e5:ce:5a:9f:7c:78:67:
                    74:df:ab:83:9e:7c:c7:45:57:08:73:20:18:a7:a3:
                    d6:58:d1:31:05:7c:ea:ab:c6:0f:71:77:eb:5f:37:
                    0c:4b:62:d2:d3:9e:73:38:e3:4c:22:b6:3c:3b:bf:
                    cb:4e:61:0a:bc:95:35:e1:e9:15:a0:6a:57:5a:b2:
                    fa:3d:b9:2f:61:dc:33:07:2c:af:99:96:f0:6f:31:
                    7e:0a:ae:f8:48:66:c9:55:99:cc:fc:09:b0:a1:e2:
                    6c:74:d9:62:4b:c5:16:63:74:07:3e:0a:f7:de:f9:
                    a9:86:7e:eb:71:b3:10:67:6b:a5:ae:6d:7e:50:86:
                    b9:ca:45:37:67:ef:96:3e:19:1d:cb:74:e4:3c:bf:
                    a0:b7:d4:9a:0f:41:68:8b:34:37:94:84:9c:62:51:
                    e8:84:f4:17:f2:4c:4d:a3:15:11:5d:2a:45:f0:7b:
                    15:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:31:54:C8:0C:A2:E9:44:0C:5A:40:CC:B0:2D:16:9D:F9:D9:4C:16
            X509v3 Authority Key Identifier:
                keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:5b:69:33:e2:c5:d1:f4:a8:cb:77:9c:47:0e:33:77:38:95:
         99:fa:e0:b9:58:dd:7e:75:2d:f0:22:fe:b1:39:8c:73:bb:ba:
         1e:3d:37:5c:ed:3e:9c:80:b3:c9:62:1a:64:c0:f7:34:19:dd:
         0c:66:00:da:7e:bc:db:dc:2c:e4:2c:f5:d8:1b:f7:6b:d5:9a:
         01:9a:8d:0e:fe:e5:af:e7:53:9f:44:e1:87:4d:5a:fd:4c:f6:
         6e:9b:a3:2f:c1:fb:bd:c4:9a:7c:a2:31:aa:d9:4b:cd:09:90:
         fb:58:9f:5c:57:e1:db:91:b8:13:f2:34:4c:92:86:a7:9a:15:
         c2:3d:46:f1:c6:38:0c:86:0a:d5:ce:5b:d2:64:38:b2:75:35:
         f2:a1:c7:73:4d:b3:c6:8c:36:9a:0b:7f:3a:88:8b:93:0d:54:
         72:2b:3c:cf:7b:30:73:04:cc:0a:4b:8d:4f:a4:f9:87:b9:22:
         f6:f0:e3:23:90:d4:0a:3f:a3:2e:a6:6b:0a:20:ca:03:f7:a1:
         37:b7:34:dd:1c:2d:02:1d:67:91:02:8b:43:e1:f9:cb:82:8c:
         53:59:6e:2f:7f:6f:8a:84:48:8a:36:b0:bb:c5:56:7e:53:cf:
         fc:21:dd:81:7e:0e:0a:64:f4:aa:f0:94:02:f3:4f:1a:8b:21:
         cc:3f:eb:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:01:37 2025 by rpki-client