Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.mft
File:                     xfn1DKHDSjvmEASNE4rzwHU6-Ss.mft (raw, json)
Hash identifier:          VILP7VNw5rGlGgneh94ih/ezHe51w2P2ntQPvi6NBnE=
Subject key identifier:   8D:7C:2D:1D:88:8C:29:EE:1E:1B:2A:99:2B:DF:2E:A3:64:F5:4F:AB
Authority key identifier: C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B
Certificate issuer:       /CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
Certificate serial:       0195C831024B9AD1F8B88A40F98C651D572F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.mft
Manifest number:          019B
Signing time:             Mon 24 Mar 2025 12:46:49 +0000
Manifest this update:     Mon 24 Mar 2025 12:46:49 +0000
Manifest next update:     Tue 25 Mar 2025 12:46:49 +0000
Files and hashes:         1: 0gqOLahIac07PQVDnFWbJcOlPdc.roa (hash: glrlapAI8gX7iWCU0O/IxnYAJj4C1toO9Id5uLc/U3w=)
                          2: 1ACEbeq2rd8EaluDyq5TiKBzLd4.roa (hash: 0MZ8iyeZ2F1hvm/MT5NrRfSjSe4DRdBnocBwHtwPbAA=)
                          3: 81UWy7CI5ZKrKPrinZ4dCy4oDH0.roa (hash: ks5dCLWRCuG/q4/CuX/57M7GUqb91SMdC9TqzwRWgFs=)
                          4: 9dzDheHmmU8Ey_Lj1w6QrTJ49FU.roa (hash: YZCj69eqJcleaBMkvI3qN0C3tr2vEozu0byWIMOGkgY=)
                          5: PED9HaCWia2wrK32Un3AaSHk_N8.roa (hash: KfiJSR9ZIloBoCYeloV3Ve4aBC2We63FbK6T02p4WZM=)
                          6: Q1WtSLJNWy_RGq3LRqSVD2p5Wzo.roa (hash: bzXxmYBf76M9JB8Kc6llvpRoGX6FsougBswiTSpsOSk=)
                          7: RvnF3u3svoHRV8SNhG_l6br-xl4.roa (hash: mq2pK34jlcKmhTqJ1SoRhYmGNpGWBkiLJoYiS6B4rzo=)
                          8: Zi1M-O6l4el-IxCM4oKdf5xBtG4.roa (hash: g85CDhq+awlTVsFsnNkEmG8oMLCx0EVZdZFgtGbWGYM=)
                          9: fDAepuG-siP4wj6xz3YHqvZVtgE.roa (hash: kz8I0SPLd6fzY73810DAiTxd94trkw87myl+xce6u4Q=)
                          10: wWo0aBlzyMmpr08GkT2ziEYMt9o.roa (hash: 5D4UpAVeHt4+2F6YBgHZtPi8koY71G0qlgRW+9Wnm80=)
                          11: xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl (hash: CyTJPkbecbJz7gKgdWcsIm1YNdvWUQ6+CjIPNi0l4AY=)
                          12: y7ZtJRa8RDYNRTKwhM2DCy3Hq9A.roa (hash: EJ3sjLC5iVavJI1Ic5B4ozrCt9NF5TOm6KzUNwUCcpI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:c8:31:02:4b:9a:d1:f8:b8:8a:40:f9:8c:65:1d:57:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c5f9f50ca1c34a3be610048d138af3c0753af92b
        Validity
            Not Before: Mar 24 12:46:49 2025 GMT
            Not After : Mar 25 12:46:49 2025 GMT
        Subject: CN=8d7c2d1d888c29ee1e1b2a992bdf2ea364f54fab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b3:6a:6f:80:c0:65:06:0c:12:d0:bf:f9:7b:
                    e2:e8:58:24:66:99:d6:82:d4:7f:f6:d5:f8:3c:30:
                    93:47:8d:a3:8e:69:99:62:f6:31:f8:20:a0:cc:88:
                    6f:b1:9e:dd:52:d5:96:86:1e:30:35:fa:a9:80:2a:
                    04:fe:27:24:fe:7b:43:5f:75:b6:69:46:0f:4d:50:
                    c1:c7:9d:68:f1:4b:6e:a9:9c:c0:11:ca:65:c0:c6:
                    a7:8e:9e:a5:ba:1b:b2:37:05:4b:0f:eb:61:90:8a:
                    1b:fd:22:e2:23:8e:8d:dc:b4:c7:14:e0:12:c0:04:
                    d2:95:81:ac:ce:8f:e6:f0:ea:71:6d:8a:44:33:90:
                    94:b6:1a:34:85:d4:b2:70:10:76:d9:3c:f2:93:29:
                    a1:48:05:91:33:69:71:97:eb:2e:15:21:46:a2:5c:
                    6f:cd:7e:33:fd:80:73:a5:90:10:09:e0:d3:c2:f3:
                    b6:b3:e6:bd:d9:b5:ff:ee:35:8a:00:90:60:24:17:
                    e4:76:2f:f4:53:a6:eb:86:a9:a1:3f:c7:fe:c1:05:
                    46:e7:a1:92:c5:10:9a:e9:57:21:00:cc:46:7f:61:
                    36:e4:d0:17:0e:68:4a:14:88:8a:33:6a:89:18:8d:
                    fb:31:66:a7:24:7f:a7:f9:62:61:2b:20:de:10:27:
                    88:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:7C:2D:1D:88:8C:29:EE:1E:1B:2A:99:2B:DF:2E:A3:64:F5:4F:AB
            X509v3 Authority Key Identifier:
                keyid:C5:F9:F5:0C:A1:C3:4A:3B:E6:10:04:8D:13:8A:F3:C0:75:3A:F9:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xfn1DKHDSjvmEASNE4rzwHU6-Ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/f2196a-389e-4cce-8171-90ad0cadff79/1/xfn1DKHDSjvmEASNE4rzwHU6-Ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:5a:ad:ed:19:7e:b5:c8:14:17:9c:b9:8a:38:f3:2e:d9:88:
         af:61:7f:2b:e2:e5:0d:d4:cb:1e:7f:3c:ba:8c:ee:fc:2b:b8:
         9b:00:79:5d:e3:71:ff:f8:37:07:72:dc:57:b5:d0:a0:fc:81:
         4c:ca:3b:1e:1a:7f:59:a7:eb:b8:bd:4e:b5:00:d2:e7:ab:b8:
         17:79:36:af:de:49:47:0f:83:82:ef:c2:dc:0d:4e:46:94:55:
         aa:db:0d:15:43:c4:e7:c5:9b:f5:8c:7b:81:fb:88:68:c4:1a:
         b1:84:90:22:a9:37:a7:64:88:1f:d3:b0:c6:3f:83:18:77:1c:
         51:bb:9a:5d:03:65:4b:7d:0b:c3:4e:12:ab:a4:0b:45:74:9e:
         e9:aa:af:f6:0a:70:b6:03:40:35:da:9b:99:cf:00:7d:fc:22:
         4a:84:16:01:3c:3e:f6:57:f1:66:e4:4b:a1:e1:60:bd:36:7a:
         4f:a4:ef:d4:b5:c5:24:72:d2:bc:e2:01:6c:e0:30:b8:f4:1e:
         59:2f:f4:73:1b:2a:e5:3d:98:f3:61:88:5b:a9:c7:b1:59:11:
         22:b0:37:d5:b8:a3:70:82:c3:3b:78:9d:fc:2e:bb:47:ee:2e:
         26:ad:e7:2f:af:c1:7a:b9:45:50:c5:f8:72:27:45:64:8a:d2:
         78:9a:d2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 07:18:00 2025 by rpki-client