Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.mft
File:                     O37JQjv5DIHSLZSEHBA1elQmA3k.mft (raw, json)
Hash identifier:          iNul32N65+hHx3ChxxF/oEnL1RAHMkyZSeFDM+jBLRI=
Subject key identifier:   33:69:60:D1:49:D3:E7:4B:81:CC:3C:9D:17:A5:15:B4:B4:B7:41:BE
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Certificate issuer:       /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial:       01942607A9EF1894D7DA7584FABE2A73DE5E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.mft
Manifest number:          141F
Signing time:             Thu 02 Jan 2025 08:00:23 +0000
Manifest this update:     Thu 02 Jan 2025 08:00:23 +0000
Manifest next update:     Fri 03 Jan 2025 08:00:23 +0000
Files and hashes:         1: 6oC7BPAJB50zVhhQ4YjXtqdkh7A.roa (hash: V4zYEUBUGfbI4GhgnwAliu8xc4TyLS0VcFDxdnFIvAU=)
                          2: 8CJTB-IKSZF8T5Va0bDSXYJc6D0.roa (hash: h0KakNFHzb78pFgUuI2HB7ICju6Zjn7/ZXC5PeL8MGk=)
                          3: BvYg1Rw1naLj7xCawEsunrYJ9Yo.roa (hash: mlbIFt2LR7qiGiojOe33Tf8XXrK/e/dy/cSfgHpJWdc=)
                          4: CPFbbnVbV85Q54xZdljo6XSscBc.roa (hash: 9m4EjkM8HxLNwWVcKoNJNb1OoGMTUc8L8Zc7clqArU0=)
                          5: CXBfgaVQOuc9lYIVbg7pKmqkHOE.roa (hash: I7yYdZV2obGkD4dveVQZgVRsyHOix63g5dcUBAGhDSM=)
                          6: DE6NvjIaKiNR10OMEBeCu3jt1Bw.roa (hash: smrMDrQgJcmO0ZwXYsMS5T0WgXCSpbF79U5ycRrSPQA=)
                          7: GVxxzY32CZDJ4RZSxMJUa26pyh4.roa (hash: 5qpDAsfwGMBMiRRrlvVSRSqixstuQzqZtX+LEsv0ssQ=)
                          8: IflXIVJVKHjj3FbsU-x2caF1WgQ.roa (hash: KdoLv4ZPsQOs32tCZoWq/WwCeMDERRV/wK5GBJjjljQ=)
                          9: O37JQjv5DIHSLZSEHBA1elQmA3k.crl (hash: iUi3cHNJRi8M67xspMSVl4RTKUJNfofMa24cxUIhqJw=)
                          10: PYMUNxMRt_gy4UkRhPg6f4T0-yw.roa (hash: KeExTexY+gfbtzCQln+acsSqwSPTDLTEHOpK/x95ZWU=)
                          11: PxJa2tLKMemadUnIT_enJ3heFMo.roa (hash: iO/vWX3vYIUGsDiilxMNRfU/CwDM226gbEOalnDQuL4=)
                          12: ZlPXqJgxLKwatFq0G6tN4S6CPs4.roa (hash: 1SKtR6Bju4Rwt9GRWJ54tTmwyfl8XIKK/PwUHAsdONI=)
                          13: cE8hYNa0TFLNY1Ym0oL2KDXDktM.roa (hash: anaR+bWX/5Ci73p0d/3eX3oQ6oKxONzHWDCgvHVC8TE=)
                          14: uuab1oZ4k7SP7x3epsInWuBmPbY.roa (hash: troS6OMAWt3Al9WOUZBe8vBvx/7s8GwIKdw3q5+6Qog=)
                          15: vlLW238gD7BD2FLjrvSrmN8Cjpk.roa (hash: k23K1+9PGzaqqDaT5B4u7bkCw8Bd/9c5oKK/JlXEk8o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:26:07:a9:ef:18:94:d7:da:75:84:fa:be:2a:73:de:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
        Validity
            Not Before: Jan  2 08:00:23 2025 GMT
            Not After : Jan  3 08:00:23 2025 GMT
        Subject: CN=336960d149d3e74b81cc3c9d17a515b4b4b741be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c9:2c:17:26:e5:f4:e1:aa:99:f7:66:52:ad:
                    e8:0f:b0:82:40:25:f6:9e:7c:76:40:21:03:a5:dd:
                    0f:0c:c0:3b:ca:5a:02:04:10:5d:ba:e2:71:38:ba:
                    57:99:c3:9f:ae:dc:c9:48:01:51:7a:8a:4a:5a:3a:
                    e9:a7:f2:63:98:06:2c:15:56:3a:66:dd:a6:96:4a:
                    13:a1:49:6d:c1:0c:65:13:a4:66:b8:35:6f:74:fc:
                    c3:81:14:d0:be:6a:6b:14:45:d6:4e:55:52:6f:50:
                    87:8e:7c:c4:ba:31:74:1d:7d:d3:58:81:bd:ed:27:
                    c7:e1:99:83:91:8a:7e:cb:92:b9:3d:fb:2c:11:8d:
                    5d:86:26:82:0b:f0:66:48:09:73:49:f0:9c:87:12:
                    7a:a8:0d:92:ab:86:f1:fb:d9:c8:e6:e0:11:da:b7:
                    de:b9:9b:9b:e9:b7:96:d1:4e:dd:80:94:60:09:fb:
                    aa:84:95:3b:e6:bc:1c:6f:87:9e:5c:63:25:1b:c0:
                    2d:55:be:2a:c5:37:88:7e:d9:04:8a:30:72:be:85:
                    c0:4a:c8:3f:3a:f8:45:75:74:32:a8:65:b5:ef:37:
                    ab:a9:da:2f:c5:33:cb:73:9c:16:3b:79:52:44:2c:
                    53:74:1d:04:3f:2d:47:41:f4:7a:6d:78:52:fe:36:
                    9c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:69:60:D1:49:D3:E7:4B:81:CC:3C:9D:17:A5:15:B4:B4:B7:41:BE
            X509v3 Authority Key Identifier:
                keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:c4:bc:a7:71:1e:71:e0:24:4d:81:91:2d:ba:fb:93:48:37:
         bf:24:79:08:7f:51:c2:b0:c6:7f:74:da:b7:80:80:c9:ec:25:
         6a:c0:ae:b6:76:d3:f2:2f:76:86:e1:12:46:36:b2:30:80:51:
         cc:04:98:d2:32:bf:32:fc:c0:a9:07:a4:fe:e1:d7:1f:8e:6c:
         a7:b0:74:86:1b:a9:04:97:98:78:2b:09:34:9a:40:84:69:d5:
         cd:8b:24:68:f8:ec:30:dd:78:0e:d6:21:23:42:a1:1e:4a:2c:
         8a:09:81:a6:37:ea:83:97:3c:19:db:1c:3d:1f:8e:4f:9c:37:
         70:bc:f3:f9:f3:79:e4:3f:f3:ac:fb:19:a0:8d:cf:90:c5:2f:
         ea:fb:ed:ef:73:35:94:3d:5b:27:22:d5:4c:86:65:e6:17:36:
         7b:eb:9c:7a:06:22:1d:4f:7b:e7:0e:a8:0b:31:38:40:a4:1b:
         f4:0d:56:98:27:ca:db:18:85:ca:a1:9d:5a:09:94:78:a0:e6:
         9b:b6:7c:7f:7b:1e:1b:6e:5f:64:9e:03:d3:e9:6e:65:8b:7d:
         2a:03:bf:5a:bd:e5:a2:61:7f:f3:7c:ad:6e:36:32:db:a2:fb:
         75:4d:7f:dd:e5:5f:28:bd:dc:f7:14:62:ce:19:2c:62:e0:c3:
         03:b9:f8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 01:59:17 2025 by rpki-client