Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
File:                     mwwNBCJVZtuV6a07LvYFAUl1qqI.mft (raw, json)
Hash identifier:          soMNKgbPb3ou+lkYo1CWoKovlyiLkWUxKc3m+8CsnQs=
Subject key identifier:   16:B4:68:59:41:6B:F2:E2:F0:70:F2:5C:A1:8A:35:A2:E3:E7:D8:02
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Certificate issuer:       /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial:       019483CDB783C4F9C8A44F3CEDC965909BFD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft
Manifest number:          14E0
Signing time:             Mon 20 Jan 2025 13:01:24 +0000
Manifest this update:     Mon 20 Jan 2025 13:01:24 +0000
Manifest next update:     Tue 21 Jan 2025 13:01:24 +0000
Files and hashes:         1: 6W508HPEycyaINcon9hFTTDfWzg.roa (hash: FaaoAr8cncXwgapb/ccKCwtqcqgVXMUYS+97flPk75A=)
                          2: 6ajM24jaUNQuuGUIgfF3IaRVdR4.roa (hash: 3Tcx48NGdbsDH4/Wz2KR/zGrlUwj8Ykwrmihmb5jNAk=)
                          3: B7wjK36IHBypTvEqXjOEhhx6Ze4.roa (hash: FXUtVXi8sZV7peu/Il2w9Mrkuwf0jPb7ZTbxh0mbQPU=)
                          4: DXM6TNyFoAVb6hiQzqeaeruKML0.roa (hash: fEch+vcLFVIIy8b8LpAyDub1Ky8IVhkKN0GalgQBDA8=)
                          5: JAzuEd1dVhVA8IRzt64GIaUMaYI.roa (hash: XgchSt2WI8mGpGM/s5ce3KyVFDqQ6Gx/9Ok28X6j6Cw=)
                          6: JDL_bTLQliD0VZtakowkUoox7IM.roa (hash: pVZ5cOlZpd+7ZJKDVw7S4J8Ok1Mj30Rz2dcGh5Ypgvc=)
                          7: NpBOsskNk2RL167mIs_m6FaqmP0.roa (hash: eMgH9z54RC8SitNdsKkhPWr2cNk1sdCoIKYnMnRVmxE=)
                          8: QUI1aaOrFot6N7LXYMIJeh5LGn8.roa (hash: 3hRLH91kve2ni/Uw2YZZTPS8ETVWrEwwR7ivPXyo5G8=)
                          9: RUlZLbYGgWXcsTdrQpjEqzld-Qw.roa (hash: BjakYLfSwBbERmfPPgZfdKvEAOhhbXThCyTm1bb6gC4=)
                          10: VCudl7eKocVwPUxaZ4Woh0MNFzs.roa (hash: UHPCqe6iZ86p/kCLGlUPsYCKxufJKmM7kwqOLo1Jy7w=)
                          11: VxVmfXdZwW-6OJphy_YOQdN0r-A.roa (hash: en9ckXnB3cUJH506Btm1iT2oo4J6vWTx4tsrEz9WC5s=)
                          12: W_I6VhBLwqUarDv_M6qL6T1kaNU.roa (hash: PstHAmYISZomOui19+7AO+pwFL+mSC1+xcuwB8FQSFo=)
                          13: gAF5Nd1gLCKC2nSAM5aAD21vGwI.roa (hash: PzIHoBhphE/++GFUxgzdzOIZWIJc86heVfsFRvE+8NE=)
                          14: hgPRrGnHa6fpFg4JOZXmh5Kugz0.roa (hash: WE34GZzYhpaV24ydZVp5cUxFd5dBY//1RpKX0HLyzss=)
                          15: hnZH6pIFSGLaypOQJtt6BM-t6wI.roa (hash: dZt7cTrfXwwIuah9TNCVUQR8yCfWj6swdtcp5F7aYmU=)
                          16: i0uO-NLuax7HB42omi2kHcbDiEM.roa (hash: IVBDonJIexnySCIQnJVqfpdVTnrS/LPe24xwcxOnry0=)
                          17: jEoFAlcS68i7ybCLLuOpRSRIdIo.roa (hash: 1WIWD7i4wcO8pxSQjsbWHw2D5cGdHFGfPJBQKzALTvI=)
                          18: jUdxrPXosyThU3_1E3jWclFr5-o.roa (hash: +7jrxguELGKH/1HZ500ovl1kTtUDco36YXCma6tvg24=)
                          19: kSbrErDwhkA4GKrIo69PNBWOdlQ.roa (hash: R6Jmy/gE1DJZ1wWlidx7QcKIYKoQaQOBzDdrtIZILIE=)
                          20: lSiujhzt1LcGiw8A7B9pK37FaMI.roa (hash: h3y9E+Rxf2m/eC6S05hZLxuAV1UPj3+4ZiombPrP5O0=)
                          21: mQdPu3hwrStVpzhQmHMetiWorkQ.roa (hash: xnn8MjfCOgCkJehSP+r5lr1XMJ4T2QXMMxYF9HRFpeQ=)
                          22: mamkTKGSReS2IZWbMBaGBHtazXk.roa (hash: 9Jxk3IvKfPWI0wFkvEE49EXlcuZQKcDj7x053MjbAB0=)
                          23: mwwNBCJVZtuV6a07LvYFAUl1qqI.crl (hash: tM3/Ui34FuBgvD8bDOv2NCCWzdXbNi8Sg60LQ/dyXXE=)
                          24: ndXzWFrUiV8919PdOfKp5kCnbcc.roa (hash: nOye4DYnKoEpHj1JBb9YuqEziPuCapcWY/rbAbDf3Ps=)
                          25: phe4BIzSkDqRiDjxV7qzEa9cQ3E.roa (hash: lOuYqfI/JdtbMzhaaY3DDMSYIo7gNqo59EF/9d3CiZQ=)
                          26: tl_MYtWSWAJOR598E04NUT6BvJc.roa (hash: Orz7SXf6CWdDMcZ5kcuS3dpUEUdstA0w9BbGzo4G/pc=)
                          27: xI5QJHfn67ze20EV1_Uvsi4iyDg.roa (hash: 91WpwIDX5raR9KX+KeyAloGN4a2+AkKNNViky5tMMBo=)
                          28: yzTdT0tBE1RyycJdmDdbwINN0lI.roa (hash: 6EJ5PDpmcupRJ3IkLOH/KHYEQwWTLqTCEBEgV/h3FOw=)
                          29: zSzL4yqiLtZZjGLtdY4oIXUossg.roa (hash: +jR749UKy/cTH2uh8caNpitfppJCp33iqABh0VJuUOo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:83:cd:b7:83:c4:f9:c8:a4:4f:3c:ed:c9:65:90:9b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
        Validity
            Not Before: Jan 20 13:01:24 2025 GMT
            Not After : Jan 21 13:01:24 2025 GMT
        Subject: CN=16b46859416bf2e2f070f25ca18a35a2e3e7d802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:6e:53:85:07:e7:00:6b:3f:86:fc:c1:c1:e8:
                    67:eb:c0:92:f8:71:b6:53:9e:a1:77:ce:33:aa:0d:
                    2c:32:1f:a4:d9:a9:29:e9:b8:30:88:e6:d2:4c:4e:
                    b8:cf:03:fa:90:fe:ad:0f:8e:32:b8:b0:5b:49:46:
                    b1:6b:f2:d2:4b:b3:d2:dc:bb:b0:4a:28:a4:84:85:
                    c8:63:2c:10:3d:5d:3f:df:26:7d:cd:a1:c8:aa:90:
                    91:7d:5e:78:ce:d4:4c:23:53:4b:93:0f:4a:71:c1:
                    0e:d8:22:da:76:2c:34:b3:2a:4e:6a:6c:69:16:ba:
                    07:89:8a:30:c2:98:81:93:6a:fd:3b:7e:59:95:25:
                    64:3b:51:cc:6a:13:ac:4f:f6:98:0c:c7:30:46:9f:
                    40:31:f2:9f:61:cd:d0:8d:ac:a9:f9:77:bc:7a:c1:
                    84:09:2b:b9:20:ea:18:42:3e:6f:32:a6:bd:8c:49:
                    26:f3:2f:c0:39:49:1d:5e:d9:97:0b:b6:65:aa:5f:
                    16:b9:7c:41:aa:78:9e:4d:e4:6b:b0:36:28:02:02:
                    fb:d9:43:46:fc:0b:b0:be:91:db:26:0a:6d:7c:07:
                    21:32:8f:fc:9a:af:a6:71:f4:1e:d1:90:a1:6f:c6:
                    ea:92:ac:88:e6:eb:ec:06:df:2a:20:d7:37:c9:e5:
                    17:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:B4:68:59:41:6B:F2:E2:F0:70:F2:5C:A1:8A:35:A2:E3:E7:D8:02
            X509v3 Authority Key Identifier:
                keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:2b:8a:63:67:7e:d1:29:fa:00:62:45:39:df:1c:9a:d9:2a:
         53:69:e5:51:a1:61:35:e1:1a:6b:cb:ed:3f:7e:bc:9c:af:40:
         77:58:b7:7a:a8:40:66:17:61:25:9c:af:81:b1:3c:1a:40:07:
         b0:ab:0b:02:49:41:18:3f:ca:4a:22:4d:20:89:7a:b9:44:57:
         50:2d:5d:0f:e9:26:06:43:c1:05:2c:be:70:88:6e:72:fa:c2:
         7c:7b:39:70:58:a7:27:4d:d3:17:7d:c8:71:ed:1c:cf:aa:f5:
         f6:1a:94:68:4e:eb:07:ee:c3:81:f6:6c:41:c3:13:c2:f5:6c:
         ed:36:52:7e:e3:df:ec:a0:c4:16:29:5e:5e:a1:86:4f:77:d9:
         f3:7e:06:35:b6:a4:b8:f6:e5:12:db:2d:4b:bd:1c:00:d0:df:
         0e:e4:3c:9b:a9:71:99:52:85:77:cd:a5:05:03:e5:26:e7:1d:
         cc:e0:44:f2:05:e7:bf:25:88:ae:a3:ab:d3:36:18:f8:46:0f:
         d8:98:9a:9f:dd:69:23:15:a2:8f:a0:ef:ce:f7:0f:85:7e:4c:
         9d:f7:c4:79:93:4e:d2:d0:26:1c:c2:7f:29:5b:9c:0c:a2:b6:
         f1:ed:38:6a:fb:d7:a3:a5:82:6c:72:7f:0f:98:e1:18:10:5c:
         7b:3d:1d:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 21 17:36:47 2025 by rpki-client on console.sobornost.net