Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
File:                     crePZoL8OcVbQdSPgLiDjV0tvwc.mft (raw, json)
Hash identifier:          WoTSw4QZVEEcsxuQZcXSbVkHhuO47hWswDrztJM7gpg=
Subject key identifier:   29:AC:DD:AD:6D:8A:FE:CE:95:0D:EB:A5:B6:CA:5A:07:AC:19:55:E2
Authority key identifier: 72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07
Certificate issuer:       /CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
Certificate serial:       01962E2B43C908DED6CA7B6F2E9E3690F7AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft
Manifest number:          1578
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: 2bWjaCPUw-X9yUtaNeVHbtBR4RY.roa (hash: wUmEh6plZKTlbe1wgPAmlbbKo/l6BC2G8XZaRSw27eo=)
                          2: 58pgEzEV4itxzFdqyuzKp1koy9E.roa (hash: tH6QFOaJ/p4keTuKKE46gn/xyoU7W70E/+/4aSveeLE=)
                          3: AGmA39KwwTaMo71xV9rDHmreSZs.roa (hash: Ryun1mCIWyFFcbzTBG9eqylu4psXL7qEbax/r+ERVGA=)
                          4: BL8I68n0S5EatljR0k4XZsKHA24.roa (hash: iOoLcUwIbkzuVCDzFIpNedtLQogspd3V7HdfhJiPZWg=)
                          5: BaSPDYM6MErqXQc7hbonxO3hOP4.roa (hash: AgREuMxC9LWBmMGpuhqiDAzwfQdn2bSFaeGwQAYr9Ig=)
                          6: BxtsjwaylqDgyShxS785H67TnbY.roa (hash: tVOA9jGSji8cVYr6ivVtJAHBG6QSJ270Wt89fBmSzFA=)
                          7: DskJ3QKfzbRX76wY5Y62eU4erR4.roa (hash: Om0rFiAWDXCVX1P62G7M/6mKMjWs5VmA/8EV8q++G+4=)
                          8: HaOpzJMZyGr1VwIN0yxcsvqMx_k.roa (hash: FGjU24P26y4GfKNamGPK1MiLr1Hu7PhFhnVoCJb38j8=)
                          9: InrDEGCfKU8jJed9KnH2vx-d78Y.roa (hash: NgTZkZMP5rtVotSPrvAaVc/98gXGQA3bDBX67D3E0+U=)
                          10: JgPouA_jmpHV5hDbLij9YLal33o.roa (hash: 7YwHFYuVdRf9mWnshpfvLYgyOJrwWP6qz4/AQwJWL+Y=)
                          11: JkkRBzU6KqC4iLmQvNFLg1pZbqQ.roa (hash: qQIWTHDKXS9dJmmc6TGCroCf2SQogHaE6HLb5eCxiv8=)
                          12: KrudkOICJ6o23J172JFVZgrTE8Q.roa (hash: LOElKXAo1zxfoDmHY1gKUaU9NBQHXV4qqyUFnydMwws=)
                          13: NcVlekWCiF1MqD0pMFbt8sBm4xk.roa (hash: zMGQInzAKzEgCcQ8IjKoVLyb75jlj1C6HwQ11XN+6E8=)
                          14: OTxCQduV-uqIoeFa9Cq4lhI0Plg.roa (hash: SntazOe0GcprBZUsg09GtT5xfUWIyPvf8ofxR/XlEEQ=)
                          15: Q-cb4AjNFoWCznmTrkTd9_2MtQ8.roa (hash: 2USY3xNUmziDvmtALMRGKfhIKkZceNSRez2thcTQVsI=)
                          16: Q7A84Re88TEGuWZsIYTnNdLRtqQ.roa (hash: 62XanU5j/TVPu9hICaR497zqHzXQbEaOUBFnOheHiVs=)
                          17: U1dZiJQ-sCfZlcybNwHIMoVg7mU.roa (hash: V0t6ji4+oFj9qeofPxTRdRG8LndbBllIM0CiNf6vz94=)
                          18: Vb_RpJ-2VDeLhxtyu1EnKEq8cTI.roa (hash: H3HLjc2fYtCp8h81NRRKqe5UGP2PQxcS5tkL3rkueM8=)
                          19: Xd0NxuFWE7SrjCz2XQTm-U1qFF4.roa (hash: KWb4JfeZyHfW6hW0TUPUkEkeyeCxBn40dOa4ZcgMqfE=)
                          20: Y5ftqTR9TzbpNFX0jR_lEw_2cbw.roa (hash: uZQd1l561DGTXpFyA9bvh0eURkUHs50E2fAXnc2P9cU=)
                          21: YMY8SkwxP4m-8h-3OwtOnhDx180.roa (hash: PqKx3y2u4bSihph2gbhVet/cNiHB7Rg66rh7uA+7Zwk=)
                          22: Z3imJD5C2mxpSzOVHM29bAYX1wQ.roa (hash: moH5xKYZJc8UlbCB5NGLSkdO+EeL9UBqJaguHu9lcVE=)
                          23: acgWZk7QsmW2aj_bCsaJjnM5BPc.roa (hash: HUCf1r1zAbFUe3WPNLagsH4LPR/2P6TikCHZR4iIaH0=)
                          24: bmqkA80pr4vo9LBw5jf9WENmXyM.roa (hash: GfCiAUJS2zYIKRhmR2J5s7yCccX26jfET5bMvpXh8wA=)
                          25: crePZoL8OcVbQdSPgLiDjV0tvwc.crl (hash: Mf65Cf2g+wLBGRVz5OMLiKPawsna1zoFADqnH6MATNk=)
                          26: hHcyNgOmxrhkn3DhNfaigHX94g8.roa (hash: B65e/+ApHFBG2pXE/i7USQDriRyCgT5A9AG/tPBTPh8=)
                          27: mFTOVg0gctQNNx0jyIBOYgUT6fg.roa (hash: k28x1ZIzqND1Svau80gR07/HyKpYAy94wpGkGRTlP0U=)
                          28: mJ-PnuZffkBvMXhplb_lo8QtEyc.roa (hash: cnmwpchuXHms2rojiNGzRDXyf/+oMqIEDUIf1Odq2us=)
                          29: qpXqPI2Lm4U2S7PWScdAxzqLkns.roa (hash: Bzilqha0faSvo6uHWLbDknjpYoOKZ5PiVLmh9/Jq3LE=)
                          30: uyXQtDlM4ZwnqdZAtXrlk36c7e4.roa (hash: YXJ2U0awsdiqeieBuuyLP082uokuubFdWDICnN4d+bI=)
                          31: zAHjS8tPU8HEmTCCDINtaHrVJIM.roa (hash: 0QsNUBchy9W2sgLs15kxSXqG8C8jBUSbYSVE7+dh+t0=)
                          32: zDVyzwRVn1CT-RP9xlaFiJNPMHE.roa (hash: OeT1n7LBHt2BLA6NJKyqqdEda9ZFBBnrzNwADjp7exA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:43:c9:08:de:d6:ca:7b:6f:2e:9e:36:90:f7:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72b78f6682fc39c55b41d48f80b8838d5d2dbf07
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=29acddad6d8afece950deba5b6ca5a07ac1955e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:86:eb:27:fa:6f:62:6c:45:5a:6b:45:0a:c6:
                    35:d1:2e:4f:be:32:78:20:d4:39:d9:03:c9:31:00:
                    ac:9a:cb:1a:84:08:d4:39:28:e7:2d:b1:40:ee:df:
                    bd:69:c8:e3:3a:12:48:52:d3:b7:d3:4c:23:30:9e:
                    59:31:b7:b7:b8:eb:16:62:67:bd:bf:6e:3d:7a:ea:
                    c9:96:eb:5d:4d:b0:38:d7:d1:2e:74:8c:6f:af:ce:
                    b1:d4:46:a0:b1:b4:08:80:04:80:e7:40:85:cf:52:
                    75:2e:fc:76:3a:5d:ed:8d:a6:d3:d6:7e:b1:ae:2a:
                    0b:fa:80:56:94:d1:b9:a2:a9:d2:06:ad:b1:35:75:
                    58:00:ac:d1:0c:71:49:4a:20:1e:5b:59:04:d4:e4:
                    d9:52:61:10:c3:f0:54:4d:f5:cb:e3:20:af:4a:a7:
                    8a:32:0c:f5:3d:ec:1e:8c:c2:e1:df:d3:b5:8c:50:
                    9b:15:23:4e:d6:6a:83:c7:8a:c4:b5:df:6c:10:80:
                    30:8d:45:0b:f6:57:e9:ee:fb:7f:db:bc:9f:4a:50:
                    77:74:79:19:bb:ed:42:3e:6e:08:3e:ac:d3:65:ef:
                    eb:9f:ac:e9:2d:41:d6:78:5c:49:de:7d:64:37:c0:
                    84:2e:77:45:7c:e2:b4:49:43:66:ac:f0:26:da:46:
                    f6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AC:DD:AD:6D:8A:FE:CE:95:0D:EB:A5:B6:CA:5A:07:AC:19:55:E2
            X509v3 Authority Key Identifier:
                keyid:72:B7:8F:66:82:FC:39:C5:5B:41:D4:8F:80:B8:83:8D:5D:2D:BF:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crePZoL8OcVbQdSPgLiDjV0tvwc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3c4b8a-bfc7-41e9-99e1-f3e506aeaa01/1/crePZoL8OcVbQdSPgLiDjV0tvwc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:2b:95:ef:6d:a8:35:fe:ab:84:17:29:03:b9:88:ec:eb:29:
         f2:75:cb:a7:1c:03:97:8d:d4:a5:4b:1a:d3:d1:15:6f:35:31:
         21:35:ac:1d:5b:15:f1:c0:c2:3a:0c:86:d9:f1:d4:4e:0f:be:
         36:75:cb:50:2e:96:94:6d:b6:e2:9e:59:27:6f:a6:df:bb:e2:
         63:a4:5d:20:a9:26:e8:63:a6:cc:46:5b:ae:d3:34:c8:c9:5e:
         4a:b7:25:0c:54:6f:c9:aa:e9:27:f9:43:27:96:a7:dc:d4:0e:
         9a:94:e8:74:38:70:59:1e:21:38:e2:6f:60:85:65:dc:2e:0c:
         aa:49:57:9b:57:88:21:e8:cc:ac:5c:56:3a:f2:1c:79:77:4b:
         3e:f4:cd:dd:cc:79:ed:df:b5:92:98:8b:b8:b5:c9:9e:56:21:
         dd:cb:4f:e7:5e:68:9a:db:b2:c6:17:be:19:66:ec:ec:fa:a3:
         6c:62:8a:01:a5:dd:9f:2d:8d:20:b4:5e:96:d5:2f:b4:73:46:
         30:bb:b4:1d:31:3f:8a:8e:d4:4c:3b:6e:00:0f:3f:dd:a7:58:
         b3:b4:ce:d6:4f:39:1b:2e:ec:3a:3d:a2:4e:1c:e2:04:82:08:
         37:64:83:07:c7:25:f0:0c:7a:ce:61:84:14:bf:ce:15:23:8c:
         2a:d0:0b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----