Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
File:                     XaOUHCfP5cI0xL8iHssqV5st6qs.mft (raw, json)
Hash identifier:          2CIRlxfCPlPRWcneQ1iUO8qPyoaJlctQwe2f95+/TgQ=
Subject key identifier:   5E:B5:DD:8A:DD:8E:78:81:64:00:2D:95:2A:63:8A:9D:85:49:EF:52
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Certificate issuer:       /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial:       019776AECBFB79036E0CEEEFADFC73FB8627
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
Manifest number:          12F1
Signing time:             Mon 16 Jun 2025 03:00:56 +0000
Manifest this update:     Mon 16 Jun 2025 03:00:56 +0000
Manifest next update:     Tue 17 Jun 2025 03:00:56 +0000
Files and hashes:         1: 0NDg7PSFqCtlOZYcAWca7yUfVmo.roa (hash: vxdlDismxivb7YjpnzIGBIMoDZ842tr8eSQHVdPZSK0=)
                          2: 44V-jFpveDwCvRSgY1bGyBKxKMg.roa (hash: SBBRS+535H/ER4FEKoyxl+HX5+uiiatZ4OyNmO8omfM=)
                          3: 4Lb0e1ykjVbPF3TRFBfCy5NXBs8.roa (hash: GK2lw+w9RAZ8U/n2HtSWHhfI/WFan24rTpmfoSr2/5s=)
                          4: 5yf7kmOkJIf47QytclAVGnDQkG0.roa (hash: jkRS+kneeyL0eT4kf9kZTFCrEEfsEGOnxXwzCopHh4E=)
                          5: 6xMWEeYr9awMZ7yx3GEOzN5dhPY.roa (hash: i3EKCietWlgVwKiSYdpzAk0qUO8A42y+4Xa5mI7nNOE=)
                          6: 7uT6U1lLurQEaJor-cFGlwsDu_k.roa (hash: Ui1tug0NBabKJLVWvbF+wZA/W7tLCJHrULtI5KVfo4U=)
                          7: CJWoMIuHhVD-Efxrbw0jAFhbe-w.roa (hash: Kgwm9eLnChXzut1Wvo58jSxKdzv5IWvQsGfIpc5SNrY=)
                          8: GaPhNmCLCg6FDzOqGOsmTwzEr2s.roa (hash: s8h3O6KnSTgtqyfNfNsxD91VQjj/kAw0losU0p/2szw=)
                          9: MoVlaEpeYcgapii9RQN01AK-1sk.roa (hash: YW281iIo2TPc/obI4ya1TvT4BPdmGo+hoO/NvnmnPcs=)
                          10: Q4reaRyzxdlr2J3p-E7N3TijG90.roa (hash: /yxNBaJLXZrSF/MyIlaBqDEhy23fudEAJpVMYlkUVGA=)
                          11: QIBl_PzzOyhWQ0YwS67cfZQv6q8.roa (hash: P7SWaJtSk5gky4A+tb7xk+SJWuasiFqqv67n5HbuuCY=)
                          12: SnJnvCbTNrEMF1kRlYnaQpP1-CM.roa (hash: M/883UPP+y+ETclB7OhwNjCUVOl1P7x38ODsI02JpL0=)
                          13: VwscqchdEAmsVSyV2eD8RGldRmQ.roa (hash: VdjKB9pG2pwAZNShYBPvCakHnXSVowEhPi3XTbCbuyI=)
                          14: XaOUHCfP5cI0xL8iHssqV5st6qs.crl (hash: lmuLtyCS5sTW6I1FoeiW6zLWmAZFXFL2Mfkb12ZThPc=)
                          15: YPXYjBAH_6CTa2PRzt8FUXSv0uc.roa (hash: 6zYw4RGhgL5oXoJxuJXImN5CehSpcJqIUUxqFJsp5EQ=)
                          16: b_7FAg2gJSVaw2lNZeMvTuKt_LE.roa (hash: eCyaUhu+U/7r/ol9yEOLafoy3sM9NF7EUYO2UwxliFk=)
                          17: fX9UYKZO6xd52hU0CG_6QfKAnlI.roa (hash: PeN61zex2Sw5DInmZiyUVF6K0j8DWMly0+OvVLBpOMI=)
                          18: hSWUv1huf0ZgdEoupOzoYiR-xRY.roa (hash: fUUm9WVh4RT1Bif3s0lLxfArOXO1kV1fWL5woYLGALo=)
                          19: uAEY8yf0-OduNKClmzmQfAo_KIE.roa (hash: qEIbThjEj3GBtZEd/ntxaTMGkdBP7P2YKculyoqC1h8=)
                          20: vQBa0DHzLolz37NUtVTr3McGXdM.roa (hash: jEeBKTmQJb632hn3aeDSG3q3Hax58EZ7ZkfrXZDB5r0=)
                          21: zLLnY-dQIRtqYuPaqhFMWu0P24Q.roa (hash: NAwFEB8VGQ8kHJYhy4abt4dV8wltJt8R0PlTbgI+GD0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:76:ae:cb:fb:79:03:6e:0c:ee:ef:ad:fc:73:fb:86:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
        Validity
            Not Before: Jun 16 03:00:56 2025 GMT
            Not After : Jun 17 03:00:56 2025 GMT
        Subject: CN=5eb5dd8add8e788164002d952a638a9d8549ef52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e5:8b:1f:f4:52:20:cf:40:06:85:b8:7d:28:
                    b8:38:9e:3d:4d:42:9b:46:55:7f:ee:b0:08:f6:f5:
                    f8:24:c4:1a:36:a9:24:6c:8d:e0:d2:19:41:a1:36:
                    9c:5b:b7:16:6a:63:d3:a7:d8:04:89:c1:80:08:c4:
                    3c:43:cf:40:a5:dd:1f:bc:e4:65:55:a5:ca:a4:0e:
                    2f:18:00:19:14:1d:23:f8:95:57:ef:89:dd:22:9f:
                    86:4d:99:9a:f2:6a:c0:a7:87:72:b0:b5:c9:64:9f:
                    da:ee:e7:93:2e:c3:e4:d0:8e:de:a7:8b:d4:fc:04:
                    39:16:92:c5:0c:9c:de:7d:c3:51:8a:87:90:d6:ca:
                    99:f6:7b:d4:85:6b:b6:24:ca:e4:a9:71:46:2a:1c:
                    71:83:d4:31:a6:33:52:7e:56:42:d2:9c:a0:93:e0:
                    88:7a:ac:e8:a8:e4:95:54:3b:fa:fd:c9:17:2d:da:
                    b9:9d:62:03:cd:7d:30:e1:2b:25:02:87:7e:df:10:
                    5b:59:49:f9:36:07:ff:c8:ce:9a:85:32:00:14:54:
                    d3:3f:d8:e9:44:d3:bc:f4:2a:8b:c0:92:b4:40:51:
                    81:08:10:46:98:ae:d6:5d:2a:f8:51:15:d7:c4:10:
                    44:8d:3f:d0:71:a9:55:3a:b4:5e:ac:53:c2:35:c8:
                    7c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B5:DD:8A:DD:8E:78:81:64:00:2D:95:2A:63:8A:9D:85:49:EF:52
            X509v3 Authority Key Identifier:
                keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:36:6b:c9:c2:98:23:11:81:a8:14:f9:ce:42:0f:dd:b2:9b:
         ad:35:45:ea:80:7c:3e:dc:4b:a3:ab:43:07:80:54:75:3b:98:
         75:de:02:69:a9:9d:b9:36:94:cd:98:2d:24:de:63:79:01:cb:
         ee:d6:88:61:14:2a:43:dc:32:d2:8f:08:d5:b1:7a:ef:2e:f5:
         a4:24:93:02:b1:22:e7:5d:c2:ad:57:c8:79:3a:f2:64:33:ca:
         6d:b2:cd:ce:11:8f:95:79:10:f0:4d:87:1b:51:01:e7:bb:05:
         44:18:29:0e:8a:19:15:3a:b8:31:1c:90:85:6d:de:21:b6:e3:
         95:36:01:aa:b7:3f:14:32:56:d0:29:d6:c8:46:06:87:38:ac:
         ac:3e:2e:df:27:39:6b:67:00:69:df:3c:a1:8c:c9:06:80:6f:
         63:07:70:3a:5a:e3:c9:1b:eb:eb:78:d0:13:d5:41:1b:b2:26:
         fe:34:10:27:3e:70:eb:d9:5f:3b:66:51:a6:11:d6:7e:1f:3b:
         ce:4e:dd:a1:03:89:44:93:50:8f:8e:88:26:81:c8:c8:79:a9:
         b4:44:d4:e1:44:33:52:89:be:a3:2d:c1:76:85:65:15:44:e1:
         9a:03:44:a0:5e:c5:06:61:08:10:b4:c4:35:2a:ab:65:19:dc:
         0f:ae:bc:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:01:43 2025 by rpki-client