Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
File:                     ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft (raw, json)
Hash identifier:          thxuPMtO4LMFO5VZxEFVbX1wE09qQVmwdy9bYFff8QE=
Subject key identifier:   17:09:1D:4A:71:4F:A4:36:8F:0B:ED:E0:AF:47:48:DA:C3:53:99:93
Authority key identifier: B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78
Certificate issuer:       /CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
Certificate serial:       0194BC04DCBD6F324A477588BB79EC53E879
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft
Manifest number:          1428
Signing time:             Fri 31 Jan 2025 11:00:22 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:22 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:22 +0000
Files and hashes:         1: 1-qjOvMD_gOLy6H4ikM5iY4VGQ8.roa (hash: x56Lu5EMx6deCo6ci/ec7JVHm+rQMFgfSVpjOag6Bkc=)
                          2: ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl (hash: 1nQqc4Gd1XbcWZaZonZG8Cegl7IOx515v/yzKCgueBk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:dc:bd:6f:32:4a:47:75:88:bb:79:ec:53:e8:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62dd60548b67cc41e67b6a616a12ec53bf42978
        Validity
            Not Before: Jan 31 11:00:22 2025 GMT
            Not After : Feb  1 11:00:22 2025 GMT
        Subject: CN=17091d4a714fa4368f0bede0af4748dac3539993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:36:83:40:a2:ee:48:8a:b8:08:c8:d5:4b:d3:
                    dd:a8:e1:cd:68:4b:d6:92:aa:41:32:a9:10:d4:f7:
                    77:75:88:fc:66:2b:83:b7:0d:76:da:4b:19:08:3a:
                    af:de:b3:94:2d:b2:c5:72:15:f9:b3:48:c5:83:ca:
                    3b:33:fe:1c:4d:39:bf:a4:35:9c:7f:91:ef:76:64:
                    65:32:85:d3:cc:47:cd:42:1b:e4:21:2b:c8:a5:ba:
                    00:0e:cb:80:4c:5d:be:a3:d6:80:b0:5f:3e:d9:57:
                    02:de:68:9b:a8:a4:d8:ab:8a:04:3d:0f:7b:a9:e4:
                    41:1e:85:dc:45:69:68:aa:58:bb:86:c9:71:dc:8e:
                    70:0f:58:7f:e8:a3:2c:84:dc:c1:1d:ff:20:c3:0f:
                    f8:4b:f4:06:40:5f:77:bc:8d:8e:36:b3:1a:b1:87:
                    97:5c:42:10:b7:a1:d8:ca:9a:13:8b:f9:ad:60:44:
                    f6:a9:37:b5:f2:d6:30:c0:71:c5:4c:4e:2e:e0:ae:
                    7e:76:89:98:ef:4b:2f:a6:f1:78:89:21:6a:7a:59:
                    5c:d5:07:81:31:d8:a1:e1:4e:31:57:7b:18:1f:1e:
                    96:44:fe:69:3a:28:85:5c:6c:b5:9d:7d:94:3f:47:
                    0e:2d:13:33:54:7f:c0:01:c2:6f:50:e0:23:d0:1e:
                    58:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:09:1D:4A:71:4F:A4:36:8F:0B:ED:E0:AF:47:48:DA:C3:53:99:93
            X509v3 Authority Key Identifier:
                keyid:B6:2D:D6:05:48:B6:7C:C4:1E:67:B6:A6:16:A1:2E:C5:3B:F4:29:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti3WBUi2fMQeZ7amFqEuxTv0KXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/490e12-1a45-4b00-a46c-af1e6d077e0c/1/ti3WBUi2fMQeZ7amFqEuxTv0KXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:a4:d6:14:9d:8c:27:34:2e:c9:9a:4c:29:09:3a:9a:00:46:
         b0:b2:c9:fe:f3:d8:41:03:a7:9f:4f:70:1d:44:1b:7a:9e:d5:
         bb:15:46:7d:67:b4:ff:60:7e:58:2f:d7:8d:4b:42:f8:2c:e0:
         de:d0:9c:7a:49:9e:96:cf:57:75:83:8f:8e:45:c0:c2:12:33:
         33:ce:33:fb:95:5d:9b:92:a6:63:f6:82:ba:ea:bd:5a:4a:0c:
         53:37:ea:46:aa:a7:6a:cd:a9:ce:cc:b6:6f:e9:75:f7:2b:4a:
         54:e4:ec:2d:7b:94:cc:4c:72:8f:dc:38:10:73:4e:56:ec:f8:
         90:86:d5:8d:fb:65:5f:24:5c:33:99:46:00:ad:09:ee:95:2c:
         43:4e:f8:84:ed:b6:53:e2:3e:fb:55:a7:bb:c8:34:fa:4a:48:
         4b:87:f5:95:1c:2b:4c:55:5d:8f:62:1d:65:76:e2:d0:92:40:
         7c:02:43:d3:b9:4b:91:a8:bc:45:56:e4:98:44:e2:b6:6e:6e:
         8b:0a:99:84:69:60:72:bf:00:d1:35:ad:f7:ce:a8:b8:36:a8:
         36:c2:cd:dd:ee:34:c9:40:23:c1:93:58:dc:6c:95:f6:3f:96:
         eb:66:8e:4d:5c:68:0b:3e:15:9f:a3:f2:97:b9:9c:40:b5:b6:
         d7:1a:db:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:43 2025 by rpki-client