Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
File:                     tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft (raw, json)
Hash identifier:          hHMTrErNZ4cWMdKTmxAx0xlQB9Meu8B6wjK1MQjIFh4=
Subject key identifier:   0C:43:D7:98:5F:3E:8C:76:65:B7:82:DB:12:0F:A6:47:37:7E:83:FF
Authority key identifier: B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF
Certificate issuer:       /CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
Certificate serial:       0194BBCE71DF50F346BD9D503C0B0829A171
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft
Manifest number:          0FE9
Signing time:             Fri 31 Jan 2025 10:00:56 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:56 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:56 +0000
Files and hashes:         1: tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl (hash: vTeMlrnwBtm/fnUfstdyC3XS0IAqVchfAL89sf9KYsw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:71:df:50:f3:46:bd:9d:50:3c:0b:08:29:a1:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6095c9f747b1c9e9bdc5717a725e8059874cbef
        Validity
            Not Before: Jan 31 10:00:56 2025 GMT
            Not After : Feb  1 10:00:56 2025 GMT
        Subject: CN=0c43d7985f3e8c7665b782db120fa647377e83ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9c:5f:77:eb:cf:d8:9d:42:d9:fb:69:ad:d8:
                    d7:86:45:70:6d:80:7b:9a:38:e6:db:fd:b7:b9:ba:
                    98:23:ff:4e:26:2c:24:a8:bb:48:af:22:28:98:e8:
                    5b:25:d7:55:5b:3a:17:4e:cd:75:d0:d5:a9:81:72:
                    17:72:05:2c:4c:38:75:91:58:2c:d6:d9:fd:9f:23:
                    b8:a8:88:ff:35:66:3f:11:ca:95:9e:c8:ad:16:0a:
                    61:a1:c7:44:37:0a:e5:39:0a:71:c2:5f:49:c9:e7:
                    ee:1e:d0:86:b9:e2:72:70:d3:3e:77:78:94:52:e8:
                    3a:08:a9:d6:da:7a:8d:43:8c:ab:d7:f7:7d:5b:ef:
                    62:db:40:44:e0:c0:79:4b:c1:a8:1d:11:16:2d:57:
                    3e:36:90:4d:bc:78:73:90:c6:7e:d7:fa:5a:f6:b5:
                    1d:8e:9c:fc:60:69:3e:e7:45:32:63:d5:86:36:66:
                    21:a1:ce:64:fb:72:cb:99:e6:16:41:33:df:70:39:
                    2e:a7:93:45:63:35:75:f2:3a:31:27:99:cb:8c:74:
                    bb:51:05:8b:26:77:40:ff:8d:cb:c4:88:ee:0e:7f:
                    04:3d:bd:04:a9:1d:3d:4d:3d:e9:86:fc:b5:90:0f:
                    ae:dd:fa:d1:b4:e0:4b:f1:83:45:20:b3:8e:26:37:
                    51:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:43:D7:98:5F:3E:8C:76:65:B7:82:DB:12:0F:A6:47:37:7E:83:FF
            X509v3 Authority Key Identifier:
                keyid:B6:09:5C:9F:74:7B:1C:9E:9B:DC:57:17:A7:25:E8:05:98:74:CB:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tglcn3R7HJ6b3FcXpyXoBZh0y-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/07/acec51-3e4a-4ecf-858c-bdb93ec0179e/1/tglcn3R7HJ6b3FcXpyXoBZh0y-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:9c:3d:55:d4:0d:73:68:4c:6c:ce:6b:c6:6f:12:66:53:19:
         96:ea:38:8e:98:30:7f:fc:ea:59:e4:f9:50:4b:c6:24:99:e4:
         d8:08:70:1c:1f:28:c8:4a:cd:36:6e:ac:91:2a:4f:3a:bd:f5:
         1d:57:40:d2:b7:20:e4:c5:d7:00:58:32:36:f8:b0:0d:22:cc:
         11:34:ec:3f:15:43:8a:81:7a:4f:6e:01:6d:1a:41:4d:ba:62:
         b3:5d:ea:7c:fd:f7:fc:7b:89:8d:3c:e0:34:ab:c8:b1:b2:d3:
         fa:9a:00:98:a0:6e:69:15:33:53:c0:f4:36:7b:36:75:68:04:
         fe:77:bd:19:e7:ab:9e:95:f6:8b:16:a2:a6:bd:61:a5:32:18:
         29:a9:59:cf:60:47:47:32:06:a0:93:1d:31:5f:b4:ad:a0:3f:
         65:f0:25:b8:1d:53:c5:bd:1a:80:3f:d2:2f:6d:9a:d0:d0:40:
         ff:58:58:31:80:8b:47:60:13:90:bf:a7:93:ff:6e:1a:27:e7:
         8f:ed:8a:b4:6a:e0:62:28:7a:0c:7c:34:7c:36:2b:08:02:00:
         2d:a4:64:3c:ae:08:0c:29:ec:b4:40:81:23:37:bc:e2:bf:6b:
         a0:3e:5d:33:66:47:28:50:01:ae:90:4c:3d:bf:09:58:f4:f7:
         ae:08:cf:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7znHfUPNGvZ1QPAsIKaFxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2MDk1YzlmNzQ3YjFjOWU5YmRjNTcxN2E3MjVlODA1OTg3
NGNiZWYwHhcNMjUwMTMxMTAwMDU2WhcNMjUwMjAxMTAwMDU2WjAzMTEwLwYDVQQD
EygwYzQzZDc5ODVmM2U4Yzc2NjViNzgyZGIxMjBmYTY0NzM3N2U4M2ZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJxfd+vP2J1C2ftprdjXhkVwbYB7
mjjm2/23ubqYI/9OJiwkqLtIryIomOhbJddVWzoXTs110NWpgXIXcgUsTDh1kVgs
1tn9nyO4qIj/NWY/EcqVnsitFgphocdENwrlOQpxwl9JyefuHtCGueJycNM+d3iU
Uug6CKnW2nqNQ4yr1/d9W+9i20BE4MB5S8GoHREWLVc+NpBNvHhzkMZ+1/pa9rUd
jpz8YGk+50UyY9WGNmYhoc5k+3LLmeYWQTPfcDkup5NFYzV18joxJ5nLjHS7UQWL
JndA/43LxIjuDn8EPb0EqR09TT3phvy1kA+u3frRtOBL8YNFILOOJjdRDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAxD15hfPox2ZbeC2xIPpkc3foP/MB8GA1UdIwQY
MBaAFLYJXJ90exyem9xXF6cl6AWYdMvvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGdsY24zUjdISjZiM0ZjWHB5WG9CWmgweS04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9hY2VjNTEtM2U0YS00ZWNmLTg1OGMt
YmRiOTNlYzAxNzllLzEvdGdsY24zUjdISjZiM0ZjWHB5WG9CWmgweS04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9hY2VjNTEtM2U0YS00ZWNmLTg1OGMtYmRiOTNlYzAxNzll
LzEvdGdsY24zUjdISjZiM0ZjWHB5WG9CWmgweS04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhJw9VdQN
c2hMbM5rxm8SZlMZluo4jpgwf/zqWeT5UEvGJJnk2AhwHB8oyErNNm6skSpPOr31
HVdA0rcg5MXXAFgyNviwDSLMETTsPxVDioF6T24BbRpBTbpis13qfP33/HuJjTzg
NKvIsbLT+poAmKBuaRUzU8D0Nns2dWgE/ne9GeernpX2ixaipr1hpTIYKalZz2BH
RzIGoJMdMV+0raA/ZfAluB1Txb0agD/SL22a0NBA/1hYMYCLR2ATkL+nk/9uGifn
j+2KtGrgYih6DHw0fDYrCAIALaRkPK4IDCnstECBIze84r9roD5dM2ZHKFABrpBM
Pb8JWPT3rgjPrw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:03 2025 by rpki-client