Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
File:                     TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft (raw, json)
Hash identifier:          ++Tj/GLDmSLcfZQVLODGxeayqSWXer1xD+fGXyF4ht8=
Subject key identifier:   03:9E:30:F8:C6:97:D5:3E:33:90:6F:DD:5A:B1:B1:D9:50:76:50:04
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Certificate issuer:       /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial:       0194BD4EB3006487C1DD565C50B4A132DB94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft
Manifest number:          1452
Signing time:             Fri 31 Jan 2025 17:00:38 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:38 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:38 +0000
Files and hashes:         1: 6_4Zh3O6ZTreuktkHjfNsOfp20c.roa (hash: IHBYXC/iSuYVHMlBmOHgNgl61Qvof4DId2NC68M2Wf4=)
                          2: 7uP2hsNrWUTvLUi0EnlsUMplx8I.roa (hash: AAh5/zqxGEJwKpq1li09A8ITxq8BmEm8Nx1Peaplcw8=)
                          3: 86yMutrW94jAoFqGGLp05wok-EU.roa (hash: n1wMq7WI5xCKfeBBnyW3L0LanP1i1DJdVv+DH8sxYDQ=)
                          4: 8I00PdszB0BEA0F7L15RCYSGXrs.roa (hash: jIMi5XC40219hEu2jWaX/R/11c/v1KgoG9InqbBDCDw=)
                          5: 9d4vehXr1KQWWuNr4btcQyeNAOw.roa (hash: eCac0MYwoiBRqhdE7NB6xf6R3V4kbMphNX58B/5kKw4=)
                          6: CeZwmGmhmPWPb4MYHs5Umyv2vN8.roa (hash: 044BEtCX+z6xTX9a6h7LlWK6XDMZtx+8nHOMokajsWY=)
                          7: N04EfiNPlhcajYlah0Fj2OOKHzU.roa (hash: yfI+goH5HcOi2fBAbSu0epVzVunJlIpi1BFzU7kE07c=)
                          8: OziayBrDeGWUdwbC1v4ioKqEXUE.roa (hash: sdMj7SQqeh6lx/KCs9+nJuEWA4sxx9zFl43XaHKaZJk=)
                          9: ShiiryAcjD3F8ggUPDXzBzE0UB0.roa (hash: DaTZCgy4f8wa4YkJRs70W6ngBWHSz7ZCBqDO4OgIbKc=)
                          10: TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl (hash: uRZlx7B+AGUvsgi0deR/W6iDJCLP7dHv1koEdEPIev8=)
                          11: UkLKM15tmjgBY5QWaoqfz0_8jkI.roa (hash: 8usx/pzxgiN7xwyYIJpHpe9QYcM1xrfYkkGGJbMr7E8=)
                          12: W4JvRWHM4c9uHtuDiGbWbfW6_oY.roa (hash: 1ojxt/gCQbbmS26YV73zKnO5/4dtGXpP+YX1jufGKFE=)
                          13: W8m4GdEAUuyje4ea6tzLvpxGtOg.roa (hash: 2JXP9CUcUNLp3qYldxK3ZT/r0Zo+MqdT+NrTwUE+MCA=)
                          14: XA_JQUwBuB_5Bfu8Z1_Pku4UGIs.roa (hash: oqIiAXdBgyeEaTThnTERPbspWHbAcUhHISkkJ+TPcRM=)
                          15: _lT4fkaMoWdr8qyjDYgJWGLKNqk.roa (hash: cVeyU0qmwSSa/gArA5yocN/Gvczol71ofdn37Qssh2E=)
                          16: gCAZgdSrRRMO_a_bk-rlD9yUdBI.roa (hash: CiDZa7qTV5sD4Pxr/bWaU0/l61ZZMF4KbuusyXElF3s=)
                          17: h8tPDjA1OFAFTFOZDX2QcoPajT8.roa (hash: D2D71dyeEW0POzOSRVEi2ki37gqunzi/KvsZFZxTyj0=)
                          18: hhOCjjctZE2elUUQzzzNpbofAzE.roa (hash: ASnnd7IdpidxDt7bVAWlgtZPqmulJpJGw53xxAdtVc8=)
                          19: jmOmNUc4t1mTnx_PtEJXCVu45y0.roa (hash: n3LhYp07YltOPPJGprQBK9Drn6QgmpJsE3I8Z6cF5gc=)
                          20: lIuOj0AnftPW8n1hGje2-_p95sU.roa (hash: GQvUoJQQ5KD124Ec+QFcU1fE8s5FkdB2MthVeKXOr7Y=)
                          21: mmWzR3VTeBNwTWJQSz6iAWBL2n4.roa (hash: 4o5/uQYVaiCLx5hp640nZnYAh3ZNcq2J4p5PzINcxjY=)
                          22: nQs9A_hUWl_S85ciPSXHqKt_fOQ.roa (hash: OO+ivo9odQV4h2/ZIswWA1KIA2RuonmMWgLO5WJNfks=)
                          23: vPs-BjoRFrtMzT81xNA12pTdrhk.roa (hash: zq1ZtiMPWWfT0qVyKbdcFXzXLMMx3LqD6xTMODLy5ro=)
                          24: y3uok7EZQrGXpn3Ez_3aS9Y6NLI.roa (hash: hrdKFgJqexlTl1buWV8DIV1mCnkxg43ZkPO8Ouc4I54=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:b3:00:64:87:c1:dd:56:5c:50:b4:a1:32:db:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
        Validity
            Not Before: Jan 31 17:00:38 2025 GMT
            Not After : Feb  1 17:00:38 2025 GMT
        Subject: CN=039e30f8c697d53e33906fdd5ab1b1d950765004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:94:2b:80:fa:c0:2b:06:ea:ac:cd:a4:ef:bd:
                    7c:3c:27:ca:bf:64:f7:48:1b:5d:8e:44:3c:d3:97:
                    ca:5b:d0:50:53:0b:ff:51:b7:3e:65:d7:a7:83:8e:
                    ba:cd:96:67:6f:19:da:93:0d:17:60:f0:bb:47:8f:
                    75:8e:0e:59:1b:78:70:77:e6:10:3f:36:f1:44:41:
                    6f:2e:3f:e3:ea:c3:1f:b7:14:66:1d:bb:05:4d:4a:
                    e1:1d:9a:9c:4c:c9:9f:87:24:56:af:19:5e:35:15:
                    51:4a:fa:17:1d:de:d9:3b:41:40:51:a2:76:78:a5:
                    2c:32:44:f3:56:88:75:86:73:18:12:cc:a8:7b:a9:
                    fc:4d:36:a3:3d:69:03:b7:c7:63:ac:e0:eb:12:72:
                    e0:d2:d3:df:9a:84:c0:fa:c5:17:77:db:35:89:77:
                    7a:cd:c7:f3:f7:60:ce:40:95:ef:8d:ca:c5:4c:93:
                    15:22:77:4e:b7:63:83:71:48:8c:9d:e2:d4:15:c2:
                    45:57:99:c8:cd:92:d3:e0:b5:a1:28:fb:06:f2:35:
                    81:c0:a2:d9:c6:59:25:6e:b5:4c:16:ab:a3:8f:4b:
                    1f:6c:2e:bf:94:69:85:b4:e5:0f:7d:b3:44:cf:0f:
                    e8:1c:31:c7:ed:57:c7:38:f6:87:9c:0e:25:6b:99:
                    a1:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9E:30:F8:C6:97:D5:3E:33:90:6F:DD:5A:B1:B1:D9:50:76:50:04
            X509v3 Authority Key Identifier:
                keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:09:44:19:8b:29:9c:a1:c4:71:d3:fa:b2:52:e8:fe:44:3a:
         29:5f:3d:5f:58:37:69:91:cb:1f:c5:f2:34:80:58:89:e7:0f:
         f5:a1:b2:62:35:4d:b8:ce:42:6a:5d:64:51:47:3a:32:96:ae:
         b0:e8:76:cc:0d:f0:6a:d6:fc:fa:b1:ca:d4:cb:b7:84:38:1a:
         4f:1d:3a:3a:fe:1f:17:84:d5:cd:8b:72:0b:87:32:a8:d8:11:
         80:63:f8:fa:ab:dc:66:a4:31:37:5d:17:57:b9:ec:42:90:6e:
         50:9e:72:7c:2c:c5:9c:f6:27:d1:e9:0b:99:07:48:86:93:a7:
         90:40:ba:f1:48:82:51:6e:70:e2:fb:d8:93:cf:b4:9f:46:c3:
         35:1e:bc:45:46:b8:87:c0:16:8c:0b:f5:6e:52:95:4e:2b:c5:
         10:81:b3:b1:23:d3:8d:81:eb:c9:4c:18:99:09:85:1f:d5:d6:
         76:60:d6:56:08:c6:1a:13:1b:40:48:df:5d:f0:d5:0a:da:9a:
         13:bf:d0:dc:9a:e7:96:61:c3:52:b8:c8:05:fb:93:dc:a1:15:
         a9:ca:e9:25:78:89:5f:0f:c9:26:14:59:b8:3c:d8:c6:e9:ba:
         ef:8d:78:57:2e:f9:ff:39:d4:38:03:d5:a6:52:4b:17:73:f8:
         2c:b5:e8:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:29:31 2025 by rpki-client