Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
File:                     TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft (raw, json)
Hash identifier:          NVB7ydDNLujLFNxiktrvZ3TionHc9TwDjAq4SSAphro=
Subject key identifier:   FE:13:D2:96:25:BF:39:C3:A9:01:F3:98:12:93:1A:3D:2B:9A:46:B7
Authority key identifier: 4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
Certificate issuer:       /CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Certificate serial:       0194BC05214B05EEF13B9D2F6217006DAE06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
Manifest number:          1405
Signing time:             Fri 31 Jan 2025 11:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:40 +0000
Files and hashes:         1: PHU8bveJ4V86SqIQTMnWW43DqBE.roa (hash: 3OhBnf8f8HGM5ArwPPNt9UU72cQZdAdKTbSA4Z11k2Y=)
                          2: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl (hash: hRQi2aWLW46TNAxM5gtQXChxPkYTUDJn7u2akAvrFHk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:05:21:4b:05:ee:f1:3b:9d:2f:62:17:00:6d:ae:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
        Validity
            Not Before: Jan 31 11:00:40 2025 GMT
            Not After : Feb  1 11:00:40 2025 GMT
        Subject: CN=fe13d29625bf39c3a901f39812931a3d2b9a46b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:66:91:9c:4e:d8:72:f8:8d:84:d8:6c:e1:06:
                    a4:1f:69:47:3e:8a:d1:6b:02:51:96:f5:fe:ad:ff:
                    ac:27:34:d8:3a:d8:16:e8:65:80:2a:27:31:b4:d6:
                    a3:8b:d9:68:6a:52:eb:de:9f:35:5d:b7:8e:70:bf:
                    a0:69:e7:9e:ee:d8:ec:39:17:1f:29:f2:a6:63:e5:
                    98:df:d4:fb:69:d1:fb:de:7a:2e:87:cf:61:26:36:
                    74:0a:05:99:50:e0:d8:8a:68:8a:98:da:fa:29:12:
                    b7:cd:64:0c:7d:d6:01:af:8c:37:95:cd:4b:94:b0:
                    00:ad:2d:43:05:09:ab:34:b8:2b:7a:c0:48:25:81:
                    38:49:bf:b4:11:62:e3:25:32:39:f4:3c:79:70:37:
                    ab:09:43:dd:e1:ee:1d:b3:b4:e9:dc:da:d9:24:6a:
                    53:8c:74:8f:71:4d:11:ce:c2:7d:61:c0:35:50:62:
                    33:f2:6a:4d:62:4e:16:4b:88:89:de:cb:5d:bc:25:
                    b9:ce:de:2a:7c:aa:a0:12:2d:b6:24:47:00:42:6f:
                    1d:17:01:b1:7c:79:c2:3d:a3:03:ff:39:68:d7:c3:
                    93:e8:9e:c1:e8:de:a9:24:91:52:5f:70:42:38:48:
                    04:ac:04:8e:84:c2:7d:62:b4:57:f1:e1:69:24:9d:
                    1e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:13:D2:96:25:BF:39:C3:A9:01:F3:98:12:93:1A:3D:2B:9A:46:B7
            X509v3 Authority Key Identifier:
                keyid:4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:bc:de:96:04:b2:09:da:24:75:03:a1:2c:33:08:d5:06:87:
         0e:51:9c:80:eb:ff:6f:dd:6f:46:f8:05:d0:c0:78:9c:df:84:
         e0:9d:c6:65:96:4b:4d:fd:9a:3d:98:c9:85:38:cb:ad:57:9e:
         28:28:33:31:7b:49:ef:bf:ab:18:7a:58:03:76:cc:cf:59:34:
         b7:76:7f:5c:b3:7f:c1:9f:ba:06:dc:06:a0:39:a7:2f:66:b5:
         2b:64:c7:fc:6b:71:24:44:19:86:3b:25:ea:2e:7d:2a:f9:99:
         6e:1f:95:49:4b:bf:b3:d0:6d:40:27:c1:99:49:0c:18:03:3e:
         ae:99:13:1c:93:81:37:bc:b8:14:da:3b:d2:0f:7a:f4:57:19:
         d9:5a:08:91:ff:e3:db:91:28:9b:a1:ca:df:9d:d0:76:b5:21:
         b1:61:77:3a:69:8e:5c:70:be:1d:5e:ec:4d:e1:a9:01:00:6c:
         67:e3:2a:15:82:e6:48:fd:d2:b3:74:bc:59:10:03:97:b3:d8:
         77:75:a3:f4:58:14:86:ff:b4:ed:1f:71:b6:b8:69:00:b5:be:
         05:de:36:a0:25:02:70:d8:99:27:1e:07:1c:4e:c3:fe:bf:17:
         6a:f4:e9:01:f2:18:ec:c9:87:31:23:d0:c0:f1:35:36:0c:4a:
         ba:12:9a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:57:53 2025 by rpki-client