Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
File:                     TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft (raw, json)
Hash identifier:          p764+SPWDFLOH1bO3ht2wanHnduCjO+93GMbNx16V+E=
Subject key identifier:   2A:96:5B:83:3E:6F:E2:56:6E:4D:A7:2D:54:D1:66:B6:69:3A:7C:48
Authority key identifier: 4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E
Certificate issuer:       /CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
Certificate serial:       0194BC3C8017466D6DC15B7566B57278AEEA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft
Manifest number:          1436
Signing time:             Fri 31 Jan 2025 12:01:08 +0000
Manifest this update:     Fri 31 Jan 2025 12:01:08 +0000
Manifest next update:     Sat 01 Feb 2025 12:01:08 +0000
Files and hashes:         1: TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl (hash: t1fxswdtJL79dV10tkS9qBDxz/OhrGOSvJjlOp2KgIk=)
                          2: YDDERAGfQG_P54V0MZVSyMjIVyk.roa (hash: C7Lh2t1ISlqhYDOs1dQ1HUfrAnVeSgApqdOD+isddQ8=)
                          3: kjjmj3_M89wAaSRBkczk1njDNSI.roa (hash: dWOfnCb6lmXwSX8QD5pO5gwpjqkbkqa9qW8b5CDCAF4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:3c:80:17:46:6d:6d:c1:5b:75:66:b5:72:78:ae:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d5f0cb06a5a47b4ddac7f4d6dfd44aba4d31f2e
        Validity
            Not Before: Jan 31 12:01:08 2025 GMT
            Not After : Feb  1 12:01:08 2025 GMT
        Subject: CN=2a965b833e6fe2566e4da72d54d166b6693a7c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:46:29:ea:c3:c8:13:9a:6e:6f:66:51:68:5f:
                    03:e1:24:98:cb:0d:2b:fe:35:6e:ff:7d:5d:ee:ba:
                    74:ef:78:af:f9:98:76:02:08:60:23:11:22:60:98:
                    d5:a8:c9:05:89:9c:a6:42:4c:9a:a6:31:a8:c5:b3:
                    e0:2d:24:1f:48:76:5b:8c:1f:16:5a:3d:71:b7:42:
                    4f:07:0c:b5:90:f7:c3:78:ec:65:ed:0c:a2:ce:21:
                    8a:cf:3c:d3:37:86:2f:04:41:df:88:24:e8:1d:55:
                    d3:13:c7:0b:05:29:11:b1:f6:c9:6a:10:6c:75:86:
                    35:dc:ee:45:5f:0c:49:8d:20:b4:1e:ad:18:bc:4f:
                    b5:af:85:05:b3:29:19:cb:26:64:00:1f:d1:bb:d6:
                    2f:be:8a:80:5e:73:0f:59:5f:f2:70:bb:a7:79:46:
                    4e:58:48:13:18:b9:98:93:f3:4a:13:72:b1:4e:70:
                    82:7b:97:04:2e:42:08:72:3e:11:a8:66:99:02:5f:
                    56:fd:fa:88:56:11:3e:80:bb:b3:d1:c1:75:6d:3c:
                    f2:de:1f:a6:64:e9:c1:5c:21:ff:ea:53:61:79:33:
                    b2:14:14:ca:5d:00:3f:8c:0e:59:8b:5e:c7:f3:82:
                    e1:c0:fb:fe:e7:31:5c:9c:db:8f:cb:9a:3a:9b:d7:
                    c2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:96:5B:83:3E:6F:E2:56:6E:4D:A7:2D:54:D1:66:B6:69:3A:7C:48
            X509v3 Authority Key Identifier:
                keyid:4D:5F:0C:B0:6A:5A:47:B4:DD:AC:7F:4D:6D:FD:44:AB:A4:D3:1F:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/cb8339-cee3-4037-bacc-dc8b52e3ea0a/1/TV8MsGpaR7TdrH9Nbf1Eq6TTHy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:06:ec:40:cb:b2:34:15:85:ea:f7:bb:8c:b0:96:13:29:49:
         d8:56:36:12:0e:7c:48:25:81:b5:c9:0f:42:1d:9d:3d:10:48:
         92:42:86:0f:37:62:30:3d:8d:e9:00:fb:b3:84:87:ae:45:09:
         bb:69:90:9f:23:cb:f6:f2:e9:62:ff:fd:d9:f6:e7:bb:52:80:
         3a:b1:73:87:6b:ca:b4:1f:72:f8:1f:74:dc:3a:40:f1:ac:70:
         23:bd:73:37:c4:4f:04:40:3b:f6:f1:93:f9:c5:da:27:be:48:
         6f:a4:a8:44:29:1d:58:b8:d6:fe:6d:3c:35:c6:d7:c5:2c:06:
         c0:c4:5b:48:ba:c1:00:ae:6b:8e:d6:df:d3:29:36:1e:aa:40:
         da:c8:b9:b0:de:6e:35:50:c3:31:a9:14:b5:8d:cb:8b:6d:11:
         f1:9c:bb:4c:d4:9e:59:13:60:8e:48:89:27:b5:8f:a5:bc:81:
         53:5d:8b:91:59:54:08:f6:2a:c9:a4:01:7a:29:ac:35:e8:4c:
         05:72:af:80:97:ac:98:f5:15:3c:12:d3:0e:f3:43:d9:e7:08:
         9f:59:43:d6:72:60:15:32:5b:26:99:71:7d:68:01:bd:61:87:
         2b:ff:e9:7e:e9:78:5b:fa:98:40:4d:a5:fd:ca:bb:77:c7:3c:
         6a:ad:ff:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8PIAXRm1twVt1ZrVyeK7qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkNWYwY2IwNmE1YTQ3YjRkZGFjN2Y0ZDZkZmQ0NGFiYTRk
MzFmMmUwHhcNMjUwMTMxMTIwMTA4WhcNMjUwMjAxMTIwMTA4WjAzMTEwLwYDVQQD
EygyYTk2NWI4MzNlNmZlMjU2NmU0ZGE3MmQ1NGQxNjZiNjY5M2E3YzQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10Yp6sPIE5pub2ZRaF8D4SSYyw0r
/jVu/31d7rp073iv+Zh2AghgIxEiYJjVqMkFiZymQkyapjGoxbPgLSQfSHZbjB8W
Wj1xt0JPBwy1kPfDeOxl7QyiziGKzzzTN4YvBEHfiCToHVXTE8cLBSkRsfbJahBs
dYY13O5FXwxJjSC0Hq0YvE+1r4UFsykZyyZkAB/Ru9YvvoqAXnMPWV/ycLuneUZO
WEgTGLmYk/NKE3KxTnCCe5cELkIIcj4RqGaZAl9W/fqIVhE+gLuz0cF1bTzy3h+m
ZOnBXCH/6lNheTOyFBTKXQA/jA5Zi17H84LhwPv+5zFcnNuPy5o6m9fC9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqWW4M+b+JWbk2nLVTRZrZpOnxIMB8GA1UdIwQY
MBaAFE1fDLBqWke03ax/TW39RKuk0x8uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9jYjgzMzktY2VlMy00MDM3LWJhY2Mt
ZGM4YjUyZTNlYTBhLzEvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9jYjgzMzktY2VlMy00MDM3LWJhY2MtZGM4YjUyZTNlYTBh
LzEvVFY4TXNHcGFSN1Rkckg5TmJmMUVxNlRUSHk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAbsQMuy
NBWF6ve7jLCWEylJ2FY2Eg58SCWBtckPQh2dPRBIkkKGDzdiMD2N6QD7s4SHrkUJ
u2mQnyPL9vLpYv/92fbnu1KAOrFzh2vKtB9y+B903DpA8axwI71zN8RPBEA79vGT
+cXaJ75Ib6SoRCkdWLjW/m08NcbXxSwGwMRbSLrBAK5rjtbf0yk2HqpA2si5sN5u
NVDDMakUtY3Li20R8Zy7TNSeWRNgjkiJJ7WPpbyBU12LkVlUCPYqyaQBeimsNehM
BXKvgJesmPUVPBLTDvND2ecIn1lD1nJgFTJbJplxfWgBvWGHK//pful4W/qYQE2l
/cq7d8c8aq3/Dw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:04 2025 by rpki-client