Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
File:                     tTAFYZaI77r_0G4QikO98gZD4NY.mft (raw, json)
Hash identifier:          EBIdF7gp4kRuF7Prnupj09vyMUA3mBipzGIgEH/j5jk=
Subject key identifier:   B2:99:93:3E:39:86:C3:15:A3:79:B0:F5:B5:A1:DD:62:BF:03:4E:47
Authority key identifier: B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6
Certificate issuer:       /CN=b53005619688efbaffd06e108a43bdf20643e0d6
Certificate serial:       0194BD4E8AF69FE89FF5A71E18E2C52FD3D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 17:00:28 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:28 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:28 +0000
Files and hashes:         1: HhltdqvEvMp1haFhX3fIv16Ni_Q.roa (hash: NacxfWEhGCqjQzcJPOYmDDogo7Rv0RM9x208Jen3m0s=)
                          2: sI2dGOEr8nZk6D1YNbEa7wlaZyM.roa (hash: kx5EWM4e9UqILncO7G7gUfdu6rl4RFiOFynpDnpX02c=)
                          3: sxbnQp-HZOAWEFzphM2K1lCVnVg.roa (hash: kEKMwrabqx6d8HV9sni4rJcCg8Olec1gaFW1f6LNEvE=)
                          4: tTAFYZaI77r_0G4QikO98gZD4NY.crl (hash: O98iK/6Wdnw62xoHXWiu+lkT1B41DFQoFpjnGXTkzGA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:8a:f6:9f:e8:9f:f5:a7:1e:18:e2:c5:2f:d3:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53005619688efbaffd06e108a43bdf20643e0d6
        Validity
            Not Before: Jan 31 17:00:28 2025 GMT
            Not After : Feb  1 17:00:28 2025 GMT
        Subject: CN=b299933e3986c315a379b0f5b5a1dd62bf034e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:11:2a:55:c0:4d:5c:3d:2e:48:f1:47:25:ca:
                    0e:8f:1f:c3:dd:b8:1d:51:99:92:7f:7d:52:80:e7:
                    51:02:a1:58:d5:a8:11:12:fc:dc:48:8b:c4:f7:7a:
                    1c:b2:46:fe:0b:50:01:1f:fe:64:c0:bf:32:61:97:
                    a2:85:d0:bf:44:a6:41:0a:d6:cb:ec:5e:e5:f8:54:
                    29:d9:8d:c9:76:62:f0:80:eb:83:6a:db:29:cf:c3:
                    fc:c5:ff:c6:cb:61:99:f2:63:e4:f2:96:31:a0:cb:
                    f5:ee:0f:4d:64:96:8d:c7:42:4f:78:b1:37:93:e7:
                    9a:60:60:b0:03:32:5a:a2:48:19:e8:da:4e:04:4d:
                    47:50:9c:66:0d:db:3c:b0:11:2d:74:e3:40:6f:90:
                    76:15:e1:db:40:5e:4b:72:aa:23:60:14:17:ac:12:
                    ec:72:bf:8d:d6:d2:b6:67:66:42:d5:60:02:8f:73:
                    b4:ff:d2:a4:bd:90:4b:fa:9c:80:d3:07:90:34:ff:
                    a2:ce:3d:50:c8:28:7f:d1:1b:26:3c:d2:9f:94:04:
                    24:f1:15:56:39:f9:b8:cf:ac:71:2c:c2:ce:e0:8f:
                    42:62:b5:5d:dc:a2:12:12:0d:14:b3:4f:3d:41:05:
                    e1:c1:22:d5:35:a5:3a:7e:be:7c:df:e2:9e:98:3f:
                    62:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:99:93:3E:39:86:C3:15:A3:79:B0:F5:B5:A1:DD:62:BF:03:4E:47
            X509v3 Authority Key Identifier:
                keyid:B5:30:05:61:96:88:EF:BA:FF:D0:6E:10:8A:43:BD:F2:06:43:E0:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTAFYZaI77r_0G4QikO98gZD4NY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/995fbd-91fb-43bb-8f26-cd4bd44275c5/1/tTAFYZaI77r_0G4QikO98gZD4NY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:b2:f0:d5:09:07:42:d5:9f:7a:0b:9e:26:90:d8:7d:dc:64:
         12:44:00:6e:2a:14:2e:92:90:55:d6:24:22:c7:a5:dd:f5:3b:
         4c:c8:f0:69:bc:68:fc:e7:64:85:b2:a5:5e:ac:a4:0c:ca:80:
         30:1e:0f:70:02:ab:75:dc:f1:12:b7:50:c8:e7:b1:e1:7b:6e:
         79:b0:3e:2b:9c:86:80:d0:74:48:9e:cf:c6:9c:8f:9e:43:93:
         97:20:f1:cd:b3:47:dd:d6:9f:37:bd:58:e2:f2:6f:76:0e:52:
         4c:12:cf:fb:83:59:cf:95:3d:d3:c4:c3:a7:ff:78:74:08:19:
         c3:bc:d7:79:d9:d3:f6:95:5e:d9:7d:79:c4:fd:00:90:c1:96:
         45:49:d3:d4:3a:40:c8:25:f7:65:83:98:15:87:d2:66:36:e8:
         3f:af:03:cf:1d:a5:51:fc:8f:aa:ef:be:34:95:bf:62:9c:82:
         27:3a:0a:eb:d5:80:91:e0:07:7c:4a:0d:c8:33:90:7d:ce:65:
         5a:d4:89:1b:d4:e2:c2:af:e1:ff:1b:98:e1:c0:19:b3:99:7a:
         d1:bb:ac:7f:bb:fc:1c:94:aa:37:7f:10:94:67:9f:c2:e9:36:
         ed:ac:34:99:d9:9d:66:ef:b5:9b:d7:f9:94:d0:4a:ba:14:93:
         ff:48:ee:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:27 2025 by rpki-client