Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
File:                     tcR4e4CrSAGrYrG9v7KOBtMM32o.mft (raw, json)
Hash identifier:          vN2Jzbbw631QPYXIsySRrWlUJaJVGY4mjfe3zgiflOI=
Subject key identifier:   C8:DC:20:F0:8C:7A:09:FC:8C:CF:50:53:50:C9:7E:8A:17:B1:00:79
Authority key identifier: B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A
Certificate issuer:       /CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
Certificate serial:       0194BC72DE6ADFB421A4B1C803C57E2075F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft
Manifest number:          0286
Signing time:             Fri 31 Jan 2025 13:00:32 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:32 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:32 +0000
Files and hashes:         1: ktAbm-eMqyUysDj5Rz0ozhsQgoU.roa (hash: sOoFB/V0u6n0JOO4WrnOrE08EvrJyrBKeqUzyGdoIfI=)
                          2: tcR4e4CrSAGrYrG9v7KOBtMM32o.crl (hash: PF7FJ3lhM+7MOL2jRZAxThqGqkc9bA0mve1ItXaOM+8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:de:6a:df:b4:21:a4:b1:c8:03:c5:7e:20:75:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5c4787b80ab4801ab62b1bdbfb28e06d30cdf6a
        Validity
            Not Before: Jan 31 13:00:32 2025 GMT
            Not After : Feb  1 13:00:32 2025 GMT
        Subject: CN=c8dc20f08c7a09fc8ccf505350c97e8a17b10079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:f4:c3:f2:ab:02:27:98:3d:35:e1:35:76:88:
                    5d:fd:dd:8a:a6:af:f6:a4:fa:0d:13:90:8b:67:f6:
                    0a:c5:6b:3b:fa:6b:45:f4:ef:16:9f:da:f2:90:2a:
                    dd:42:a2:3f:14:01:13:64:97:4f:fb:0c:4b:b4:f4:
                    d6:df:e4:34:c6:12:6d:b2:c8:27:e2:30:40:20:45:
                    31:da:4f:e0:23:a9:ac:58:55:54:4f:a0:66:b6:f7:
                    73:cc:76:49:da:36:52:23:76:db:a5:f2:bb:1a:6a:
                    33:e9:50:7a:3c:70:9c:19:b7:aa:b9:86:f9:c8:50:
                    3b:d1:c3:11:47:53:e6:3c:05:b6:e5:ae:e7:ff:dc:
                    9d:a2:db:eb:e1:a4:00:36:0f:21:2b:21:bc:db:07:
                    b0:80:30:cd:c2:6a:8d:0e:04:39:9e:89:e5:1c:70:
                    dc:3d:97:24:9b:63:02:27:7d:45:6f:3f:36:0e:50:
                    73:11:dc:78:59:ac:44:4d:93:e1:b1:cd:50:5e:e7:
                    15:71:d2:69:25:58:f0:bb:f3:1f:e4:51:2e:f2:4f:
                    75:77:98:aa:3c:5f:32:2d:78:2a:7c:43:1c:d0:cc:
                    9d:a8:d8:8c:67:a2:c5:72:e5:27:89:30:aa:53:ec:
                    50:68:a8:72:ba:0c:e1:66:fd:17:0b:5e:af:76:56:
                    c8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:DC:20:F0:8C:7A:09:FC:8C:CF:50:53:50:C9:7E:8A:17:B1:00:79
            X509v3 Authority Key Identifier:
                keyid:B5:C4:78:7B:80:AB:48:01:AB:62:B1:BD:BF:B2:8E:06:D3:0C:DF:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcR4e4CrSAGrYrG9v7KOBtMM32o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/37/d9d3c9-f194-4b26-8f10-ff6a9cde6335/1/tcR4e4CrSAGrYrG9v7KOBtMM32o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:3f:31:35:4e:b8:8b:ff:96:ac:3b:b0:40:f5:12:19:29:39:
         f8:d2:81:a6:99:3a:86:9b:45:bb:4a:8d:d5:f9:c9:04:11:53:
         c7:3f:64:7a:3a:bb:88:d3:fd:a9:a0:4c:98:a7:c3:66:80:e3:
         77:03:68:7b:35:f7:ae:07:82:ab:c5:29:17:5b:fa:ba:4c:b1:
         ae:b4:20:2b:df:6e:6a:24:a3:4a:8e:e1:88:eb:9a:43:a7:55:
         ef:f9:61:fd:77:65:49:cc:84:40:b3:7b:b2:78:f4:ea:8f:02:
         27:60:b9:d2:e6:97:0f:d9:eb:5b:48:a7:c7:93:37:62:28:63:
         98:b7:30:a9:e7:0f:7c:ea:52:0e:ec:eb:bd:80:e5:7a:44:04:
         2a:0f:e5:87:f3:28:ba:ae:d1:5c:45:13:61:c4:f2:bf:43:7a:
         1d:44:a3:f0:a7:52:50:b7:56:2f:90:66:04:fb:1e:1b:79:5b:
         e6:e3:15:01:b3:e0:a3:b3:45:dc:bb:09:06:02:10:65:7c:59:
         a6:cf:f1:70:29:fb:b9:7e:47:01:d1:a3:3e:cb:e9:fb:57:70:
         2e:ce:37:3b:8b:a6:12:6b:5e:93:1c:85:62:34:ff:63:68:97:
         10:00:04:9b:cd:2b:c7:42:07:6d:d6:6f:bb:36:db:ad:1e:95:
         67:68:14:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:30 2025 by rpki-client