Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
File:                     ttaENqdjOfZxRBz71QrUAdPAD_8.mft (raw, json)
Hash identifier:          TPMjgryNkK68w/dVIY01K72EzThpXFDiKovoLPS68Ek=
Subject key identifier:   48:06:F8:E9:DE:63:98:C1:FE:2C:E0:C0:85:53:DD:5A:41:77:D6:5A
Authority key identifier: B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF
Certificate issuer:       /CN=b6d68436a76339f671441cfbd50ad401d3c00fff
Certificate serial:       0194BCAA314B71070C781E8C459F8758676C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft
Manifest number:          1195
Signing time:             Fri 31 Jan 2025 14:00:57 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:57 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:57 +0000
Files and hashes:         1: HROKUTUR5gMY3n6zglHSVCbZS_I.roa (hash: w0BOZ7icboJC4/TfINzPR6MRHeR0gZCuXliuxuy25YQ=)
                          2: ttaENqdjOfZxRBz71QrUAdPAD_8.crl (hash: tYzy/hFyif49vfybCZgSaY+4HULN5jxXGDl5ZeWyXYA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:31:4b:71:07:0c:78:1e:8c:45:9f:87:58:67:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6d68436a76339f671441cfbd50ad401d3c00fff
        Validity
            Not Before: Jan 31 14:00:57 2025 GMT
            Not After : Feb  1 14:00:57 2025 GMT
        Subject: CN=4806f8e9de6398c1fe2ce0c08553dd5a4177d65a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:29:6d:a4:16:67:3a:0f:31:32:b0:d0:6b:9a:
                    82:e0:0a:25:3c:9f:6f:4b:65:91:e5:d1:8f:e0:c9:
                    1e:40:b9:a1:5c:12:77:32:8f:ba:78:a9:8b:36:53:
                    a7:dd:e5:96:c7:18:3a:28:c9:b6:c6:96:28:77:b7:
                    fc:46:6a:8a:8f:3c:9e:62:3d:c5:a6:b6:d3:32:3b:
                    58:14:a1:bb:d9:27:3c:59:41:1c:5e:fe:b3:41:dc:
                    98:dc:62:03:1c:25:a9:5a:ac:da:a1:9a:66:00:ef:
                    5c:78:a2:8d:59:ea:f0:23:79:91:44:70:6a:c6:3f:
                    a8:09:62:9f:d4:2b:1d:50:07:99:f3:47:73:2e:d1:
                    07:3b:83:99:de:c4:55:fc:93:9d:a3:04:57:ae:05:
                    d1:bd:1c:6b:8a:29:ce:8f:b5:78:19:c2:81:7c:f4:
                    c2:f4:47:1d:99:b6:1f:7f:fb:be:ec:84:ac:d6:79:
                    78:5e:4f:b0:df:a2:20:6b:a9:fc:8f:b7:b3:7e:de:
                    cc:30:b6:44:92:57:63:81:7b:91:bc:a4:37:20:c4:
                    5a:98:2b:e9:7b:ef:5d:32:d7:89:f4:31:54:f3:c0:
                    c8:cc:61:33:3a:0d:a1:d5:29:df:7e:e2:60:a2:2e:
                    c0:63:f2:74:40:b6:d4:51:6d:81:f7:68:20:be:7d:
                    b1:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:06:F8:E9:DE:63:98:C1:FE:2C:E0:C0:85:53:DD:5A:41:77:D6:5A
            X509v3 Authority Key Identifier:
                keyid:B6:D6:84:36:A7:63:39:F6:71:44:1C:FB:D5:0A:D4:01:D3:C0:0F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttaENqdjOfZxRBz71QrUAdPAD_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/41/84a5dd-5cf2-4857-bd93-3c711a15fa5c/1/ttaENqdjOfZxRBz71QrUAdPAD_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e9:3a:c4:70:86:75:81:8f:1e:cd:01:2c:6d:78:0a:a8:9f:
         4d:0e:9e:24:71:c5:64:69:d8:f0:fa:d8:c8:54:cc:25:53:f6:
         c6:23:ae:31:d2:a9:29:96:49:a0:3e:ee:8a:41:93:d0:ae:d9:
         08:9a:f0:0e:ff:6c:ce:65:f1:e1:d1:20:70:0f:07:7b:c5:ad:
         f0:14:7e:01:81:1c:1a:3f:53:93:33:7e:0c:8f:dc:9e:24:a4:
         7b:02:b3:25:1b:78:c7:07:3c:e7:cd:9d:b3:9b:d3:26:77:07:
         a1:7f:3a:5d:9c:ba:7b:f2:a9:2e:41:ff:92:04:81:e7:fd:f5:
         a4:cd:c1:a6:bf:4a:31:7f:26:5a:77:6f:29:00:f6:35:73:53:
         2c:af:99:4b:05:cb:a4:88:83:cd:ab:ce:56:3a:53:31:a3:8a:
         9f:6d:5d:08:db:7b:ea:19:d5:ba:f6:60:d9:da:5e:c2:c0:aa:
         43:e6:78:12:55:16:72:f0:5a:77:5b:8a:18:60:3b:6c:d2:6b:
         99:da:49:49:28:9d:ea:33:dc:c5:50:16:1f:fe:58:71:10:8c:
         57:5f:4e:60:69:de:ad:7f:c2:d3:43:06:4a:3e:6b:4f:53:68:
         8b:ec:f0:b0:36:0b:69:3b:f7:eb:20:7d:4a:60:72:d5:e2:77:
         98:44:5d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:27 2025 by rpki-client