Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
File:                     Tt5MZdc1r3knftFOtsTPVATHiNU.mft (raw, json)
Hash identifier:          fNH5NobjYimvjHE88f2RnWzU9KEt8czVq839S/gBcBE=
Subject key identifier:   62:B2:2F:49:51:31:8F:68:BC:D3:6B:25:6C:C0:AE:DF:42:8E:A6:20
Authority key identifier: 4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5
Certificate issuer:       /CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
Certificate serial:       0194BD4EB8871DA9A85A791B3B1A2C6602FE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft
Manifest number:          066B
Signing time:             Fri 31 Jan 2025 17:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:40 +0000
Files and hashes:         1: CNpxwuWXiobnr753WTcJ-SvZEQU.roa (hash: +W4soYxTO8aYTDMgF940blaVc3sdpMhU9iF5WZMoCzU=)
                          2: Tt5MZdc1r3knftFOtsTPVATHiNU.crl (hash: Q00zwLmN7OwOqKTnrAX629cuaV6mRrtvDqV7wE98MsE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:b8:87:1d:a9:a8:5a:79:1b:3b:1a:2c:66:02:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ede4c65d735af79277ed14eb6c4cf5404c788d5
        Validity
            Not Before: Jan 31 17:00:40 2025 GMT
            Not After : Feb  1 17:00:40 2025 GMT
        Subject: CN=62b22f4951318f68bcd36b256cc0aedf428ea620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:12:af:f4:f2:d9:32:23:63:c6:5d:83:14:42:
                    5a:20:52:6e:08:15:16:49:40:90:79:4e:80:cd:99:
                    8f:0f:d2:15:be:da:6a:ae:49:38:f3:2e:93:b9:b8:
                    e0:56:23:47:c5:af:a4:94:99:62:12:b8:fb:ad:1d:
                    56:41:80:bd:84:e5:83:33:2c:75:14:c3:d7:d3:aa:
                    2b:04:f3:4e:a6:d6:1d:ba:db:c2:d9:5f:12:49:90:
                    64:59:3e:e9:99:d4:a7:64:58:62:02:83:1e:62:db:
                    3a:79:fb:04:a0:8b:7d:44:ca:78:0e:b3:55:f1:d7:
                    1d:85:76:a3:06:95:7a:8d:76:5f:81:ba:1f:cc:37:
                    61:19:43:03:5b:04:2c:43:7a:dd:a4:aa:7a:9a:71:
                    94:73:7c:76:99:d4:12:7f:f9:2c:c2:fa:be:8a:60:
                    cf:07:ca:18:8c:a0:af:8b:39:4d:1c:f7:54:34:a9:
                    05:54:48:d1:61:39:c1:14:29:59:75:c3:3b:fb:ac:
                    f4:bf:6a:06:8f:48:73:fd:d2:ae:23:b9:17:06:6a:
                    9b:44:ca:22:8f:2f:f6:73:6f:d5:20:ad:c3:a6:fd:
                    7a:17:8b:49:05:7a:e7:5a:37:60:81:2f:c7:02:ff:
                    6e:a7:d5:09:55:e4:74:b0:b5:39:17:9b:14:81:1a:
                    d0:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:B2:2F:49:51:31:8F:68:BC:D3:6B:25:6C:C0:AE:DF:42:8E:A6:20
            X509v3 Authority Key Identifier:
                keyid:4E:DE:4C:65:D7:35:AF:79:27:7E:D1:4E:B6:C4:CF:54:04:C7:88:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tt5MZdc1r3knftFOtsTPVATHiNU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/35bee9-843f-4d38-9286-7aa49becf467/1/Tt5MZdc1r3knftFOtsTPVATHiNU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:91:9e:1b:82:5d:12:f0:9c:90:7b:1f:c7:82:2a:ca:37:c7:
         7e:4a:1a:48:d4:61:40:a3:3f:2f:64:96:8e:3f:3a:0d:c4:12:
         e0:91:10:e3:bb:76:82:9a:7c:82:ba:2e:a3:2b:fa:a2:e2:7b:
         9b:5d:49:05:ec:35:c0:27:12:ff:37:90:a3:79:de:f0:e1:c3:
         fe:c9:f2:bd:11:60:b6:ce:c2:36:c6:c3:6a:96:57:42:69:d2:
         60:42:65:48:00:56:6f:87:b7:c5:59:39:7f:c8:a1:5c:6f:70:
         39:1d:6f:4d:dd:67:47:1b:4d:34:67:82:88:47:aa:8e:54:d3:
         0b:e6:8f:a5:eb:73:9c:e9:21:c5:40:ee:ab:cd:b0:43:96:a3:
         e6:25:d9:4e:37:6e:36:3b:76:52:bb:42:23:6b:05:85:7e:f7:
         4b:a7:15:2b:d5:ee:0e:b9:9f:67:ce:ce:8b:14:be:f1:ba:e5:
         6d:2a:dd:0c:96:64:60:35:89:3c:df:dc:bc:f1:cf:dc:d3:e3:
         7e:ab:34:ce:14:aa:f4:d0:9f:b7:53:88:0e:e2:e9:73:9f:74:
         cc:3b:6d:0a:14:aa:3a:f5:f4:57:14:80:e9:0f:68:c7:af:19:
         88:d5:c2:b3:ab:d1:f3:ad:40:a2:4c:0e:c4:bc:9c:57:bc:1b:
         24:34:ee:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:01 2025 by rpki-client