Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
File:                     TdlU08d8nE437r91PYbz3PCR1Kk.mft (raw, json)
Hash identifier:          bUZ591SDCxwn/uhQf8PL9CeadlWIx/kRvl0ojA7rM7A=
Subject key identifier:   2C:15:CC:2C:21:8B:65:93:DE:98:7B:85:66:CE:7C:B2:C8:83:E2:74
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Certificate issuer:       /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial:       0194BC72A4FD27735BC2903696453C9C4D08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft
Manifest number:          1365
Signing time:             Fri 31 Jan 2025 13:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 13:00:17 +0000
Files and hashes:         1: 1nhFXK_y3sJpkv0J2dNACvib-yM.roa (hash: IuJMQPuTLOgKAwozjPXSGuS6MIQN7rvE116K1KzGHJI=)
                          2: 2yubxXoUeTneba4EBY4P8MPWw2Y.roa (hash: O7PLjKUrCeqBSHAuExg3VBC739eTqlxIT5c864VI68U=)
                          3: 4KBWrJSRLSTWgJmrtXh24O8ptm0.roa (hash: YEBy8eNEfToaA32gL8iYc9FiTV97Xzm5KfvwgQ0Wt0w=)
                          4: HtQDHIujVjXfH6zsj6Bl0SXlHh4.roa (hash: zJOAO8M7wAK3hPBZk2CPY8KfOSZ5iNbLfzSj9s2DwIM=)
                          5: IBrK48O-7B4CsyrG8YHsZba14MU.roa (hash: jNJqur4pKVCszpvjwbN2opjyvmyVJ/ZLlLdT3QcBroc=)
                          6: PA7MJ2Yvi19bjuS4SkNDgLvkcJI.roa (hash: AdnrGbqgqAzwS2dozDGK+X4V3SIi3b+xg5quI+nBs5g=)
                          7: TdlU08d8nE437r91PYbz3PCR1Kk.crl (hash: lFrcVqCMarlq40NtB3QNyfvplCsX5UloExKxJd4mpt4=)
                          8: agt3GX3KTzTTaDa4N2bW6FVEPMI.roa (hash: fqDcb6/bbW1xMS84DKiItjbvr35FGCf0jB399be63bg=)
                          9: h7aMZY4rs8JTQ1CJz5QbU9M1OvM.roa (hash: KFfDZ9dh2Ge3x0fBy92J3uTwn6FSGd+/h28pAkysnlM=)
                          10: iOPUBhC5tZj2oWAWQvj5PYOPiG4.roa (hash: rupFkWf6CUCaUIdYtY3ZUAkY0dS8bO7d3Kt0O/ec6M8=)
                          11: mR3Zi8TN-_ArEouFy2dh0k1QmN0.roa (hash: UhEAthq0aKU0HlKv/Jp93RRXMjt0oM6SOsTJA0u5R4o=)
                          12: sguRLoeWyytYSUNdSCQfoHPwkL0.roa (hash: ipjLZOjUQ4BQnvEOPVMsWMd4gWLlK5VE02q72xwD6zI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:72:a4:fd:27:73:5b:c2:90:36:96:45:3c:9c:4d:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
        Validity
            Not Before: Jan 31 13:00:17 2025 GMT
            Not After : Feb  1 13:00:17 2025 GMT
        Subject: CN=2c15cc2c218b6593de987b8566ce7cb2c883e274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:79:fb:df:c3:80:3f:7e:a6:d1:68:14:64:62:
                    d3:7f:3a:a4:78:86:7d:7b:89:ea:59:90:5d:43:ca:
                    f9:63:39:b7:6c:de:b9:28:5b:f1:6c:aa:96:d0:f4:
                    35:fe:5f:db:03:0e:d0:58:ac:87:8c:2c:b1:50:c5:
                    95:a6:93:08:66:14:8b:66:59:b3:99:76:c8:32:15:
                    6a:1e:13:9f:00:73:93:93:78:2a:1e:b1:a3:a2:eb:
                    69:f8:c8:3a:d6:b9:56:c4:52:e6:56:89:fb:36:86:
                    84:4a:4e:ee:74:fe:9a:56:c5:2a:32:72:41:30:86:
                    54:69:08:e4:d5:34:b0:1f:c1:ac:8c:4e:24:2b:93:
                    59:cd:dd:28:fe:3e:c8:57:a7:ec:e0:65:12:c2:87:
                    a0:88:53:55:19:f1:bb:97:c1:09:73:6a:4d:14:78:
                    f4:0f:5d:aa:64:ea:59:20:dd:f4:4e:d4:7f:dc:a1:
                    90:bf:c8:6e:92:01:a6:d3:99:a8:c1:02:2e:41:61:
                    8e:78:57:4d:b7:8c:9d:fd:59:87:45:a7:28:61:40:
                    ce:14:2f:7c:27:69:76:75:19:5d:ea:68:f8:a1:59:
                    2b:5d:e0:f4:87:72:82:a5:64:63:79:22:cf:15:2b:
                    50:5b:d5:9f:2b:a3:85:7b:86:48:49:59:0e:c1:b6:
                    4f:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:15:CC:2C:21:8B:65:93:DE:98:7B:85:66:CE:7C:B2:C8:83:E2:74
            X509v3 Authority Key Identifier:
                keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:1d:12:bd:e2:18:5f:e6:74:6b:ec:28:2e:d1:42:34:f2:10:
         06:bb:6a:d5:db:6f:3f:27:05:49:53:df:3e:29:ec:8d:66:8c:
         a9:87:f1:04:02:cf:60:6f:c0:c1:51:7a:b1:9a:43:4c:f3:8a:
         ec:0b:28:5d:b8:4d:27:5e:51:f1:95:97:f6:e2:a8:79:d2:56:
         0c:2e:e9:7f:ba:25:7a:37:6c:4a:cc:a1:23:d4:c0:00:2c:5f:
         f6:bc:a3:65:94:f5:d2:a1:f6:89:6a:be:8d:eb:96:ea:9e:b5:
         99:c7:f8:b9:0e:6c:7c:b2:0a:e7:83:a9:77:12:16:95:93:07:
         ec:92:49:e3:74:d7:ac:48:95:f8:a4:ac:d5:4c:ea:f8:a7:2c:
         be:32:e5:7b:55:fc:d7:45:2b:3f:d2:31:44:8c:26:c1:b2:74:
         55:d6:56:cf:2b:a2:e1:24:be:16:24:e2:4b:92:09:92:77:42:
         25:04:b0:11:1d:d4:74:4b:16:95:67:5d:f0:c5:08:8a:0c:4c:
         13:6f:bc:e7:e0:ee:b9:17:04:52:a0:4c:bf:b4:c4:07:48:23:
         0e:61:77:cd:cf:da:14:0e:5f:88:46:d8:37:18:bc:f6:49:5c:
         73:ad:8a:3b:08:82:45:16:69:9d:51:2f:ac:d1:3c:fd:8f:b2:
         ef:51:af:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:25 2025 by rpki-client