Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft
File:                     T_TbtnXuCOi72XQHoafv2RkZ5zg.mft (raw, json)
Hash identifier:          As3ONmADZD5Wq5Vcg1Zye2+SCtl9B+OYxJx78A81gjQ=
Subject key identifier:   1C:7C:E8:41:9E:BB:F3:46:BC:2F:C4:93:40:EC:99:DA:A6:E5:33:82
Authority key identifier: 4F:F4:DB:B6:75:EE:08:E8:BB:D9:74:07:A1:A7:EF:D9:19:19:E7:38
Certificate issuer:       /CN=4ff4dbb675ee08e8bbd97407a1a7efd91919e738
Certificate serial:       0194BBCEA908A8E6241FC899C96A439591F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T_TbtnXuCOi72XQHoafv2RkZ5zg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft
Manifest number:          0D40
Signing time:             Fri 31 Jan 2025 10:01:10 +0000
Manifest this update:     Fri 31 Jan 2025 10:01:10 +0000
Manifest next update:     Sat 01 Feb 2025 10:01:10 +0000
Files and hashes:         1: T_TbtnXuCOi72XQHoafv2RkZ5zg.crl (hash: skZWD3npjeaUU9/IVODVMTm53n/fWpeL+xjwEoBKxRY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:a9:08:a8:e6:24:1f:c8:99:c9:6a:43:95:91:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ff4dbb675ee08e8bbd97407a1a7efd91919e738
        Validity
            Not Before: Jan 31 10:01:10 2025 GMT
            Not After : Feb  1 10:01:10 2025 GMT
        Subject: CN=1c7ce8419ebbf346bc2fc49340ec99daa6e53382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ee:75:4e:e3:2f:a6:46:82:45:f6:71:15:e8:
                    78:f0:5b:7c:2e:81:0a:0f:b2:a4:20:94:da:2a:19:
                    04:a6:80:dd:2f:d7:6b:c3:2e:1a:48:6f:dc:0f:ea:
                    eb:09:e8:5b:b1:6f:d0:c8:b4:3e:b7:68:88:e6:68:
                    38:d1:b9:de:08:b0:05:f6:5a:a2:a5:73:d1:ff:f6:
                    17:82:cd:0f:40:06:72:2b:17:dc:48:5c:67:ab:7e:
                    8c:e8:dc:a6:7e:a7:b2:e4:ce:31:88:5d:d8:5c:08:
                    f8:03:ac:69:13:ee:21:ea:c3:64:6b:94:93:c4:1c:
                    8f:d1:ed:49:45:f4:70:69:1e:44:1c:9d:f0:5d:fb:
                    77:da:d0:44:51:47:d0:30:c3:ff:bc:46:ec:43:13:
                    8b:30:d6:08:7b:c0:a8:fb:21:f3:1a:4f:14:43:a2:
                    b0:f6:a4:1e:6e:a2:db:7f:07:be:c8:46:ac:81:8c:
                    da:13:88:56:b9:01:58:c1:fa:cf:1c:92:f5:44:a4:
                    c8:e4:07:bc:a5:14:3e:0a:e1:a0:3f:42:9c:20:9f:
                    6f:17:25:e8:41:e9:7f:57:03:e5:f6:c4:8c:45:c5:
                    28:8b:30:9a:ea:1a:4d:c3:2c:c4:fe:e1:42:75:dd:
                    59:38:cb:75:e8:66:bd:79:9c:33:4d:38:85:6b:b7:
                    fd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:7C:E8:41:9E:BB:F3:46:BC:2F:C4:93:40:EC:99:DA:A6:E5:33:82
            X509v3 Authority Key Identifier:
                keyid:4F:F4:DB:B6:75:EE:08:E8:BB:D9:74:07:A1:A7:EF:D9:19:19:E7:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T_TbtnXuCOi72XQHoafv2RkZ5zg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/fb93ea-6163-47ec-8bdc-63d90e664822/1/T_TbtnXuCOi72XQHoafv2RkZ5zg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:5d:40:42:56:d5:97:6c:3f:4c:3c:8d:0f:0f:0a:85:88:94:
         72:83:d5:b5:5b:db:53:5d:68:2e:d3:d8:38:6d:09:f3:c1:1a:
         97:49:fc:07:49:72:44:3e:da:f5:f8:44:2f:52:f0:7d:21:6e:
         c5:2b:62:d4:10:81:8b:7b:91:ce:cf:09:10:72:a7:7d:e8:8b:
         d9:70:cd:d9:44:9e:ac:95:66:c6:df:dd:fb:88:25:98:b7:7c:
         ca:c9:a6:70:35:21:9a:b0:d3:79:6a:e8:5e:17:56:c1:56:44:
         62:42:9c:f3:2b:9a:5b:51:33:41:1a:3b:63:84:1d:d0:05:34:
         b4:4e:59:90:f4:14:4a:c8:52:31:04:40:7f:61:65:2e:dd:09:
         e6:b4:1d:9b:6a:0f:2c:d0:a4:6f:7f:89:ae:9a:05:3e:58:4e:
         db:e4:c7:39:ee:41:6c:f2:f9:14:3a:3a:2b:72:80:d9:5e:ea:
         90:ab:56:58:4a:59:17:84:56:18:06:2a:b0:fa:2f:2a:57:e5:
         37:8b:b1:b7:af:9c:0b:b8:bc:62:5d:61:29:7c:1d:e7:db:fe:
         c2:dd:25:73:b7:ad:1b:86:02:ac:5b:e5:21:4f:75:93:46:54:
         7c:d6:28:68:0f:b0:21:ab:8e:0e:01:16:4b:38:1f:b0:98:d2:
         e1:3c:95:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zqkIqOYkH8iZyWpDlZHzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmZjRkYmI2NzVlZTA4ZThiYmQ5NzQwN2ExYTdlZmQ5MTkx
OWU3MzgwHhcNMjUwMTMxMTAwMTEwWhcNMjUwMjAxMTAwMTEwWjAzMTEwLwYDVQQD
EygxYzdjZTg0MTllYmJmMzQ2YmMyZmM0OTM0MGVjOTlkYWE2ZTUzMzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+51TuMvpkaCRfZxFeh48Ft8LoEK
D7KkIJTaKhkEpoDdL9drwy4aSG/cD+rrCehbsW/QyLQ+t2iI5mg40bneCLAF9lqi
pXPR//YXgs0PQAZyKxfcSFxnq36M6Nymfqey5M4xiF3YXAj4A6xpE+4h6sNka5ST
xByP0e1JRfRwaR5EHJ3wXft32tBEUUfQMMP/vEbsQxOLMNYIe8Co+yHzGk8UQ6Kw
9qQebqLbfwe+yEasgYzaE4hWuQFYwfrPHJL1RKTI5Ae8pRQ+CuGgP0KcIJ9vFyXo
Qel/VwPl9sSMRcUoizCa6hpNwyzE/uFCdd1ZOMt16Ga9eZwzTTiFa7f9HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBx86EGeu/NGvC/Ek0Dsmdqm5TOCMB8GA1UdIwQY
MBaAFE/027Z17gjou9l0B6Gn79kZGec4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVF9UYnRuWHVDT2k3MlhRSG9hZnYyUmtaNXpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9mYjkzZWEtNjE2My00N2VjLThiZGMt
NjNkOTBlNjY0ODIyLzEvVF9UYnRuWHVDT2k3MlhRSG9hZnYyUmtaNXpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9mYjkzZWEtNjE2My00N2VjLThiZGMtNjNkOTBlNjY0ODIy
LzEvVF9UYnRuWHVDT2k3MlhRSG9hZnYyUmtaNXpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXl1AQlbV
l2w/TDyNDw8KhYiUcoPVtVvbU11oLtPYOG0J88Eal0n8B0lyRD7a9fhEL1LwfSFu
xSti1BCBi3uRzs8JEHKnfeiL2XDN2USerJVmxt/d+4glmLd8ysmmcDUhmrDTeWro
XhdWwVZEYkKc8yuaW1EzQRo7Y4Qd0AU0tE5ZkPQUSshSMQRAf2FlLt0J5rQdm2oP
LNCkb3+JrpoFPlhO2+THOe5BbPL5FDo6K3KA2V7qkKtWWEpZF4RWGAYqsPovKlfl
N4uxt6+cC7i8Yl1hKXwd59v+wt0lc7etG4YCrFvlIU91k0ZUfNYoaA+wIauODgEW
SzgfsJjS4TyVBw==
-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:35 2025 by rpki-client