Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
File:                     Tni20AYU9VZdnYr4JHzHLqm4gz0.mft (raw, json)
Hash identifier:          UeGGQDMZ12sE91djq0XQVXyTcLSpmjGp8aBlO9AjWro=
Subject key identifier:   56:23:0A:07:48:1B:C4:16:95:FA:11:D8:96:D6:72:54:72:2D:1D:14
Authority key identifier: 4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D
Certificate issuer:       /CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
Certificate serial:       0194BD4E9E38E27C89A5731E853DC7D258A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft
Manifest number:          1197
Signing time:             Fri 31 Jan 2025 17:00:33 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:33 +0000
Manifest next update:     Sat 01 Feb 2025 17:00:33 +0000
Files and hashes:         1: 7IRfmWARQa1gscBNY6wwrdQkZww.roa (hash: CmqSWp3rlUbIbUgWN9uSD/eKPbnLnNyBdNG11QBDz1o=)
                          2: GZmRGff5SY6f2maFjy40WztZsVQ.roa (hash: 0CrTdIjKS9GI6i9LLy/Cey6tOh/vSgO5QV5+zMEjuho=)
                          3: Tni20AYU9VZdnYr4JHzHLqm4gz0.crl (hash: FeHDfKuhkx7aNYQ/gWnKyDM8t2JWyNedGyfgjtvESTc=)
                          4: ZKVdzQrCXu5mzOlv7FGCL2aQx9o.roa (hash: YxpuZj2Kv5nLT3u4CJE0gbWGMjfbkqvjdVZv+AJXYYo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:4e:9e:38:e2:7c:89:a5:73:1e:85:3d:c7:d2:58:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e78b6d00614f5565d9d8af8247cc72ea9b8833d
        Validity
            Not Before: Jan 31 17:00:33 2025 GMT
            Not After : Feb  1 17:00:33 2025 GMT
        Subject: CN=56230a07481bc41695fa11d896d67254722d1d14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c6:d5:96:12:08:24:27:38:9e:d6:ee:77:d7:
                    3a:28:13:b1:8a:34:ba:45:f5:9d:4b:cb:20:2d:30:
                    81:62:90:49:37:1a:80:f8:ff:7f:b6:78:06:22:1e:
                    10:74:16:4f:7a:80:45:78:3e:a5:e8:52:e1:f6:1f:
                    da:5b:d2:cf:91:86:26:ef:f9:05:ef:79:47:ca:69:
                    7e:2b:29:4a:b4:ea:f7:a5:ce:4b:3c:f3:87:95:5b:
                    f1:46:09:f2:6b:e8:42:33:bd:e2:97:c1:d5:81:ca:
                    ec:29:b7:02:32:b2:8d:bd:8b:0c:da:7d:85:49:3c:
                    9a:c5:67:6e:34:63:1c:d5:d7:b2:a1:9d:ce:e5:48:
                    ec:41:89:1b:ac:7a:be:a1:63:db:5a:fc:a6:41:e1:
                    e1:84:13:b3:25:4c:e2:51:68:50:1d:4d:cf:4a:a5:
                    01:ca:3e:36:43:3c:8a:80:01:69:74:9a:7b:a3:67:
                    f4:07:7b:64:68:dc:ef:75:9f:a7:f3:d6:c7:be:d7:
                    8b:89:c8:f0:01:af:f9:25:ad:75:03:22:3f:f3:d8:
                    4d:65:31:0d:b3:a6:79:41:0b:ec:56:13:48:99:77:
                    e1:9f:c8:31:15:eb:82:41:b9:0b:67:1b:9c:d4:fe:
                    97:d5:6e:7e:13:ce:34:aa:5c:a9:2d:2c:05:b3:07:
                    f8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:23:0A:07:48:1B:C4:16:95:FA:11:D8:96:D6:72:54:72:2D:1D:14
            X509v3 Authority Key Identifier:
                keyid:4E:78:B6:D0:06:14:F5:56:5D:9D:8A:F8:24:7C:C7:2E:A9:B8:83:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tni20AYU9VZdnYr4JHzHLqm4gz0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cb8265-c632-4813-b858-def386743f32/1/Tni20AYU9VZdnYr4JHzHLqm4gz0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:17:42:5d:9e:98:fb:dc:45:f9:21:57:68:6f:91:63:92:7f:
         ba:40:71:e3:79:69:ab:b0:2c:47:e7:4b:b6:68:b5:16:83:21:
         0e:a0:e0:0b:5d:a1:88:b6:b2:88:9e:59:8a:80:dd:38:86:43:
         6c:4a:2a:23:f5:de:21:bd:6e:14:dd:54:99:98:62:ea:b3:e7:
         59:2e:0f:9b:df:b8:d0:0e:6c:c0:40:7d:af:06:46:2e:a9:ee:
         07:57:9f:e9:85:be:ec:a9:5e:3b:39:34:1d:de:ff:26:30:44:
         cd:54:1d:95:2f:32:90:68:ea:fa:81:7a:78:78:d9:1c:d5:e0:
         b6:00:9b:d5:39:2d:d4:98:a5:7c:c7:10:d0:a6:56:03:66:e6:
         45:f1:f4:4f:e3:96:8d:b1:47:05:3f:3e:84:ab:87:58:0e:b1:
         73:e0:6d:53:dc:5c:90:ae:73:30:d4:fd:6e:7c:e1:b0:59:8a:
         97:60:6f:38:59:36:64:e3:0f:cb:1a:47:4b:15:44:08:75:9d:
         3d:d1:83:28:f6:f8:f3:9a:79:e2:18:65:46:55:3a:55:f0:d3:
         b9:2b:15:56:85:10:be:2e:6a:90:1c:41:71:75:ad:2c:c3:1b:
         27:e0:6e:38:70:94:95:97:73:41:da:1e:9d:d9:5a:cb:a1:3e:
         ff:f3:ef:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----