Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
File:                     TuhDqF3WZOncAxCJK9fdnOUlkcc.mft (raw, json)
Hash identifier:          NOeNlPwNoTIfvA0XzCKR3KTx1n3GibPNG8t7arg3zAo=
Subject key identifier:   1F:6A:CA:04:DA:16:8E:A1:FB:19:F0:A3:E3:DE:74:93:03:16:CE:71
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Certificate issuer:       /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial:       0194BBCE34FF944182F15346ECBAC18E5833
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft
Manifest number:          1439
Signing time:             Fri 31 Jan 2025 10:00:40 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:40 +0000
Manifest next update:     Sat 01 Feb 2025 10:00:40 +0000
Files and hashes:         1: C0z6DdMKY0011CEMg0brREHft8I.roa (hash: +dbFWwxBIyFnN27a31OlolUnKb6JKZSNaPcmvgDSLGs=)
                          2: GkzUiQjxAwqkp5Z39cxt3GUWIng.roa (hash: vLNapJVPwIEWIsnPkWMH8DeeJJAdXd67gcOUXS+rDWA=)
                          3: HGF0XnEulxWULqSPMu5rErMyWs8.roa (hash: 00NcZYCZGF+IaFRnbk/Q2PKjg8CgZv2ruaoed5i5QAU=)
                          4: Jf9tWqpPm8b_qtBGjgHB3JrayvI.roa (hash: F+vaHx2nXHjw+peb75MX84DsisidlKe5+WsqVxKmiwg=)
                          5: QKwROlQM-_7u8gKJ-Lg37KQ_boU.roa (hash: Fa0oIDfIQnPmvyxAKLNkB0kAHP+b9oUKAQ9IQ1FgP5k=)
                          6: RMcCzrlu2sJ4XSxYoo8m_7o27EI.roa (hash: nNPJHMZXA57YTnbJiFW2Eg774bTCKrqipOlc615iB9U=)
                          7: TuhDqF3WZOncAxCJK9fdnOUlkcc.crl (hash: ZexbYTRBVUrvRmcL3MEkdgZO/JgzDOscC36194pVLlQ=)
                          8: d2OIjSeYBVWvYxP4n_ODfkSTTf4.roa (hash: be0M2z23DoEhwT4FhHP2BW24O0nYk4oyMfhX4PQ+pRo=)
                          9: k0c655RtHVAv5VenJ67F29SWhuc.roa (hash: hr75P5l79VgHodFxnHOuC7mIYeQ5S0TGyQcgAwawdyM=)
                          10: r-swhppIcOXVOL-qulJXjDeie58.roa (hash: tLe4aQVO3I/Ibbb/ytDDCDyBYPXI1bQa/rhwVMn9mk0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bb:ce:34:ff:94:41:82:f1:53:46:ec:ba:c1:8e:58:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
        Validity
            Not Before: Jan 31 10:00:40 2025 GMT
            Not After : Feb  1 10:00:40 2025 GMT
        Subject: CN=1f6aca04da168ea1fb19f0a3e3de74930316ce71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:0b:eb:43:c9:a0:89:fa:fa:4e:ab:cb:c2:1c:
                    f7:e2:12:ab:47:3a:ce:e6:db:67:3a:b7:fd:c6:b3:
                    08:4e:2e:8f:e6:0d:b6:a7:d7:ed:88:60:d8:23:2a:
                    5f:cc:ae:c6:3f:2e:75:63:c2:00:c7:85:4d:d6:17:
                    8c:de:88:5a:ec:d2:77:a1:ad:40:74:64:97:b2:27:
                    ee:09:fa:d5:10:79:0a:eb:8e:16:8f:0a:97:ad:12:
                    ed:a6:39:3d:2b:96:7f:de:8a:6c:22:18:1a:bb:13:
                    57:2b:97:dd:e8:19:04:5f:93:94:91:19:43:2a:80:
                    95:26:86:e8:35:e6:1d:bd:ea:83:b9:1b:2f:be:7e:
                    05:80:d6:36:c8:ba:dd:91:1e:5e:6e:22:27:30:4b:
                    c8:fb:a4:01:72:e3:c2:8a:bb:15:ce:fa:82:7d:d0:
                    bf:d7:3a:75:40:d9:a7:26:cd:08:c3:27:8f:d1:27:
                    b1:60:2f:51:4c:7a:95:98:84:90:60:c8:e8:63:e3:
                    8b:e9:c0:c6:97:16:b7:33:75:08:8b:60:64:e0:4e:
                    24:44:73:5c:8a:75:57:3b:88:2f:ef:9e:5f:44:2a:
                    29:d2:61:3f:39:40:a7:de:16:96:0a:79:c4:94:d8:
                    28:1a:29:88:35:6e:89:5b:d5:79:07:df:14:67:b1:
                    a3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:6A:CA:04:DA:16:8E:A1:FB:19:F0:A3:E3:DE:74:93:03:16:CE:71
            X509v3 Authority Key Identifier:
                keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:ea:ab:c3:12:50:74:4a:de:0f:45:85:cc:3b:d3:10:e7:27:
         aa:45:b9:7c:f1:3e:f1:3f:1c:08:ae:41:fd:04:a1:c0:30:da:
         40:df:2c:4f:99:bd:d4:db:b6:1a:94:52:72:df:69:8b:96:c2:
         ab:5f:6e:f3:bb:13:bf:ca:1e:b5:3f:16:c2:9e:dd:ce:36:b9:
         b8:e4:3b:77:ab:58:af:a9:fe:65:3d:f8:9e:24:f4:5f:b2:95:
         bd:68:e0:6f:41:29:26:e0:5e:d5:7d:e8:dd:12:64:6b:7a:fe:
         0d:9a:c1:e6:31:91:40:10:0d:fe:d4:61:84:f5:5d:09:6e:90:
         af:33:03:cb:bd:05:f5:d1:1e:06:b7:9a:c4:7a:0b:3c:ee:95:
         6a:8a:40:90:bb:a2:a5:69:fe:c5:21:bd:99:10:8f:2f:77:33:
         84:55:f4:30:d7:9e:be:ca:16:f8:53:e5:c5:fa:96:6e:98:b5:
         49:e3:70:05:b2:ef:07:37:31:93:60:b3:e4:ed:b5:13:9c:85:
         68:36:0d:3a:13:45:e4:e1:d3:ca:75:7c:a2:aa:e0:0a:70:ad:
         d6:30:8d:da:36:58:62:bf:03:97:aa:de:33:6f:e4:7d:c8:39:
         c0:c8:75:1f:1e:63:16:ac:bd:b6:c0:f9:8b:5c:0d:54:f2:f9:
         fd:32:a2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----