Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
File:                     TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft (raw, json)
Hash identifier:          3mCJyULJau5S4XLvjyVW5FpTpuPTx1wU/9ksYbO9wtM=
Subject key identifier:   E1:6E:96:7F:B5:1C:2E:98:15:5A:80:FC:D8:6D:D3:E5:AC:C9:C5:9E
Authority key identifier: 4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60
Certificate issuer:       /CN=4c6319fe7859c342f7cd9f711306f56590828d60
Certificate serial:       0194BCA9959FD188F26BABC4D21099160409
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft
Manifest number:          0953
Signing time:             Fri 31 Jan 2025 14:00:17 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:17 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:17 +0000
Files and hashes:         1: 7AICHMFq1kSjCOJXzQDO4zRvMc8.roa (hash: p5CUpe/5DfGPJwjUzsORFP9UxiFbMunTvT9GArgSAt4=)
                          2: TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl (hash: TU514TGiJ39fnmgFTWizWwbUF41BS5wkjcl/DjL920A=)
                          3: t5BDJd8Dzrg2IC09MFuU9BxT5Uk.roa (hash: 9AOu1bBqC0e4A6DdOt1aKlQ9vH6ddvoaCculzcrBvgw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:95:9f:d1:88:f2:6b:ab:c4:d2:10:99:16:04:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c6319fe7859c342f7cd9f711306f56590828d60
        Validity
            Not Before: Jan 31 14:00:17 2025 GMT
            Not After : Feb  1 14:00:17 2025 GMT
        Subject: CN=e16e967fb51c2e98155a80fcd86dd3e5acc9c59e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ea:0d:6b:8f:2a:56:37:92:46:bf:76:42:12:
                    0a:46:4b:bd:09:ab:8e:54:7e:9f:38:02:be:47:95:
                    57:3b:79:e9:55:8d:a0:3a:c9:a0:f9:95:92:17:92:
                    d7:e2:55:6a:a8:17:11:4e:24:41:79:7c:fb:19:d4:
                    34:3b:93:b5:42:bb:7a:d9:d8:48:cc:a5:5c:97:8b:
                    17:59:5a:37:2c:53:ec:7f:00:1f:aa:d1:19:13:9b:
                    1e:dd:7d:5f:15:4c:75:57:7f:3c:96:6e:f6:75:6b:
                    65:8d:28:5d:f9:1d:6d:65:ec:8f:78:45:41:6a:a4:
                    12:12:57:18:6e:a4:dc:18:43:5a:0c:2b:15:4f:7e:
                    5f:83:8b:a9:50:6b:0b:b5:85:ca:65:85:8c:39:b5:
                    30:5f:8f:d3:d5:e8:75:26:76:eb:d5:b2:e9:36:64:
                    78:78:e8:fd:19:ec:e0:07:1d:ca:ab:2d:26:04:2c:
                    d7:aa:f7:93:88:ea:1b:bf:4e:b2:2e:95:d1:b7:c0:
                    cf:b6:ce:a2:32:3e:4f:7b:59:77:b6:df:1d:5e:e3:
                    12:5e:ad:bd:e7:92:46:63:4b:8c:4a:d3:f6:da:e0:
                    e8:b3:f5:db:f5:bc:42:21:ef:b2:9d:b1:83:92:1c:
                    1e:3f:22:82:4b:2d:b0:de:8d:d3:7b:a8:ba:aa:bb:
                    fa:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6E:96:7F:B5:1C:2E:98:15:5A:80:FC:D8:6D:D3:E5:AC:C9:C5:9E
            X509v3 Authority Key Identifier:
                keyid:4C:63:19:FE:78:59:C3:42:F7:CD:9F:71:13:06:F5:65:90:82:8D:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/93/01e7df-1410-491f-a71b-55830f9edde4/1/TGMZ_nhZw0L3zZ9xEwb1ZZCCjWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:b1:99:87:dd:4d:0d:91:41:ab:3f:60:a2:07:d4:3a:05:06:
         5f:13:bd:54:cf:1a:73:2b:93:2b:c5:56:3b:eb:a7:86:52:5f:
         8c:45:8d:94:28:6a:89:57:27:2f:6b:2a:2d:f5:a0:32:e7:10:
         19:f6:6d:3e:bd:f0:e6:83:af:6a:f1:e9:92:7d:59:85:06:0d:
         1c:7e:6d:08:77:59:11:9b:39:25:fe:40:19:9b:5b:ca:a8:5d:
         87:69:b2:ad:6a:56:7c:69:e7:a1:81:f5:e2:4a:52:71:55:24:
         5b:0c:04:51:95:a7:ae:79:27:e1:b1:34:af:f2:47:ec:3f:20:
         ef:f8:da:c8:16:97:60:4a:da:2c:be:e7:bf:5a:db:1d:83:61:
         56:82:e1:83:7b:59:37:4a:b6:4e:10:0b:46:42:ab:71:ab:03:
         06:13:2e:9f:8c:9a:65:5f:1b:b2:5b:46:39:17:3c:ae:e4:26:
         0f:fa:30:0f:03:0e:f4:82:cc:f7:c5:f8:69:eb:87:3a:06:08:
         a4:c9:1d:3c:47:df:cd:5a:46:3f:32:08:bc:f7:8f:41:85:34:
         2f:38:05:d7:ba:2d:ff:20:22:73:4e:ad:85:13:f0:f5:ef:78:
         de:63:85:a6:fe:ae:ac:9f:56:d1:f3:a7:26:c3:7a:69:35:b5:
         02:13:c7:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:14 2025 by rpki-client