Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
File:                     tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft (raw, json)
Hash identifier:          RImHD5JBxttV2xHaFFKgo61IDJ4kDUV/yfvcrjCc9Kw=
Subject key identifier:   DD:F0:49:DC:04:69:D9:F3:05:05:F9:04:75:F2:81:54:3C:C1:F3:F1
Authority key identifier: B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7
Certificate issuer:       /CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
Certificate serial:       0194BCE0720BB138349ECA7CC661C35A62C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft
Manifest number:          0315
Signing time:             Fri 31 Jan 2025 15:00:13 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:13 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:13 +0000
Files and hashes:         1: Zw8tldKF4IamTYiqaUWTp-ORWaM.roa (hash: +YY2MSi0DHjKWNmQtrNLuY1Ni5g7MizVHlrZ12WPMsk=)
                          2: tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl (hash: XuHyIFEpkMMLWIGMkwmDYsEnHvMAVGrsG7g8Yoa5AtE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:72:0b:b1:38:34:9e:ca:7c:c6:61:c3:5a:62:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b63f9769df97b8b9aa88bd22e9f41cc27fcf16a7
        Validity
            Not Before: Jan 31 15:00:13 2025 GMT
            Not After : Feb  1 15:00:13 2025 GMT
        Subject: CN=ddf049dc0469d9f30505f90475f281543cc1f3f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b5:f7:d4:db:8c:cd:61:6e:31:b4:58:1d:a7:
                    3c:2f:bd:75:34:1c:79:82:9f:a7:9c:a3:1a:bc:db:
                    87:80:30:30:6b:be:45:05:d1:9c:74:3f:a0:82:e8:
                    a3:5c:05:2a:4f:9a:95:53:ac:9d:0d:0e:f9:d0:3f:
                    19:39:2d:a6:72:29:40:5c:ec:0e:9a:08:d6:f8:07:
                    68:1c:f3:89:ed:19:7f:88:f9:74:fe:67:f9:87:ac:
                    73:74:4b:a6:f8:c9:1c:2b:4b:b3:e1:4b:60:8d:ff:
                    d0:62:82:90:be:e2:b9:16:a3:a0:bf:21:2b:e6:4d:
                    b4:0d:b7:1f:dd:09:27:a7:1d:12:d7:32:c2:9b:a7:
                    85:2d:06:7b:4d:d8:e6:26:1c:f8:d5:b6:5a:09:b2:
                    43:bb:23:96:37:99:4b:95:fb:e1:2c:99:3a:59:00:
                    02:03:d4:01:6d:f8:c4:14:b3:41:cd:21:5d:2a:d3:
                    ab:e0:9b:75:28:6e:3a:b8:19:d9:e3:5e:bf:10:09:
                    38:12:fb:98:39:58:b2:62:95:cf:d5:3f:0d:a6:78:
                    88:af:f9:99:c4:ee:86:35:6e:f3:9d:f3:27:fc:90:
                    13:7c:b8:9c:0b:ce:64:d1:a0:16:29:46:09:f9:cb:
                    e7:ca:38:64:3b:fa:ce:e1:19:91:f4:3e:1b:21:db:
                    92:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:F0:49:DC:04:69:D9:F3:05:05:F9:04:75:F2:81:54:3C:C1:F3:F1
            X509v3 Authority Key Identifier:
                keyid:B6:3F:97:69:DF:97:B8:B9:AA:88:BD:22:E9:F4:1C:C2:7F:CF:16:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj-Xad-XuLmqiL0i6fQcwn_PFqc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/594e08-1665-4348-80a4-3be9a66972e7/1/tj-Xad-XuLmqiL0i6fQcwn_PFqc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:61:f3:cd:d1:96:ae:31:de:06:a6:ab:71:d2:d6:d7:29:7b:
         06:5f:d6:bb:95:2a:e5:d7:1f:a7:8f:b2:41:92:6d:82:b9:23:
         aa:6e:71:7a:da:65:ba:0d:4a:1e:dc:b3:bb:68:51:ba:92:b1:
         b9:43:bf:ae:03:1e:30:36:07:20:db:3d:bf:0a:19:c1:7c:0d:
         52:3a:7b:07:20:d3:cc:05:52:14:31:c6:62:9f:38:17:bc:2e:
         86:23:40:6c:c7:c4:b1:83:5e:ee:57:a8:7f:90:88:11:2b:13:
         d6:8b:c4:1a:b7:63:8a:97:2e:6d:a9:9d:1c:32:f9:41:ca:33:
         f9:51:d4:b6:d5:e3:27:9b:80:bb:f5:36:21:48:93:25:f9:ec:
         ea:96:6a:9d:c7:58:c9:0c:8a:69:ea:55:e9:f4:ad:e7:3a:7f:
         a9:ec:40:d6:c3:c8:1d:0c:e7:0e:0c:6c:5a:0f:a8:15:96:2e:
         05:da:6e:62:20:13:6b:6d:a9:2f:77:53:0b:f1:50:b9:6c:91:
         74:b9:46:d7:f6:06:6f:f2:d5:d4:49:a2:c3:5d:41:3e:00:a9:
         6e:84:9f:7d:f1:b5:86:8e:e3:a1:eb:15:14:6e:ad:13:1b:80:
         2b:92:af:be:67:d4:b4:3a:48:b2:28:76:ea:12:37:ed:2b:60:
         44:29:b7:51
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS84HILsTg0nsp8xmHDWmLJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI2M2Y5NzY5ZGY5N2I4YjlhYTg4YmQyMmU5ZjQxY2MyN2Zj
ZjE2YTcwHhcNMjUwMTMxMTUwMDEzWhcNMjUwMjAxMTUwMDEzWjAzMTEwLwYDVQQD
EyhkZGYwNDlkYzA0NjlkOWYzMDUwNWY5MDQ3NWYyODE1NDNjYzFmM2YxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rX31NuMzWFuMbRYHac8L711NBx5
gp+nnKMavNuHgDAwa75FBdGcdD+gguijXAUqT5qVU6ydDQ750D8ZOS2mcilAXOwO
mgjW+AdoHPOJ7Rl/iPl0/mf5h6xzdEum+MkcK0uz4Utgjf/QYoKQvuK5FqOgvyEr
5k20Dbcf3Qknpx0S1zLCm6eFLQZ7TdjmJhz41bZaCbJDuyOWN5lLlfvhLJk6WQAC
A9QBbfjEFLNBzSFdKtOr4Jt1KG46uBnZ416/EAk4EvuYOViyYpXP1T8NpniIr/mZ
xO6GNW7znfMn/JATfLicC85k0aAWKUYJ+cvnyjhkO/rO4RmR9D4bIduSmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3wSdwEadnzBQX5BHXygVQ8wfPxMB8GA1UdIwQY
MBaAFLY/l2nfl7i5qoi9Iun0HMJ/zxanMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGotWGFkLVh1TG1xaUwwaTZmUWN3bl9QRnFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC81OTRlMDgtMTY2NS00MzQ4LTgwYTQt
M2JlOWE2Njk3MmU3LzEvdGotWGFkLVh1TG1xaUwwaTZmUWN3bl9QRnFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC81OTRlMDgtMTY2NS00MzQ4LTgwYTQtM2JlOWE2Njk3MmU3
LzEvdGotWGFkLVh1TG1xaUwwaTZmUWN3bl9QRnFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe2HzzdGW
rjHeBqarcdLW1yl7Bl/Wu5Uq5dcfp4+yQZJtgrkjqm5xetplug1KHtyzu2hRupKx
uUO/rgMeMDYHINs9vwoZwXwNUjp7ByDTzAVSFDHGYp84F7wuhiNAbMfEsYNe7leo
f5CIESsT1ovEGrdjipcubamdHDL5Qcoz+VHUttXjJ5uAu/U2IUiTJfns6pZqncdY
yQyKaepV6fSt5zp/qexA1sPIHQznDgxsWg+oFZYuBdpuYiATa22pL3dTC/FQuWyR
dLlG1/YGb/LV1Emiw11BPgCpboSfffG1ho7joesVFG6tExuAK5KvvmfUtDpIsih2
6hI37StgRCm3UQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:24 2025 by rpki-client