Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
File:                     TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft (raw, json)
Hash identifier:          Ju+6h4pssQj1PLQg0JugXaSOIg1UygiSbc+bbidMGqQ=
Subject key identifier:   AB:0E:C8:A9:0F:B4:8B:C1:64:7C:CF:2D:E1:EF:FF:A9:28:4C:87:96
Authority key identifier: 4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A
Certificate issuer:       /CN=4eeb86abd5374e553098209075b9afecabef333a
Certificate serial:       0194BCAA13E8D30F6D6802A527E296C7AB7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft
Manifest number:          1236
Signing time:             Fri 31 Jan 2025 14:00:50 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:50 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:50 +0000
Files and hashes:         1: Ie5KawkP4b238jzWIkt7U1G1OH0.roa (hash: b/NOk3BaQteK7RVlxUiaRcKQ/ZGCaP84MpBuSn/nXxo=)
                          2: TeFv9Kd2FbNzufUz1M4EUtdT3Xg.roa (hash: zGrnYc3nuLuo0nlpuHPKJrCPtCdE57liuR6ITCdonSo=)
                          3: TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl (hash: BxfiJ1XLHG5Mx2AIG74uJqpk2S4hPr9Dk2DIfydnkPA=)
                          4: fKqCvV2H60_x150GJIr8SOki8EQ.roa (hash: 98Ec8/KhgOPbJ2tyXNrhxum2eZJOHwRc2ckcftcm0no=)
                          5: yX8SV9VGJFhES7mUS6-LTvmXGx8.roa (hash: yb6TAx+2YgX4WVBv0Avw9JYkbGFg7vg0qrXoYZM9Y3E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:aa:13:e8:d3:0f:6d:68:02:a5:27:e2:96:c7:ab:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4eeb86abd5374e553098209075b9afecabef333a
        Validity
            Not Before: Jan 31 14:00:50 2025 GMT
            Not After : Feb  1 14:00:50 2025 GMT
        Subject: CN=ab0ec8a90fb48bc1647ccf2de1efffa9284c8796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:5b:fe:d7:cb:f1:5f:6f:d2:c3:87:31:04:0f:
                    c3:d1:c4:1b:ae:ff:8e:2d:f5:18:c6:6f:39:27:69:
                    5e:8b:c6:ed:dd:8c:77:8e:ac:e2:b9:f1:5f:d4:2a:
                    68:ee:e4:ea:e7:a4:b5:25:ba:8f:b5:7a:a7:32:36:
                    d4:d1:9f:4e:dd:ea:05:42:f4:e2:40:d4:e3:09:cd:
                    26:80:24:14:49:2b:f1:0b:4e:ea:f7:a2:3d:a0:36:
                    db:13:b9:3c:a4:f1:57:bc:3d:96:83:3f:0c:d5:e5:
                    be:67:af:5a:e7:d7:3b:ba:2d:36:85:52:db:37:fa:
                    4b:06:13:d5:48:0a:1e:89:8b:7b:39:41:89:19:c0:
                    60:48:0a:0c:d0:c8:e8:d5:4a:d6:2c:92:9f:81:aa:
                    ff:87:b3:a0:e6:e6:26:92:52:14:eb:4c:3a:0a:93:
                    01:7a:88:d1:19:3e:e4:3d:47:85:2e:c3:bb:be:c2:
                    1b:07:30:5c:0d:c2:bf:e8:9a:fb:31:41:38:7d:51:
                    84:12:25:a6:54:be:65:f1:52:23:96:1a:c3:1b:4e:
                    d2:1b:02:6a:87:25:c1:ac:3c:58:b8:05:a2:41:82:
                    c0:cf:f7:82:5c:bc:8c:26:83:05:82:3a:9a:06:44:
                    70:72:e0:a1:38:76:9a:51:fe:0e:42:8a:d7:2b:88:
                    2d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:0E:C8:A9:0F:B4:8B:C1:64:7C:CF:2D:E1:EF:FF:A9:28:4C:87:96
            X509v3 Authority Key Identifier:
                keyid:4E:EB:86:AB:D5:37:4E:55:30:98:20:90:75:B9:AF:EC:AB:EF:33:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuuGq9U3TlUwmCCQdbmv7KvvMzo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/3e5c96-7e95-4797-aa6a-a8978e3aae98/1/TuuGq9U3TlUwmCCQdbmv7KvvMzo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:a9:80:78:39:1a:a4:03:e0:91:30:34:4f:5b:73:ff:c8:55:
         91:13:1d:2f:99:7c:21:9a:f1:3f:13:c5:3b:b5:1c:a0:24:b6:
         63:b5:0c:c6:39:bd:9d:f0:e2:ad:db:53:92:61:4d:29:23:73:
         52:de:05:71:39:14:bc:93:32:f5:11:f6:e1:46:70:58:ee:4d:
         d9:1d:f6:12:2c:ec:dd:f4:9d:94:76:ba:c3:75:1c:bd:63:29:
         4f:ec:be:68:02:74:a8:04:0f:03:a4:2f:98:72:69:a2:83:53:
         ee:b7:47:11:ab:83:04:a2:d7:0f:b6:1c:78:b1:23:c3:c0:c6:
         0c:aa:3a:31:f2:8e:4f:19:bb:a5:56:d3:38:f6:db:0b:29:5f:
         7b:a9:ac:20:ec:dd:b7:e5:9b:23:36:af:66:32:98:98:dc:89:
         e9:63:e6:43:7f:13:75:85:14:23:20:c3:76:2e:a1:2b:02:1a:
         40:6f:73:0a:d9:df:1c:59:7a:e8:c9:d8:aa:c1:28:2f:c2:cb:
         23:15:ea:9a:f5:48:17:b0:80:f2:a0:88:44:29:76:08:1f:69:
         f4:e9:e0:eb:84:6b:e5:05:af:bd:92:a6:82:e2:60:01:15:a6:
         d4:34:0d:ed:2d:43:f5:ed:90:a7:05:59:cc:4a:0f:bb:41:68:
         39:4d:05:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:08 2025 by rpki-client