Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
File:                     v1Tb8A10WQyJE97Isc8ITY_PaTw.mft (raw, json)
Hash identifier:          PHz3Ihx8nYH8cg16SpW2aEssLtqP/gPPPkM96KueAwg=
Subject key identifier:   F4:C8:72:AD:6B:AA:14:CE:BB:B0:F6:4D:07:BD:19:41:B8:ED:90:2E
Authority key identifier: BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C
Certificate issuer:       /CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
Certificate serial:       0194BCA9FAC5BFF657D761976A97C776E9A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
Manifest number:          0263
Signing time:             Fri 31 Jan 2025 14:00:43 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:43 +0000
Manifest next update:     Sat 01 Feb 2025 14:00:43 +0000
Files and hashes:         1: v1Tb8A10WQyJE97Isc8ITY_PaTw.crl (hash: kZjRchPdOmcBVNOKfPQrhw1tAhE/NZWztyiaILra9jI=)
                          2: wvpX23IN2w8d2-KXP6RepnCHP3g.roa (hash: hX6rM9w+qzbC1N6GJKikByFvvKJf6X+cuAHLvYTMLZU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:a9:fa:c5:bf:f6:57:d7:61:97:6a:97:c7:76:e9:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
        Validity
            Not Before: Jan 31 14:00:43 2025 GMT
            Not After : Feb  1 14:00:43 2025 GMT
        Subject: CN=f4c872ad6baa14cebbb0f64d07bd1941b8ed902e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:d2:d9:dd:e9:7d:59:f3:fb:bb:23:2c:33:
                    64:20:d4:94:fb:af:a1:ca:77:cd:9b:87:4d:5e:d9:
                    a8:bc:45:b2:13:89:0a:94:64:5c:6e:cf:57:74:16:
                    b4:c4:a6:a5:57:49:2f:ce:20:ae:ac:41:23:46:a2:
                    7d:9a:a3:73:ba:a4:f7:5a:0e:a0:a2:de:69:0d:13:
                    c3:ac:9f:42:3e:d4:bc:e3:cf:d8:f7:ad:46:fb:98:
                    9b:45:7c:1a:96:d3:3f:58:78:4b:07:82:87:b1:20:
                    e2:0f:c6:ff:7d:2a:4b:25:8c:34:01:ff:4d:73:82:
                    3a:2f:af:d2:cd:eb:72:5a:2b:13:dd:c6:aa:07:8b:
                    ab:71:e8:be:51:89:f8:31:35:cd:88:b1:2a:ec:50:
                    3b:19:a8:e2:67:04:2d:41:fe:ed:b5:89:4d:15:97:
                    ae:76:7c:b6:77:cb:ad:b1:6a:cb:5e:91:90:2d:eb:
                    ad:e4:f0:f5:58:2d:57:1d:49:5f:bf:fe:95:4b:3a:
                    da:7f:d6:80:5c:0f:a9:f5:fc:68:8d:c8:14:f2:51:
                    a6:98:3c:87:22:8c:ab:4b:c8:08:98:eb:b4:23:77:
                    d9:8d:83:a3:1d:7a:b1:9e:fe:c3:a5:3a:8a:76:53:
                    d3:a5:a9:96:77:84:14:a8:46:1c:67:14:9a:b6:74:
                    df:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C8:72:AD:6B:AA:14:CE:BB:B0:F6:4D:07:BD:19:41:B8:ED:90:2E
            X509v3 Authority Key Identifier:
                keyid:BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:03:3b:d6:b9:82:18:d1:c5:db:34:25:22:cc:21:1a:0a:06:
         a8:91:78:ce:c3:ca:57:78:d7:56:07:7c:f7:d2:5e:34:9d:2b:
         8b:dc:2a:4a:4c:c9:d8:38:72:60:09:c6:df:af:9d:6a:29:d0:
         82:8d:80:7f:43:e1:96:c5:8e:c0:ca:cd:b7:dd:6b:6b:50:8b:
         ac:24:84:53:fc:60:3c:e3:ba:b4:7e:64:7b:7c:1a:ca:8c:4f:
         5b:a1:0a:55:56:99:92:93:d7:86:8a:93:bc:5b:1f:8b:7d:da:
         b9:f3:96:f7:33:8d:25:67:db:6a:cc:0b:3c:17:7a:f8:72:36:
         29:0c:18:0e:b8:28:4f:54:53:4a:4e:93:b4:c1:9d:11:e4:fd:
         f0:eb:36:5d:99:7a:ff:4c:5e:a4:c8:b8:d0:1c:42:23:6e:35:
         d4:3b:c7:88:71:ec:9a:ac:4c:b3:fc:74:d0:ae:bd:95:39:34:
         02:b6:c4:25:6a:ab:7d:d1:55:27:95:4b:40:7f:0f:e0:20:8c:
         1f:a6:4b:15:c9:88:c5:36:7e:71:92:f6:4a:cc:74:bf:45:4e:
         62:48:bd:7d:94:01:33:e4:49:6c:6e:98:6d:97:bf:f5:c7:3a:
         5e:9d:cd:37:97:69:27:b6:06:6a:87:85:c3:c7:fd:51:9f:5e:
         24:b1:c3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:22 2025 by rpki-client