Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
File:                     TQreVMJ-b83aziYsT995DzIP7Zw.mft (raw, json)
Hash identifier:          AOaWsSNLv1EQYLnXGLIZwmS5jCvhqeGPOib+8PNi9rM=
Subject key identifier:   E6:7D:AB:3E:C5:4D:E4:83:4C:22:B8:88:86:63:2D:C3:33:12:65:A7
Authority key identifier: 4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C
Certificate issuer:       /CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
Certificate serial:       0194BD1779C5E5960CF655E2B03C466A931B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft
Manifest number:          1431
Signing time:             Fri 31 Jan 2025 16:00:19 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:19 +0000
Manifest next update:     Sat 01 Feb 2025 16:00:19 +0000
Files and hashes:         1: 93DmKZhPP6C3A8rfNYLNAOSD7nY.roa (hash: dt3s4SYU1dR+fLajxJTR3/3GKKVmv0f+WTIVOmO+2as=)
                          2: A1lFiDlkwzd2kuuHtwLxrVifjIM.roa (hash: bheq6y6BKOc+FBTnE7aA9p7E54SloHCzl+8cgE33f9o=)
                          3: TQreVMJ-b83aziYsT995DzIP7Zw.crl (hash: qmBixkwzV4tSrS5MBJMcKWoL6xuO2JV4b44nVy80RGA=)
                          4: UD9G2KurtNeaAxJdizQiQcSD0uc.roa (hash: Es9ToT28+rspmgTLqxqTlnHgsgNlKjrlO13bAnzcF2g=)
                          5: XDIQZzxZW5-uUuoXNVfYPGALZY8.roa (hash: xZyhu94HluR+zrM/qfXRNVxIfS3klNJwNP/Gh4p7kNE=)
                          6: cYs_upIMBFM1qTzwqySxwaPDCLc.roa (hash: xI0Q9MYkvDP8hv/SnI33zJTsy3M/0ZO4tON1nbaFCD4=)
                          7: jk-_IfFTaD-MzFizpWx0AA1TkH4.roa (hash: wezPiSGoo0rul4hPDHDdcRTaZb8xQPAVvKZ9GBZZNU8=)
                          8: mmpsKeeO5JUD0kNNB4aUsbfsoEs.roa (hash: mRAg2xOUvTrNMtJyTqYFatxVEZidyGOVjXZ4XpUtMSU=)
                          9: o6y2fyURWeu2t_DFurQx7USUPKs.roa (hash: kPReXruwGea93kBP9pEyd3hI0ZYY5dR0hxSQpsQ2xeI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bd:17:79:c5:e5:96:0c:f6:55:e2:b0:3c:46:6a:93:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d0ade54c27e6fcddace262c4fdf790f320fed9c
        Validity
            Not Before: Jan 31 16:00:19 2025 GMT
            Not After : Feb  1 16:00:19 2025 GMT
        Subject: CN=e67dab3ec54de4834c22b88886632dc3331265a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9b:f1:5c:ca:dd:b7:ef:69:8a:eb:25:f3:06:
                    73:72:e5:12:f3:57:1e:07:c7:6f:30:1b:ab:2b:b1:
                    40:7d:da:c3:08:53:8c:15:b1:05:ed:4d:47:11:05:
                    73:04:6a:d0:99:75:1e:f6:cc:dd:b9:da:21:d8:02:
                    08:e4:70:65:5d:97:e2:bd:85:77:5c:44:24:74:66:
                    ea:70:08:c1:74:95:a3:9e:86:c4:f3:44:1e:0f:ef:
                    bc:1a:2c:42:71:48:79:3c:a3:a3:6f:5b:90:58:a9:
                    87:ed:84:02:33:9e:53:77:53:b5:8b:09:b3:51:1a:
                    24:cc:70:36:69:1f:d2:cc:e5:e4:57:5b:71:fa:64:
                    c1:24:12:a3:fb:47:91:77:2e:05:f9:7c:b9:87:72:
                    b5:c0:39:e5:94:3c:26:04:e9:93:59:3f:bf:ae:3a:
                    12:b0:db:c5:d3:8d:d2:44:a8:dc:04:01:d5:dc:58:
                    57:02:30:b2:b5:52:af:fc:84:9f:16:f9:ca:9b:38:
                    fd:4f:91:62:0d:3a:93:4b:13:59:f7:8c:aa:bf:37:
                    00:34:1d:ae:84:f1:a0:8e:3b:71:64:f8:a4:70:2d:
                    4e:87:04:b4:bc:35:cf:c3:cf:18:71:65:95:bf:82:
                    5c:a3:53:be:1d:7e:06:7f:60:a1:4d:04:49:60:b4:
                    d0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:7D:AB:3E:C5:4D:E4:83:4C:22:B8:88:86:63:2D:C3:33:12:65:A7
            X509v3 Authority Key Identifier:
                keyid:4D:0A:DE:54:C2:7E:6F:CD:DA:CE:26:2C:4F:DF:79:0F:32:0F:ED:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQreVMJ-b83aziYsT995DzIP7Zw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/8efd8b-e516-4c49-92cb-89296ccb35f5/1/TQreVMJ-b83aziYsT995DzIP7Zw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:cf:ef:1b:8e:3a:8a:0c:c1:2e:ef:48:f0:a3:44:b7:8b:f6:
         79:53:63:e9:ef:3a:b5:80:25:38:0e:9e:42:6d:a0:37:a5:75:
         ca:02:4a:2c:fa:5e:d6:fa:2b:fc:26:7e:e7:9b:28:0f:7a:ea:
         a7:e7:45:04:b8:07:45:9f:f7:62:df:b5:3a:34:b7:98:4c:4f:
         a3:ac:9f:56:ad:ff:da:4c:0e:a4:b7:39:f2:b7:86:56:b7:2c:
         78:c2:90:19:3e:5e:b5:66:10:1f:b0:98:fd:95:9f:49:80:9c:
         48:55:85:3d:66:df:cf:cc:a5:ef:0e:62:b9:11:d5:ad:9b:d5:
         26:2a:72:a3:ee:9d:7a:f3:d7:63:d1:ae:e4:cd:82:64:27:64:
         33:5d:ca:42:60:c6:a0:92:dd:be:1a:4c:c8:b4:ed:c9:d1:5b:
         ba:9a:1a:a8:9f:83:0e:08:d6:77:a8:d0:a0:9c:2b:4b:22:46:
         39:9b:3a:91:14:cc:e1:3f:ce:4e:a4:47:ed:da:23:f2:d7:70:
         1b:6e:4b:68:7b:fd:2f:60:89:61:01:39:0e:dc:0c:4e:d5:ee:
         1d:65:2f:d7:3f:46:cd:f1:d3:97:03:78:ad:97:3a:cf:a7:6b:
         92:44:58:2f:3a:3e:c3:10:33:fc:f5:c5:d9:6c:a3:80:11:3a:
         2f:98:77:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----