Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
File:                     TdL8TSP9nCQgxASRhxgI7FQkpnA.mft (raw, json)
Hash identifier:          1CaQImFCXZPHssItlNcaj7kpSq6MH512jh0stwmY9f4=
Subject key identifier:   CE:2D:E9:14:2E:CE:56:C6:35:D8:25:7A:0E:D2:AC:0C:E2:0A:BE:1F
Authority key identifier: 4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
Certificate issuer:       /CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Certificate serial:       0194BCE0B3F72BC149E09CDE418F79A21EF4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
Manifest number:          142E
Signing time:             Fri 31 Jan 2025 15:00:30 +0000
Manifest this update:     Fri 31 Jan 2025 15:00:30 +0000
Manifest next update:     Sat 01 Feb 2025 15:00:30 +0000
Files and hashes:         1: 6PYHTPLOKPA_a6iVYvGQByWG7yU.roa (hash: w5WzWtoII8U9oezorMTaJGrRrTvsQaItUP16lTCSY7s=)
                          2: TdL8TSP9nCQgxASRhxgI7FQkpnA.crl (hash: wq5kc+Zvr3VfkG1tDAoo+ABakMd/OEeVnV9mZaMIfRw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:e0:b3:f7:2b:c1:49:e0:9c:de:41:8f:79:a2:1e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
        Validity
            Not Before: Jan 31 15:00:30 2025 GMT
            Not After : Feb  1 15:00:30 2025 GMT
        Subject: CN=ce2de9142ece56c635d8257a0ed2ac0ce20abe1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:85:88:ef:09:a4:c4:b7:95:20:85:11:cc:f2:
                    1d:33:82:5f:8b:d4:ea:49:55:35:36:af:43:0d:49:
                    63:6a:bf:34:6c:79:97:60:33:3c:25:e3:a9:8d:56:
                    34:2b:10:75:19:ff:04:ab:f7:00:13:75:6f:be:27:
                    87:71:22:d8:ce:13:0f:9a:5a:55:b4:09:9e:7f:e4:
                    63:1c:53:a0:7d:3f:5a:f8:71:6e:98:8b:79:97:10:
                    b2:c1:73:0d:e0:51:41:2e:9e:09:46:18:12:f3:a9:
                    22:10:2c:2c:e1:46:bd:ab:31:b3:f2:62:bc:8e:3d:
                    9b:b8:3d:b6:82:f3:83:11:a5:a1:cb:f7:c3:b5:a4:
                    cd:73:ae:78:a6:d2:98:9b:10:f2:28:11:fa:86:b8:
                    21:2c:97:93:92:49:f4:8f:35:3d:4a:f1:53:38:61:
                    62:79:10:89:e3:f6:16:eb:23:0d:e4:26:79:fc:8f:
                    7d:0a:04:dc:86:97:95:95:f0:80:49:9d:5c:0e:72:
                    98:67:c2:05:f2:dd:c8:37:cb:a0:06:55:90:75:41:
                    ee:c7:4c:83:31:34:59:d0:66:22:a1:4d:fd:07:51:
                    ca:30:3a:a3:92:f3:a3:80:bb:37:73:c1:94:6d:7e:
                    49:41:13:f9:c6:57:a6:75:49:fb:cc:87:6c:8b:66:
                    3c:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2D:E9:14:2E:CE:56:C6:35:D8:25:7A:0E:D2:AC:0C:E2:0A:BE:1F
            X509v3 Authority Key Identifier:
                keyid:4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:4e:f0:38:ea:41:fe:4e:c3:11:84:73:f7:04:56:a2:a0:ce:
         6a:9b:c5:95:50:58:5b:26:c0:2f:b4:db:49:4b:89:b5:d4:b1:
         ca:32:a2:69:54:3c:60:68:05:94:d0:42:42:44:13:29:40:79:
         87:3c:fd:c1:1d:7e:e0:35:c4:02:43:02:8e:0c:6e:d8:66:5a:
         93:0d:df:8a:c7:b8:37:34:12:4c:b0:03:30:7d:ec:55:8f:0b:
         8e:5c:3e:5a:bc:eb:30:69:f4:5d:ea:3d:b3:40:25:38:c2:d2:
         f8:58:50:98:02:3e:44:e9:b5:63:f6:d6:10:db:96:0a:22:90:
         c9:fe:2f:5f:5e:7d:8e:4d:7b:4d:7a:76:e8:b1:bb:c7:c1:e4:
         c3:b8:4d:5e:be:03:f1:69:64:3d:6c:c9:c8:32:fb:0d:b3:61:
         90:06:ae:4d:7c:37:4b:58:78:9d:4d:40:c7:9a:f5:91:ae:2f:
         39:10:9b:e2:56:6c:0c:ee:ef:97:fe:d8:9b:c5:ea:e3:29:17:
         02:46:85:0b:9b:ec:48:b0:49:7c:91:14:8c:a9:5a:16:11:50:
         96:3f:2d:e1:5a:79:3f:00:35:62:f3:a1:4c:3f:5d:52:75:ee:
         e3:90:ec:fd:8e:8e:d0:5c:c1:90:9a:a9:bd:81:da:fe:f5:48:
         4e:49:3b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:15 2025 by rpki-client