Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
File:                     tcr-HjrqL22RHtEHoIqv7peaT1E.mft (raw, json)
Hash identifier:          N2aivIjZlwLAEtZsAAEf9Wy8tAiIu7lY4yDVSgpGuvw=
Subject key identifier:   EC:D2:C5:88:32:B9:3E:56:1D:5E:1B:7C:44:B4:CC:63:0B:21:73:5E
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Certificate issuer:       /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial:       0195DFD89B0F6B322E98004E0ACC5CE8EFAA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
Manifest number:          0809
Signing time:             Sat 29 Mar 2025 03:01:09 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:09 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:09 +0000
Files and hashes:         1: RbtpOQvxKOhivyATsaFRApG8DvI.roa (hash: rcUrQ9qXVTCmRSSGNqyeO7AKgTyqtF4rizry0Ad9las=)
                          2: S6bzH3vR-9_Z8W37FxbGY_bsSRI.roa (hash: mXMMwIa+4CrlkQM+hSljAaJyd1k858ZniaKc/09JBeY=)
                          3: a0RRgx7_17MRQY0QEGYvnSPepZU.roa (hash: YVzxS9jFVMbMgJf+c2GFQwY/wSVZdg9tW30Q3WHGzsg=)
                          4: tcr-HjrqL22RHtEHoIqv7peaT1E.crl (hash: aESi3I1a590jD8l94DyuwhYulFVVgUQuR5RfKVRc00Y=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d8:9b:0f:6b:32:2e:98:00:4e:0a:cc:5c:e8:ef:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
        Validity
            Not Before: Mar 29 03:01:09 2025 GMT
            Not After : Mar 30 03:01:09 2025 GMT
        Subject: CN=ecd2c58832b93e561d5e1b7c44b4cc630b21735e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:77:df:96:e4:7a:26:fa:4b:2b:05:9c:9d:2b:
                    f0:b4:b5:c9:81:5e:67:69:f5:25:d6:ea:37:cc:4e:
                    19:f9:a0:d0:30:c3:82:99:7f:69:41:83:92:35:92:
                    77:1a:df:30:8a:43:4e:f8:91:b4:58:d9:76:94:a2:
                    70:9d:08:32:e2:e3:e9:71:fa:fc:62:52:f2:7c:e2:
                    8a:b9:96:e1:77:27:58:5c:e7:16:cf:d3:93:d8:f8:
                    a4:79:0e:1e:9e:1d:d9:62:f8:7b:67:72:82:7e:85:
                    7d:9c:4a:cc:cd:1f:6c:9a:7d:48:e1:36:62:da:fb:
                    72:23:47:d8:2c:77:53:8d:ad:e1:e5:33:4b:04:bf:
                    1b:64:d3:30:39:16:41:56:c2:75:03:7a:63:2c:2a:
                    e1:05:88:e6:fc:e4:9c:41:cb:85:90:ed:8e:e7:bc:
                    b3:1b:d1:8d:b2:99:4a:3f:65:05:d5:e5:d8:b9:af:
                    f1:4f:39:26:dc:9b:32:4f:e0:44:7f:88:46:48:d6:
                    ff:9e:c3:66:95:a7:31:7f:c7:56:7f:c6:a2:15:32:
                    f3:f8:c9:11:f3:18:6d:63:5e:8c:d3:54:6f:66:42:
                    97:0b:5d:d1:45:32:c6:1a:81:8b:40:ba:5a:f2:e8:
                    c0:de:c5:39:ec:f8:46:16:3f:db:6a:4c:b8:11:be:
                    86:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D2:C5:88:32:B9:3E:56:1D:5E:1B:7C:44:B4:CC:63:0B:21:73:5E
            X509v3 Authority Key Identifier:
                keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:11:53:38:15:2e:55:64:95:da:e4:7b:27:21:05:a3:56:d2:
         8b:34:14:22:79:cb:3b:f0:52:b4:f4:89:35:cb:c5:f9:c7:c1:
         dc:e2:a3:8b:26:ab:fc:1c:c2:30:b8:7d:6b:67:d3:24:5a:4e:
         6d:b7:05:ae:30:07:e5:cf:cf:00:22:22:8f:1a:60:19:43:b1:
         b4:a1:4b:28:4b:b4:15:67:91:19:74:b1:31:84:b4:c9:e3:28:
         53:ae:3a:f9:e5:6b:b3:7b:6c:19:a3:32:9b:45:e7:28:32:fd:
         9b:54:d9:2f:d7:1d:8a:97:be:ad:4c:05:75:73:bc:47:97:f4:
         9a:f1:74:dd:91:a7:be:9a:14:3f:41:00:f4:c1:14:b5:0a:a0:
         81:c0:3e:56:b3:33:0b:6d:e5:e9:65:73:46:f2:16:41:f0:dd:
         63:a2:4d:ce:69:90:b8:68:ed:b6:09:de:9a:95:67:3a:55:e5:
         15:69:38:6d:c8:79:17:5d:a4:5b:8b:05:6f:95:c8:57:17:04:
         5b:94:8c:72:a7:4f:4e:53:79:b2:a7:de:3c:da:b6:48:ad:75:
         dd:8d:6a:7f:89:4a:85:36:87:b9:e7:cd:0d:8e:53:28:41:2a:
         f0:ed:c7:84:98:6f:ff:fb:e4:ff:36:bb:81:07:b3:f2:f8:f8:
         4f:7b:3b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----