Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
File:                     TYjrcwqxpQHqNuo0gtdkVE4UERE.mft (raw, json)
Hash identifier:          eZGWoEAdQOsygC07Yz5KenF5lNPUid9+5UwO1d40uH4=
Subject key identifier:   5C:59:DF:57:7C:CE:1F:60:3A:25:01:82:61:66:B5:E1:74:48:E4:F5
Authority key identifier: 4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11
Certificate issuer:       /CN=4d88eb730ab1a501ea36ea3482d764544e141111
Certificate serial:       0195DFD8D00CB0C756D5F6CC4365C1672393
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft
Manifest number:          14CC
Signing time:             Sat 29 Mar 2025 03:01:22 +0000
Manifest this update:     Sat 29 Mar 2025 03:01:22 +0000
Manifest next update:     Sun 30 Mar 2025 03:01:22 +0000
Files and hashes:         1: 5ihFdcr9l-tc7rukSnsuZYO-sCc.roa (hash: jVp/K4TFXHukJ6ToifAvqgLYscP9U1YkYRjyQ/vS7rs=)
                          2: 6yNeqI6cfHc3f4rCblxx3TjO0eA.roa (hash: gtLbnA120/ol5rBCSdNOOaWzTA+gt7YvBjty1F7J0T4=)
                          3: 7gxbTtd2MWAA1UFCEQXYPpfPvms.roa (hash: amp+QH+F/V8niu7DI7vvmehuw42ndWHc/H0Eed9oDAk=)
                          4: CwYygfo9jnbGuyyosVtnwcbQSLk.roa (hash: rDCG+Vedl9KUCPHae/ViKic222skTUa8bdoX1jGnAHk=)
                          5: GFaNvHrEv5oHgAo-PT7wrqzBOz8.roa (hash: q+xSJMcbTKpowxU7QHIFpGoYjDWd2eTHceMvN5t2SgQ=)
                          6: HFBEdH3RlWYpvPeNgp6xKhpodko.roa (hash: JH1fjI/K5jNqNFebQu9ct1cPojHEsM6BVZLaKE0xEso=)
                          7: TYjrcwqxpQHqNuo0gtdkVE4UERE.crl (hash: rp0pQZ6VWS/8nulpTC+85o0vPZLUap7LYhZ3jxY0wvE=)
                          8: cmmjWfTbdXm_bIqEm3CK7WZFF7I.roa (hash: byumgI5wcwBFgn7pCdwnQhSp1RnK/Pa96CjEn1SbRyM=)
                          9: ehged3mZieiEQPKX6YV4LMY94IA.roa (hash: 7eCOyiKG9ZW1g+yYlD3ivpQA1oY2V4uQMAsWpNV5czU=)
                          10: isgHEY3DLcIdH7fzaoi9hSSweWI.roa (hash: UYsZ1nus3c+5ErOsOKu1wsJtYaH8MiA2+iXpl5haTe4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:df:d8:d0:0c:b0:c7:56:d5:f6:cc:43:65:c1:67:23:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d88eb730ab1a501ea36ea3482d764544e141111
        Validity
            Not Before: Mar 29 03:01:22 2025 GMT
            Not After : Mar 30 03:01:22 2025 GMT
        Subject: CN=5c59df577cce1f603a2501826166b5e17448e4f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:85:73:b6:16:c5:a7:94:38:0e:4a:68:0c:28:
                    8a:31:59:1f:57:dd:7e:65:13:e8:19:af:71:9b:52:
                    d8:5e:c1:85:7f:88:a4:ad:b9:28:c7:55:11:b2:e7:
                    5e:3b:a1:b7:d3:8b:0d:5f:31:bb:7e:e3:89:48:69:
                    52:8d:c9:d3:18:f6:0f:53:db:fa:55:66:5b:cc:00:
                    60:49:df:1a:0d:5e:1d:56:73:44:3c:41:be:36:86:
                    ae:d4:d5:d1:f0:09:c4:7d:5f:a8:a1:c6:2e:01:7d:
                    80:34:8e:a0:f9:37:fc:ed:03:52:b7:aa:86:09:0c:
                    04:54:fc:02:4f:72:3f:5d:ef:b6:50:a7:d5:e9:71:
                    82:a9:d7:7f:2b:d9:72:24:64:90:40:03:74:8b:27:
                    8c:b0:17:be:b5:cb:d1:11:d8:4a:a3:40:6c:4c:6d:
                    31:44:61:bc:8a:ba:39:5d:30:a8:27:6b:4f:0f:7a:
                    56:a3:f6:00:c4:df:3a:66:fb:66:22:62:ca:31:bf:
                    81:91:f4:a2:48:d5:4f:2a:d5:cc:0f:c4:64:9e:79:
                    5d:57:0f:89:16:d8:26:67:d5:3a:21:19:6b:c9:1a:
                    b8:69:40:f8:67:7c:57:ba:36:5a:cf:9e:ea:82:63:
                    8c:7b:48:ca:ba:1f:a8:8c:46:79:28:e6:00:ab:3f:
                    d9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:59:DF:57:7C:CE:1F:60:3A:25:01:82:61:66:B5:E1:74:48:E4:F5
            X509v3 Authority Key Identifier:
                keyid:4D:88:EB:73:0A:B1:A5:01:EA:36:EA:34:82:D7:64:54:4E:14:11:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYjrcwqxpQHqNuo0gtdkVE4UERE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/c493ee-f66e-4208-a31d-726f83d23892/1/TYjrcwqxpQHqNuo0gtdkVE4UERE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:d6:96:40:f0:7d:e2:15:53:7c:b8:5c:7e:66:07:50:ea:67:
         90:f9:8b:ed:21:24:0f:f6:56:4e:d0:e3:82:3f:a2:86:71:a2:
         8b:8f:3b:4c:39:ac:fc:6f:1a:d8:7b:40:89:8a:e2:02:bc:39:
         b3:1a:0e:32:97:27:f4:07:ac:2b:3c:11:d6:06:fd:af:43:84:
         9a:19:d1:2e:b9:ab:2a:e3:22:86:cf:7c:3d:5b:80:72:e2:c8:
         02:d1:cb:05:7c:07:50:5b:99:f9:f0:7e:85:c3:8d:38:3f:fd:
         8f:35:76:d1:a3:4f:c5:53:78:c8:d0:b8:a6:c0:2f:62:88:79:
         02:55:73:89:5d:a7:39:65:76:67:a0:fa:a2:30:26:99:e9:fc:
         83:03:59:b2:a5:ce:ef:85:ab:43:29:95:ce:07:8a:c3:f9:ab:
         30:02:b4:2b:98:0b:b8:ed:0e:7f:06:dd:2e:e6:cb:71:63:77:
         ed:e4:ea:b5:c8:56:06:d7:54:28:77:1a:bb:13:e0:1e:a8:0d:
         d1:9d:c3:45:9d:3f:49:6a:1f:54:7e:54:f6:8b:b9:e3:b5:c5:
         20:10:7f:a5:e1:3f:1f:70:eb:8b:3e:87:d8:a6:c3:13:ec:35:
         f6:ff:9c:e2:ee:47:75:ca:61:07:3d:f3:4a:ac:6a:42:8e:53:
         e8:ca:3a:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZXf2NAMsMdW1fbMQ2XBZyOTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkODhlYjczMGFiMWE1MDFlYTM2ZWEzNDgyZDc2NDU0NGUx
NDExMTEwHhcNMjUwMzI5MDMwMTIyWhcNMjUwMzMwMDMwMTIyWjAzMTEwLwYDVQQD
Eyg1YzU5ZGY1NzdjY2UxZjYwM2EyNTAxODI2MTY2YjVlMTc0NDhlNGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA24VzthbFp5Q4DkpoDCiKMVkfV91+
ZRPoGa9xm1LYXsGFf4ikrbkox1URsudeO6G304sNXzG7fuOJSGlSjcnTGPYPU9v6
VWZbzABgSd8aDV4dVnNEPEG+Noau1NXR8AnEfV+oocYuAX2ANI6g+Tf87QNSt6qG
CQwEVPwCT3I/Xe+2UKfV6XGCqdd/K9lyJGSQQAN0iyeMsBe+tcvREdhKo0BsTG0x
RGG8iro5XTCoJ2tPD3pWo/YAxN86ZvtmImLKMb+BkfSiSNVPKtXMD8RknnldVw+J
FtgmZ9U6IRlryRq4aUD4Z3xXujZaz57qgmOMe0jKuh+ojEZ5KOYAqz/Z5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxZ31d8zh9gOiUBgmFmteF0SOT1MB8GA1UdIwQY
MBaAFE2I63MKsaUB6jbqNILXZFROFBERMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQt
NzI2ZjgzZDIzODkyLzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9jNDkzZWUtZjY2ZS00MjA4LWEzMWQtNzI2ZjgzZDIzODky
LzEvVFlqcmN3cXhwUUhxTnVvMGd0ZGtWRTRVRVJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU9aWQPB9
4hVTfLhcfmYHUOpnkPmL7SEkD/ZWTtDjgj+ihnGii487TDms/G8a2HtAiYriArw5
sxoOMpcn9AesKzwR1gb9r0OEmhnRLrmrKuMihs98PVuAcuLIAtHLBXwHUFuZ+fB+
hcONOD/9jzV20aNPxVN4yNC4psAvYoh5AlVziV2nOWV2Z6D6ojAmmen8gwNZsqXO
74WrQymVzgeKw/mrMAK0K5gLuO0OfwbdLubLcWN37eTqtchWBtdUKHcauxPgHqgN
0Z3DRZ0/SWofVH5U9ou547XFIBB/peE/H3Driz6H2KbDE+w19v+c4u5HdcphBz3z
SqxqQo5T6Mo66A==
-----END CERTIFICATE-----