Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File:                     tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier:          XO44NEBeQ4p8jfjF8f5IG06Nqb9AiDBwwwnBHThshQU=
Subject key identifier:   30:CF:B9:8F:FD:68:EB:82:89:78:DB:7D:4C:9B:03:DC:02:75:53:C4
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer:       /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial:       0195E0EB6C53CA91F164BE800488E268B2F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number:          14C2
Signing time:             Sat 29 Mar 2025 08:01:19 +0000
Manifest this update:     Sat 29 Mar 2025 08:01:19 +0000
Manifest next update:     Sun 30 Mar 2025 08:01:19 +0000
Files and hashes:         1: dMyCW0_TBkO1nYNBL_n11IKNaBI.roa (hash: WTKaBFp1QPSs1ROafjR4WJfZR1PRtcVHfjnPURoJWEQ=)
                          2: iWujOO5h_XVMHY2nSFxBko0o46E.roa (hash: hfZ0O6pRdbOdpr8hVRCYtXgEcI0jSP4lHjfs8kAt2hk=)
                          3: qrrQR7WuIleyYS2sO7I0VvjROUo.roa (hash: 4JE74Aq/xmpPqZIRbZrMja/xvjU3RSpM11pAC7vf4sE=)
                          4: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: F+BdKoOL68G8/DepcnfC3s+pOjybrejw+4N5b1/TZgg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e0:eb:6c:53:ca:91:f1:64:be:80:04:88:e2:68:b2:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
        Validity
            Not Before: Mar 29 08:01:19 2025 GMT
            Not After : Mar 30 08:01:19 2025 GMT
        Subject: CN=30cfb98ffd68eb828978db7d4c9b03dc027553c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7a:fa:1f:62:84:3e:d3:67:89:e6:19:b8:fd:
                    17:02:3a:7f:93:d9:6f:8c:0e:f8:1f:09:30:53:bf:
                    e5:5e:66:de:c4:c2:58:ae:d4:27:c6:4d:d2:a8:fb:
                    89:1b:37:cf:b9:4f:f9:92:fa:18:54:3d:3d:e2:e4:
                    51:1e:04:41:7d:62:b5:bc:13:90:74:b7:09:a5:b1:
                    25:e7:b7:d8:94:1f:4e:c7:2a:e7:89:9a:08:b2:ba:
                    30:5f:99:7d:6d:ee:f3:91:44:09:01:75:76:19:f2:
                    78:78:06:4c:42:08:b5:8c:18:8e:e9:17:5a:45:ca:
                    06:f6:0f:b7:84:6c:ce:ef:2d:2e:e3:70:d4:0c:21:
                    fd:27:a3:93:c8:77:a4:75:02:be:d0:53:f8:36:53:
                    91:34:10:ca:d1:8d:0f:ee:f8:f0:ab:49:f6:63:4a:
                    51:15:d7:e6:28:0c:72:de:89:5e:39:c1:f2:21:8c:
                    24:00:96:36:53:9a:08:1d:27:cb:d7:be:aa:6b:ab:
                    6c:2f:94:23:e0:f3:28:a8:e1:c4:71:8a:9b:a7:46:
                    38:64:03:8b:d2:fa:c5:b5:e1:38:ce:6b:f5:91:df:
                    d4:e3:e4:b2:76:05:00:93:77:ad:27:e6:f8:6f:8d:
                    ff:25:eb:7a:ac:16:81:f6:03:a4:ce:c5:c7:7d:d8:
                    b3:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:CF:B9:8F:FD:68:EB:82:89:78:DB:7D:4C:9B:03:DC:02:75:53:C4
            X509v3 Authority Key Identifier:
                keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:0a:f1:24:f2:e8:75:fc:3d:d1:ea:73:17:1c:84:28:be:8c:
         3e:50:a6:78:9e:72:43:4a:34:93:3d:6b:4d:33:a3:35:2c:a7:
         19:7d:64:40:f6:48:d1:af:ce:ea:f2:f1:15:f6:7b:08:bc:33:
         2b:98:c4:f4:a9:f7:c1:9d:5b:b7:a1:b1:8b:b0:43:0d:c2:61:
         49:7d:0c:28:1f:bf:f1:78:2f:0a:34:9d:8c:c5:ba:e7:76:ca:
         0b:87:64:a0:a3:a1:67:28:a5:f8:d9:62:1e:40:b7:52:de:fc:
         a4:60:5e:b1:86:bd:2c:a9:fe:a2:68:cd:c0:c5:b7:49:3e:35:
         cf:80:3c:76:7a:29:65:6b:f7:23:61:8a:ee:1a:34:73:ec:f4:
         d1:95:38:e9:70:a4:fb:fb:3d:5c:93:10:04:3d:f5:cf:9a:21:
         cc:12:dd:f9:4f:a9:57:1e:ce:7e:a2:f9:6e:8f:a4:ed:55:c8:
         76:93:ae:49:26:75:4c:6e:46:e5:ec:0a:02:83:59:6b:6b:76:
         d1:eb:43:4a:9e:67:53:08:2a:28:ba:09:95:dc:80:63:7b:03:
         88:88:1e:5e:c7:08:fa:4d:20:92:47:d5:f4:4c:a8:6f:3a:3f:
         fe:ca:a7:6b:8b:a9:b2:2a:3f:bc:f8:8f:a1:8b:20:b6:61:3d:
         07:e7:4c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----