Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
File:                     TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft (raw, json)
Hash identifier:          BEecoMddp4OFVJycuw2hT5VZBnn5M+sJhSBGddX0MOs=
Subject key identifier:   3B:35:4C:8C:D2:4A:BB:59:F2:89:58:D3:45:19:E8:DD:B6:CE:01:39
Authority key identifier: 4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1
Certificate issuer:       /CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
Certificate serial:       0195E1226D9B867A8CF0F78F6C67F1BF7074
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft
Manifest number:          01A5
Signing time:             Sat 29 Mar 2025 09:01:24 +0000
Manifest this update:     Sat 29 Mar 2025 09:01:24 +0000
Manifest next update:     Sun 30 Mar 2025 09:01:24 +0000
Files and hashes:         1: TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl (hash: yRuSnpjOI98/dsmLpu14go5xHqKXGH9PkJ5kkxAQqyk=)
                          2: _l-XctLDCPzRb-pMlqXmGyqDvHM.roa (hash: myqB80koPH8JwlE9qSMpb7bOcTN1/cJ21+MIuMT+GyE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:95:e1:22:6d:9b:86:7a:8c:f0:f7:8f:6c:67:f1:bf:70:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c24c308b0241c3bcc14cf6777591d27237ffaf1
        Validity
            Not Before: Mar 29 09:01:24 2025 GMT
            Not After : Mar 30 09:01:24 2025 GMT
        Subject: CN=3b354c8cd24abb59f28958d34519e8ddb6ce0139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a6:5d:5b:7a:e6:1b:82:73:dd:b8:fd:45:22:
                    51:1a:4d:b4:4b:d2:59:7a:bd:74:27:71:7f:00:36:
                    b5:27:da:af:e9:37:0c:36:43:43:7e:95:e7:a5:56:
                    f4:0a:a8:cc:b9:39:9f:81:66:fe:36:a9:cb:0c:ef:
                    31:ff:3b:ad:22:f8:05:4c:7a:d3:5b:6a:7e:c5:ce:
                    fc:25:d7:d2:92:21:94:de:14:5c:99:a2:4e:e2:6c:
                    bc:ad:48:20:c4:63:5a:21:92:9c:86:9f:a9:68:6a:
                    73:f0:b2:7b:ac:3a:b0:1b:d1:5a:b4:31:8b:3a:db:
                    61:21:2d:f7:6c:fa:b3:df:3f:3a:83:ae:0c:77:67:
                    c0:9c:dd:87:0e:eb:eb:0a:54:b8:7e:2e:a5:c5:46:
                    2f:a7:59:5f:1f:ff:19:dd:ab:89:aa:78:88:c8:aa:
                    5e:39:9c:14:fb:c4:3f:75:9d:b0:d8:58:71:36:ad:
                    a9:02:a9:32:c5:37:d4:60:3c:7d:74:7f:3a:34:77:
                    c1:b1:0a:2b:7c:90:e1:91:2b:62:40:ec:a7:4a:6d:
                    a0:2a:b2:2b:02:16:ec:57:4f:b0:39:23:22:fc:99:
                    65:f2:32:1e:05:8b:ce:99:91:86:b5:61:9c:5b:10:
                    52:b5:e1:26:39:1d:78:82:04:f1:69:71:44:24:33:
                    72:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:35:4C:8C:D2:4A:BB:59:F2:89:58:D3:45:19:E8:DD:B6:CE:01:39
            X509v3 Authority Key Identifier:
                keyid:4C:24:C3:08:B0:24:1C:3B:CC:14:CF:67:77:59:1D:27:23:7F:FA:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCTDCLAkHDvMFM9nd1kdJyN_-vE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/92d719-0bc2-4a1e-8b94-661bb0e9e6ec/1/TCTDCLAkHDvMFM9nd1kdJyN_-vE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:6c:f4:09:99:da:8d:27:d9:12:59:ef:98:00:19:be:36:ba:
         ec:9d:90:03:d4:2e:6a:8d:35:19:e0:8a:a2:0a:1d:39:a6:a3:
         51:eb:46:0d:c7:d3:40:59:e0:d9:d6:e4:3a:4f:f4:d2:73:83:
         91:1a:67:7d:f3:8a:3b:6b:e0:e6:78:92:16:08:3d:f0:6a:01:
         57:f6:88:6c:fc:52:75:d0:7a:56:13:4f:9d:93:fe:d3:91:a7:
         56:61:79:ec:6e:7c:61:c8:b8:ee:d6:55:b4:69:0d:75:4c:8b:
         ed:8d:a2:68:6f:e8:e3:7f:73:b5:6a:1a:da:b0:0a:0f:41:66:
         35:ab:45:03:87:2b:32:22:9b:ce:6f:03:c3:9f:d5:ae:7c:01:
         d4:4d:1b:b5:a6:0a:e4:34:1b:cd:c0:9d:e1:87:5b:c5:d7:8b:
         0e:d4:37:d9:f7:62:35:93:54:ca:77:c8:5b:06:2f:cf:97:01:
         6e:d1:42:f6:35:c8:db:c5:e6:a8:de:a3:92:1f:59:a3:94:2c:
         f6:d5:c3:a4:af:aa:e3:78:1b:60:5f:4a:55:ac:b4:46:19:36:
         7e:15:c7:33:03:bd:f0:a9:91:97:49:65:57:01:dc:aa:3b:16:
         59:80:7c:13:a4:94:f6:34:83:87:da:c4:83:45:76:c0:0a:49:
         c1:fe:fd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:53:38 2025 by rpki-client