Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
File:                     TRDp1PSvuKTRuRnshZP0a6O7p_c.mft (raw, json)
Hash identifier:          4IN686SIFYNrNUmy4CRNeN5gvW5ZG/2iFEDZGJwCTVI=
Subject key identifier:   ED:9C:8C:9A:A1:E5:CF:6F:93:BE:3D:3D:53:FF:2B:09:B4:2B:9A:70
Authority key identifier: 4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7
Certificate issuer:       /CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7
Certificate serial:       01962F7454C0B29CADE03945FD45D21D2F2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft
Manifest number:          11EC
Signing time:             Sun 13 Apr 2025 14:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:15 +0000
Files and hashes:         1: KbSVDODyeN3kHoikV78WDWGb18w.roa (hash: oRCPK1YwXowGG8GKKm2eZqlzH0XvN6BREuS7mGHYkgI=)
                          2: TRDp1PSvuKTRuRnshZP0a6O7p_c.crl (hash: Kr1olwspqkD+iPuAFouAxo9E6zzknT67/uJo4T/x0ek=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:54:c0:b2:9c:ad:e0:39:45:fd:45:d2:1d:2f:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d10e9d4f4afb8a4d1b919ec8593f46ba3bba7f7
        Validity
            Not Before: Apr 13 14:01:15 2025 GMT
            Not After : Apr 14 14:01:15 2025 GMT
        Subject: CN=ed9c8c9aa1e5cf6f93be3d3d53ff2b09b42b9a70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:d9:7b:19:f9:fc:61:02:74:fa:dd:9f:de:
                    fc:9a:fd:0e:cf:ba:10:30:c7:e9:d4:d9:4d:50:0f:
                    e0:0f:5b:dd:58:1a:68:a6:82:35:ad:db:d3:05:23:
                    2d:f2:1b:bd:36:8c:ed:f4:7e:c2:d8:08:a5:7d:f4:
                    4c:57:d2:30:10:7c:14:84:de:3c:c6:b9:fa:5f:68:
                    f0:be:20:17:47:51:d8:41:87:78:cd:bd:26:d8:97:
                    d8:c5:ba:3a:b8:9d:ff:c3:b6:1f:ca:18:4f:90:8e:
                    da:fb:4f:62:98:e2:64:67:c9:87:6d:1b:12:d7:ae:
                    fc:41:c2:a8:f7:ac:91:6a:04:fa:42:30:a8:5b:c7:
                    fe:9b:c1:c9:dd:da:03:c3:74:aa:1c:3f:ea:58:83:
                    62:a4:fc:7c:cc:ef:8d:9f:d7:ac:bf:b2:59:8b:a0:
                    04:25:f1:6e:88:ba:6b:22:ee:e0:7f:81:71:a4:49:
                    13:28:54:7e:65:b7:c4:81:d4:74:fe:63:c3:15:6e:
                    d1:74:97:25:2c:2e:c1:da:53:e3:1a:03:d7:bd:80:
                    63:5f:69:5c:9f:0e:a7:b7:61:f2:d3:0b:14:4b:b1:
                    22:34:14:1f:39:ff:1e:5b:1c:90:38:5f:24:ad:b8:
                    70:66:af:af:e7:ba:40:f6:dc:2b:59:99:bf:d5:a0:
                    34:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9C:8C:9A:A1:E5:CF:6F:93:BE:3D:3D:53:FF:2B:09:B4:2B:9A:70
            X509v3 Authority Key Identifier:
                keyid:4D:10:E9:D4:F4:AF:B8:A4:D1:B9:19:EC:85:93:F4:6B:A3:BB:A7:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRDp1PSvuKTRuRnshZP0a6O7p_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e3d8b1-101f-40e8-bcd3-155af9d83036/1/TRDp1PSvuKTRuRnshZP0a6O7p_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:70:4e:f2:42:90:b4:d0:8f:96:12:66:8f:63:1c:2a:07:92:
         d9:6d:96:05:a5:c6:a8:e0:e6:11:12:d5:0f:0d:4b:92:2d:14:
         8a:5d:2c:50:a5:55:81:63:e1:64:17:c1:74:23:ac:7f:d1:19:
         6f:6c:5d:2f:79:d1:57:8e:03:ec:ad:0e:3d:03:3c:03:cd:3b:
         1f:75:96:fa:cb:c1:29:62:f8:7b:8b:75:61:bd:52:8f:6f:d7:
         8a:81:cc:f1:bd:c6:b8:cd:58:67:07:09:36:7d:86:df:f0:bf:
         cc:4d:98:5f:e5:1d:d0:5c:b0:86:9e:cb:83:18:e2:bc:26:08:
         68:18:b9:50:e8:82:8c:70:61:c7:e0:56:43:12:6b:f5:12:49:
         2d:36:e0:ad:4e:92:ce:25:c2:ff:eb:ce:ba:3b:0b:4b:b4:e1:
         ce:12:91:37:24:37:9e:59:4a:9b:27:7a:26:a4:ac:85:c0:9a:
         09:85:28:6d:dd:45:b0:cb:9e:71:16:d6:34:87:3b:bb:24:3e:
         05:a2:40:cd:d3:e3:91:89:e0:a5:e8:e2:84:92:39:d1:c5:00:
         07:15:75:6a:f5:cc:80:13:36:81:82:f8:a9:16:b7:1e:fe:fa:
         2e:dd:13:0d:5a:33:99:17:e9:17:2b:c7:bc:5c:5d:ed:97:1d:
         94:c7:15:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----