Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
File:                     tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft (raw, json)
Hash identifier:          m4+ewc7gPxEeGzbASpCkxnaDdsByCPP0m7bqoDsxYeI=
Subject key identifier:   19:25:2C:E2:25:03:A9:3A:64:0E:BC:26:A5:F4:27:68:00:DB:0A:C5
Authority key identifier: B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
Certificate issuer:       /CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Certificate serial:       01962E995446DBB6E56D0EC452464954EC77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
Manifest number:          0B54
Signing time:             Sun 13 Apr 2025 10:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:02 +0000
Files and hashes:         1: tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl (hash: Msj7YIzmUVvzyldWRHu0Rak0Se7I2GMmfZUPcY5OvLc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:54:46:db:b6:e5:6d:0e:c4:52:46:49:54:ec:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
        Validity
            Not Before: Apr 13 10:02:02 2025 GMT
            Not After : Apr 14 10:02:02 2025 GMT
        Subject: CN=19252ce22503a93a640ebc26a5f4276800db0ac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:2d:2b:bd:4c:a7:e7:87:55:93:d5:44:71:aa:
                    b6:de:30:d6:34:e9:b3:00:f7:ad:e4:ee:59:d4:60:
                    cc:50:7c:26:15:36:e2:d1:69:c3:30:f1:ef:8d:3c:
                    65:78:82:69:72:62:81:c8:03:09:7e:a9:8b:67:dc:
                    cc:07:fc:31:43:c3:2a:47:4b:b1:6e:e7:49:06:a5:
                    0a:62:c0:e2:e7:5f:28:b8:cc:68:59:00:85:f1:9e:
                    1b:f8:1b:6f:1e:9a:f1:2e:1a:af:5b:dc:e6:e2:cc:
                    c8:61:00:4e:e0:a7:6e:71:8b:6e:2b:4c:a2:16:4b:
                    06:85:0b:82:c1:8a:a2:67:a7:16:cb:09:0d:9e:a7:
                    0c:b5:47:76:21:25:3c:2a:45:d1:62:c2:8a:6a:e1:
                    28:42:14:4f:10:0f:c2:48:39:c1:23:1b:37:14:28:
                    78:15:a1:3b:ad:6b:9e:17:59:d4:75:36:9e:ab:8d:
                    c7:c8:97:72:c2:98:6a:0c:f9:c5:6e:7a:a5:3f:f1:
                    8f:9f:a2:7d:1e:bf:a3:9f:52:91:95:0e:33:41:38:
                    14:20:a9:1f:1d:f6:96:7a:b5:29:75:f6:e2:b4:fa:
                    b9:dd:a1:85:73:06:bc:83:43:f9:74:3a:6a:5b:27:
                    f6:83:30:e2:b1:92:18:92:e4:fa:51:a8:c7:31:1e:
                    04:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:25:2C:E2:25:03:A9:3A:64:0E:BC:26:A5:F4:27:68:00:DB:0A:C5
            X509v3 Authority Key Identifier:
                keyid:B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:1d:21:10:6e:6f:48:ae:3d:53:0f:89:b7:23:71:52:a2:50:
         79:98:db:ef:cb:e8:e4:67:52:80:85:0a:5f:bc:bf:7a:e9:1c:
         84:12:da:65:ff:c0:24:72:7e:3c:fd:70:ec:88:a3:d4:b9:eb:
         21:be:b6:19:77:20:46:4f:6a:2c:db:a2:21:cf:ae:b3:5e:44:
         4a:5d:55:d2:dd:48:82:44:5e:9f:6f:6c:bf:0d:2d:20:f0:01:
         d9:b6:c1:de:db:42:09:0a:e7:3d:f9:66:30:eb:f9:32:ec:b3:
         c9:d6:83:c3:1f:55:26:49:7e:6d:01:aa:02:b9:fc:22:9f:52:
         16:ed:b8:9e:63:cc:09:e8:cd:e7:b7:b4:68:22:85:49:4a:6b:
         0c:37:5d:33:a2:c7:88:6e:81:db:aa:7c:12:55:60:05:92:9c:
         f0:fe:75:6b:ed:9e:aa:ef:74:da:e7:21:45:dc:a6:0d:11:41:
         f3:fc:4b:05:9e:fa:a0:88:bb:56:b7:8b:8f:31:dc:ee:22:aa:
         66:5b:ed:f2:cc:34:1b:71:2e:0d:23:15:db:04:8d:b0:05:19:
         17:ff:9a:8c:fb:8e:85:3e:97:bb:11:cc:f2:a4:a1:8e:10:a6:
         66:20:32:0b:b9:c8:d9:9c:e0:1b:ab:58:25:4f:c7:9b:ed:0e:
         70:19:76:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----