Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File:                     T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier:          ePv0pceqO7JaZfBQLb4ToD/p+ToKqpc1Anka7E3L9XY=
Subject key identifier:   C3:9D:2F:A0:C3:94:06:E6:F8:D5:1D:42:23:7D:B4:1E:E8:28:06:F2
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer:       /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial:       01962DF410FFBCBCA71CA27D7F25F985B6C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: k+c/GzekkyiD70RewnQrTB3095CB5zXB6WWVpc170Fk=)
                          2: kfsN1HfyfK-NQ9iZIGxx8I0iebc.roa (hash: 471clsXqk9Nk68jCHR5a7ma3NzbA1DO/nClDnuoSJLA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:10:ff:bc:bc:a7:1c:a2:7d:7f:25:f9:85:b6:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=c39d2fa0c39406e6f8d51d42237db41ee82806f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2c:0b:38:2d:55:80:05:c4:f0:b1:09:ad:2d:
                    f1:7b:99:da:21:55:34:ae:a1:56:6d:b1:2e:59:d3:
                    7f:28:39:0a:bd:e1:d1:ad:c3:5f:5a:57:b2:f3:99:
                    c2:4f:81:b1:37:ba:08:4f:24:4f:c4:f4:7f:e7:fb:
                    bb:83:c7:7e:d8:05:45:dd:4e:44:61:17:1b:32:9e:
                    a1:63:22:ca:6a:f4:62:43:15:77:ae:d0:e3:0c:0b:
                    88:88:7f:4e:f8:28:65:fc:57:1c:16:d5:f7:03:14:
                    c8:14:64:c3:0a:dc:f8:72:c8:2f:85:2a:6c:b8:59:
                    22:d6:59:f0:97:c0:ba:26:00:f4:3f:73:0c:2b:98:
                    1d:f4:d8:0a:03:e1:f2:d9:f5:3c:7a:9f:f6:a7:db:
                    8c:40:4d:d2:06:33:b7:aa:50:d2:a4:6d:cf:c2:ff:
                    1d:83:b6:98:ee:09:79:48:a3:c5:d5:39:5a:c4:ed:
                    7c:2c:e3:db:21:24:fd:3a:87:63:dc:78:a7:b4:4d:
                    cf:73:2d:b2:ed:d5:22:51:dc:0e:7e:62:d7:71:3e:
                    91:d6:d3:8e:29:e2:0d:0e:3b:4e:e2:02:f3:ae:96:
                    c9:3a:f9:50:a5:a9:d2:9f:24:79:c5:14:83:3f:bb:
                    2a:c1:1d:83:84:21:f1:bd:61:df:71:31:2e:1d:62:
                    cc:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:9D:2F:A0:C3:94:06:E6:F8:D5:1D:42:23:7D:B4:1E:E8:28:06:F2
            X509v3 Authority Key Identifier:
                keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:e3:74:45:ee:30:25:0b:e6:2f:67:43:5a:8a:bf:b7:91:c2:
         f9:a9:aa:ad:75:d1:b8:f1:9e:ee:6c:a1:6f:4d:5b:4b:b9:26:
         e5:06:c7:a2:0b:0f:34:27:f4:41:30:f1:e8:f9:2c:e2:b1:2c:
         1e:16:90:4c:35:2c:bb:30:1c:f8:90:4d:72:2a:0b:d2:24:0d:
         50:d4:95:89:f3:c7:bf:f5:58:64:ce:84:6a:68:d3:5f:d5:bb:
         8d:cb:e7:22:76:ae:6f:8c:83:ab:36:a4:5d:f7:a7:30:f7:7c:
         d3:85:18:20:0f:3f:39:ab:5d:49:c0:56:11:b0:3d:2e:8b:3f:
         d3:3f:7a:98:16:86:5c:9c:c9:dc:38:3b:bd:1f:6f:c0:28:7b:
         8a:a2:8e:8e:53:e2:7d:a0:24:6b:55:86:72:ce:db:a0:1e:dc:
         3d:7f:be:f7:69:91:cc:6b:ec:73:2c:78:e1:f5:06:04:68:e0:
         d0:10:a5:9b:9d:15:72:0e:75:80:0d:ad:5e:fa:87:ae:e8:e2:
         49:30:e3:79:fd:00:b2:58:b5:44:d7:09:a5:15:2b:d3:98:2f:
         f8:98:33:48:3c:35:bc:76:c0:e8:57:53:ca:22:ac:a3:fd:c1:
         63:62:63:f9:c2:be:d3:14:23:34:04:c9:89:a0:21:54:72:a8:
         f7:6f:99:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----