Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File:                     TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier:          BbDweTOw0pNGyjM0FXfZ60XLT91qhsnWSehxevIJEQ0=
Subject key identifier:   86:35:71:24:04:CA:92:75:6B:B8:79:1B:F5:8D:98:DB:7A:9C:EE:C1
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer:       /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial:       01962E9963841644C2984AC93DEC0EEC31EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number:          0945
Signing time:             Sun 13 Apr 2025 10:02:06 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:06 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:06 +0000
Files and hashes:         1: 4J7Io1jEwgS2RhtnGjopliZ5_no.roa (hash: QO5aB2FmunA0lEdEAxyr6sEsO8466VD4EugW4s0Q6Rw=)
                          2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: vqLSuI36jLXnbU8JjrsAsFjZVEGWHR3aRqTKj92SFdo=)
                          3: ge3kV53d3-LqnCvvkoEAivLZ1y8.roa (hash: SauMWlDrg7IfvsdJxQ9Eu8dcWvkF6O4OvV9rmn3sxVs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:63:84:16:44:c2:98:4a:c9:3d:ec:0e:ec:31:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
        Validity
            Not Before: Apr 13 10:02:06 2025 GMT
            Not After : Apr 14 10:02:06 2025 GMT
        Subject: CN=8635712404ca92756bb8791bf58d98db7a9ceec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:78:86:74:cd:1c:28:47:fc:dc:bb:28:ea:b2:
                    97:12:20:7a:42:39:ef:c8:09:ed:13:fc:d5:41:1f:
                    18:ed:56:76:a6:15:f7:21:15:ab:c9:d9:7f:e0:f9:
                    f2:82:69:e6:87:8d:eb:4a:6e:c7:25:f3:a5:5a:c7:
                    29:88:52:e5:17:1a:7e:1c:f6:02:54:20:c2:35:f7:
                    db:c4:13:6f:25:6a:6d:ff:ef:7a:3c:0d:f6:18:9e:
                    e9:31:d9:54:04:b2:dc:b3:e0:73:8c:77:ca:ba:96:
                    1c:00:61:56:04:55:5f:47:89:e1:5b:6a:cb:5c:6e:
                    2b:95:46:72:7e:15:58:dc:8c:12:1c:5c:b5:56:a5:
                    dc:89:5c:65:a2:ee:3e:f3:fd:87:f9:1b:cc:8f:1c:
                    2d:28:2e:a9:15:2b:a5:5a:ec:60:b2:cb:10:12:20:
                    78:3d:23:45:15:88:5e:b6:5b:40:76:66:0c:3e:f0:
                    6a:47:24:69:b5:20:57:53:62:fd:4c:56:76:ad:e5:
                    39:75:b1:0c:22:5e:b4:e4:38:60:63:49:3a:9e:6e:
                    e6:a8:c8:0f:ca:0b:06:79:83:c5:3f:9d:13:4d:1f:
                    7a:43:f0:ad:22:4c:f7:0b:25:cb:a3:5d:86:ee:47:
                    15:57:6c:0d:4c:da:dc:1e:cf:19:9d:86:c5:72:53:
                    cc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:35:71:24:04:CA:92:75:6B:B8:79:1B:F5:8D:98:DB:7A:9C:EE:C1
            X509v3 Authority Key Identifier:
                keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:0c:44:19:7e:5f:e9:14:34:09:e7:a9:4e:55:1f:d9:23:49:
         f1:cb:51:4b:21:14:2d:fd:ad:35:b9:c4:3b:0f:83:0f:c8:68:
         ee:64:6d:53:20:25:4f:aa:f7:20:ae:a5:85:f6:6d:79:e9:c7:
         6c:b2:9f:20:52:3a:b6:de:0e:9f:8f:e6:ec:0c:a8:cf:18:e6:
         56:f5:d0:b0:f3:13:b3:c4:b4:32:90:5a:7f:4c:83:51:24:b4:
         e8:f9:0e:ca:73:da:fa:a7:12:c0:02:97:55:18:87:36:d7:ce:
         c8:f0:9c:39:4d:ed:51:91:dc:f8:b8:47:ab:62:b4:7a:2d:fd:
         64:fc:34:33:75:5f:0a:31:f6:ab:10:c3:a0:63:71:44:90:52:
         ee:5b:47:f1:3b:a8:d7:f8:fb:a4:34:9e:14:8f:1a:88:5f:8e:
         61:05:66:85:80:21:9c:ce:8b:af:5a:39:15:35:b6:ce:c8:2d:
         8f:e4:18:41:a5:d4:aa:37:1e:7b:49:30:23:9a:b1:53:9b:5b:
         2c:36:46:5d:09:a7:bc:2e:7a:54:9c:e1:dd:dc:dc:de:21:be:
         4b:0e:a0:c0:3d:ea:f1:4e:17:a4:b1:a1:01:de:2a:ef:43:9a:
         fd:71:32:a7:81:75:93:f8:74:bc:75:f2:08:e6:66:79:a3:1b:
         75:ea:be:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumWOEFkTCmErJPewO7DHrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjODk3ZjFhMzQ5N2ViYmUyN2I5ZTJmMGQ2ZjNlYWUyYmJl
NjhiMjcwHhcNMjUwNDEzMTAwMjA2WhcNMjUwNDE0MTAwMjA2WjAzMTEwLwYDVQQD
Eyg4NjM1NzEyNDA0Y2E5Mjc1NmJiODc5MWJmNThkOThkYjdhOWNlZWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXiGdM0cKEf83Lso6rKXEiB6Qjnv
yAntE/zVQR8Y7VZ2phX3IRWrydl/4Pnygmnmh43rSm7HJfOlWscpiFLlFxp+HPYC
VCDCNffbxBNvJWpt/+96PA32GJ7pMdlUBLLcs+BzjHfKupYcAGFWBFVfR4nhW2rL
XG4rlUZyfhVY3IwSHFy1VqXciVxlou4+8/2H+RvMjxwtKC6pFSulWuxgsssQEiB4
PSNFFYhetltAdmYMPvBqRyRptSBXU2L9TFZ2reU5dbEMIl605DhgY0k6nm7mqMgP
ygsGeYPFP50TTR96Q/CtIkz3CyXLo12G7kcVV2wNTNrcHs8ZnYbFclPMdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIY1cSQEypJ1a7h5G/WNmNt6nO7BMB8GA1UdIwQY
MBaAFEyJfxo0l+u+J7ni8Nbz6uK75osnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEt
YTc5ZGExYTg1NTEzLzEvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zOGU5NzUtMWY0Zi00MTE0LWJmYTEtYTc5ZGExYTg1NTEz
LzEvVElsX0dqU1g2NzRudWVMdzF2UHE0cnZtaXljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQxEGX5f
6RQ0CeepTlUf2SNJ8ctRSyEULf2tNbnEOw+DD8ho7mRtUyAlT6r3IK6lhfZteenH
bLKfIFI6tt4On4/m7AyozxjmVvXQsPMTs8S0MpBaf0yDUSS06PkOynPa+qcSwAKX
VRiHNtfOyPCcOU3tUZHc+LhHq2K0ei39ZPw0M3VfCjH2qxDDoGNxRJBS7ltH8Tuo
1/j7pDSeFI8aiF+OYQVmhYAhnM6Lr1o5FTW2zsgtj+QYQaXUqjcee0kwI5qxU5tb
LDZGXQmnvC56VJzh3dzc3iG+Sw6gwD3q8U4XpLGhAd4q70Oa/XEyp4F1k/h0vHXy
COZmeaMbdeq+FQ==
-----END CERTIFICATE-----