Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
File:                     e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json)
Hash identifier:          3Qy9Ji1M6MP27+3HphVxkQbxYpxsaS3YueDrhjR1irQ=
Subject key identifier:   5A:41:08:59:DA:23:E2:7C:62:9D:49:69:04:92:D4:2A:12:B2:68:82
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Certificate issuer:       /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial:       01962F745A8D5BF18EFE97B5C9131D68D00E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
Manifest number:          0A4D
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: D6dqSAV/mO3/J7qAnbxtaDVYDcFB6NL1eFPCAWXGE1o=)
                          2: v_CowcE5Ck3oJvuqy3X8AsMCrpA.roa (hash: R72iTRb1FtOGatFwyC/tAu8uMgwI2562hZtdzD4n6xY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5a:8d:5b:f1:8e:fe:97:b5:c9:13:1d:68:d0:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=5a410859da23e27c629d49690492d42a12b26882
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:87:18:cd:9a:4d:04:b5:49:8e:66:a7:6f:00:
                    fd:71:44:28:c0:a5:1b:d7:37:bd:61:48:40:0f:eb:
                    d3:75:64:c0:65:0e:c1:0b:ec:a3:46:0a:4a:fd:f9:
                    b7:c3:b7:5e:a6:d9:6a:39:7f:9a:68:d1:c7:2b:39:
                    50:ef:61:96:84:3b:98:49:08:c3:1b:5e:c4:0b:2a:
                    8b:d6:90:e1:39:f9:9f:89:6d:b0:56:fb:28:99:eb:
                    5c:41:a3:90:e9:4d:1e:cc:02:f6:d2:14:e6:82:60:
                    78:eb:6b:fa:db:18:87:a0:b7:bf:28:68:64:e6:e3:
                    ed:04:02:8e:12:e5:0f:66:ca:b6:c7:68:95:58:16:
                    a8:20:41:ae:61:f0:d1:96:01:ae:a0:93:4f:7b:63:
                    a8:e2:b1:12:27:ea:fe:86:9b:c8:1a:ac:fa:ba:91:
                    3c:a5:f5:8c:ef:d3:b6:48:c6:c7:4c:bb:58:cf:34:
                    1d:4e:10:73:7f:5e:ce:bd:0a:67:d0:6c:92:a1:02:
                    5c:56:bb:96:e9:61:5a:a9:7f:e1:75:2f:cd:a9:76:
                    2b:6c:71:69:64:46:47:28:5e:17:c5:e2:d5:f6:db:
                    76:89:11:c9:24:d4:75:3e:ce:fc:0c:25:c8:10:fd:
                    58:76:c4:92:30:d1:4c:2c:ff:fc:cc:26:42:bb:9f:
                    f6:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:41:08:59:DA:23:E2:7C:62:9D:49:69:04:92:D4:2A:12:B2:68:82
            X509v3 Authority Key Identifier:
                keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a3:b4:13:bb:bd:35:25:4c:19:be:11:d3:9e:5b:e9:da:ae:
         ae:8f:95:5a:c2:86:90:53:62:d0:09:7f:10:5e:ad:35:1f:38:
         52:25:3e:02:77:1c:f2:cf:cb:dc:c3:4e:a3:e8:a9:49:ac:f3:
         03:a5:72:87:a2:97:d7:8d:ae:b4:bc:2f:ad:8a:39:90:02:47:
         90:e3:15:f5:7c:ca:54:bd:b8:55:8c:23:8b:e7:b6:62:17:22:
         09:4f:36:e1:b2:bf:70:8a:5c:7d:6c:62:d7:38:db:d4:6a:5e:
         5c:6a:d9:18:79:da:c3:86:84:92:02:30:c6:5e:95:28:2b:f5:
         0e:24:50:7c:7a:2c:14:7d:62:31:a3:8a:3c:29:11:e4:1f:ab:
         64:6e:22:ef:43:a7:4e:04:a8:d4:01:2d:4e:9e:bf:3b:aa:f0:
         0d:b5:40:f8:da:a7:b2:b4:41:45:53:f6:eb:3d:aa:19:9d:f0:
         7e:99:96:19:a7:e0:01:d4:25:af:08:58:30:28:a7:6e:f3:82:
         30:d2:97:d8:79:a6:3b:a4:95:cb:ca:78:cf:f3:5e:45:80:aa:
         77:2a:f4:70:b8:cf:1f:32:13:b2:b2:32:8b:d5:f0:ff:45:00:
         f6:35:f3:90:bd:ea:4b:22:7a:f5:75:e9:f1:46:f1:66:e5:e0:
         e7:a6:47:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----