Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
File:                     tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json)
Hash identifier:          5OAUuIkoOGxMvIvaIYDd9rEVZvPjoJYxxrlI7xTK5gM=
Subject key identifier:   8E:F4:39:9B:D2:53:F7:C2:6B:1B:76:B7:AF:52:4D:52:3D:2D:A2:5B
Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
Certificate issuer:       /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Certificate serial:       01962F749E62054B81145EE6EA80F5341419
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:33 +0000
Files and hashes:         1: 4yLFcyM54Hv8nF5ON-TIrD-1oYQ.roa (hash: hE+OT4FiIcXi0TRuDiRDYqpuBeR4hhUYci4sdFCd/CY=)
                          2: jKEy0LJLh7AqTPNLnCDWho1dIJ0.roa (hash: BKRsVG5h+FxIv9YJSObhtgL9EqcN1BIPxpc/4d7NHx4=)
                          3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: kxP0AGrsP49YkvAyjDTf9RMh+ZQRiG22zr9ovL0JW4o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9e:62:05:4b:81:14:5e:e6:ea:80:f5:34:14:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
        Validity
            Not Before: Apr 13 14:01:33 2025 GMT
            Not After : Apr 14 14:01:33 2025 GMT
        Subject: CN=8ef4399bd253f7c26b1b76b7af524d523d2da25b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:f7:71:ec:9c:d1:df:6a:74:47:42:3e:68:ea:
                    bc:ad:04:03:f8:1d:8d:c9:fe:16:6e:12:9d:70:b2:
                    14:f9:ff:4c:3e:6a:73:02:06:20:50:6e:9b:e5:6b:
                    d1:76:1b:d9:ff:9e:40:3d:de:09:9d:08:b3:44:98:
                    fc:67:5e:76:7c:60:55:f7:e6:f5:ec:a1:ef:9d:e3:
                    cb:d1:b1:94:15:25:40:9e:24:92:85:77:b3:80:53:
                    6f:e1:9a:66:4f:e0:49:18:6e:39:c1:86:67:68:93:
                    e7:15:4c:a4:72:3c:b8:19:77:3a:ca:00:c0:91:69:
                    21:0a:f8:c0:78:95:fb:7a:2d:a3:3d:64:f9:82:51:
                    7b:b8:07:1a:b2:b9:be:08:fd:5f:f7:96:3e:57:5c:
                    c5:e2:70:15:d9:2e:db:8c:4a:fa:aa:2e:c9:3a:3f:
                    53:2e:b5:6b:93:2c:7d:4a:c7:5d:f4:44:5d:56:32:
                    15:30:6a:eb:42:cc:91:bb:59:eb:c2:20:17:50:4d:
                    91:d9:76:00:bc:b6:7b:ef:3a:59:02:45:61:e2:0e:
                    7b:59:c9:f2:46:e8:87:b9:a1:21:f4:fd:ae:ef:1b:
                    1a:c8:ba:be:f9:08:a2:3e:23:e4:a4:bd:e3:d9:93:
                    5d:37:0c:1b:8f:01:31:a4:d6:64:78:18:0c:75:4b:
                    23:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:F4:39:9B:D2:53:F7:C2:6B:1B:76:B7:AF:52:4D:52:3D:2D:A2:5B
            X509v3 Authority Key Identifier:
                keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:a9:eb:d2:1b:41:b7:9a:79:b5:87:5c:66:ec:7a:58:6b:c3:
         64:c6:b8:12:b7:c2:44:50:b8:7f:3b:b0:77:a9:86:c0:8f:e2:
         1e:48:bb:40:e2:0c:74:83:12:f5:dc:ed:5c:bd:ca:eb:22:1c:
         19:a8:14:68:b7:94:1f:1d:5c:0f:d8:6e:4a:d5:84:63:58:0f:
         cd:ea:5d:3c:71:71:da:05:56:07:ad:d4:4f:eb:5d:e8:fd:5d:
         bd:e8:bc:91:09:03:d7:9c:bd:bf:04:98:53:1f:34:23:a1:96:
         f2:8e:ae:93:85:28:46:f8:60:5c:14:62:32:48:90:0b:55:15:
         ed:f7:e7:f0:33:fc:8a:cd:22:06:2d:14:4b:28:57:62:3d:d3:
         76:2d:82:eb:a3:13:81:06:0a:72:96:c9:50:4e:68:88:03:ac:
         f0:e5:79:6d:59:e4:79:93:e1:af:9d:1e:a1:d4:6e:c7:39:e8:
         78:c6:32:c6:40:81:79:3e:3e:3b:0e:15:9a:1d:7e:54:b3:eb:
         ec:19:04:95:1a:4c:17:fe:a9:8d:0a:06:61:4c:c3:4b:bd:ff:
         16:b0:6c:7c:e2:8c:0f:7a:e1:3f:2e:db:e8:b5:6e:8c:34:53:
         98:57:05:79:cb:78:5a:f0:47:d1:01:82:86:c2:6f:e1:1d:29:
         6d:eb:fb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----