Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
File:                     TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft (raw, json)
Hash identifier:          wm/068h01x11OvJ96Gdm9qOWpAvuUqH/iw3Mo1t04Rc=
Subject key identifier:   AC:48:37:0A:EF:38:43:4B:3D:C5:AD:EF:E2:5D:09:93:34:99:B6:97
Authority key identifier: 4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11
Certificate issuer:       /CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
Certificate serial:       01962F3D88CEC85FD206D83A331C389EE1C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft
Manifest number:          0A88
Signing time:             Sun 13 Apr 2025 13:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:23 +0000
Files and hashes:         1: TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl (hash: S5qddb7SfqcO+vD6m/JBj/yg7TX7i0aHOkWZ2vv6r68=)
                          2: tB_e4b44z7tzTJcmPG8zZ2YucoI.roa (hash: s8JbynneL4ehIPiVi1qZbHaxG7ZUldJKZL8Oak7GUOA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:88:ce:c8:5f:d2:06:d8:3a:33:1c:38:9e:e1:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4df0970484eb26bc59fd8fa8d5bf7c3c7212d011
        Validity
            Not Before: Apr 13 13:01:23 2025 GMT
            Not After : Apr 14 13:01:23 2025 GMT
        Subject: CN=ac48370aef38434b3dc5adefe25d09933499b697
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:83:e0:90:8d:d0:89:65:8a:b7:1d:6f:6a:
                    fa:7c:3c:0f:61:ad:31:03:d5:f4:29:a9:91:f9:c7:
                    5c:aa:73:d4:79:48:04:24:bf:43:3b:18:b2:6e:aa:
                    ab:03:85:95:0b:6d:a2:18:f4:91:0b:5b:d9:8c:8e:
                    78:ff:5f:36:73:1e:ab:56:db:22:f3:82:fb:48:f3:
                    2c:9a:c1:ef:ab:d0:18:27:5d:23:8c:46:57:12:44:
                    c5:b0:b9:c6:a9:bd:c2:17:30:ad:a5:e3:2d:d6:7f:
                    fa:ce:c1:df:b0:b0:97:6e:d6:6d:f2:fc:3a:77:07:
                    a1:9c:94:a1:d2:52:3c:f1:c1:fb:c3:79:f6:43:8e:
                    35:36:e5:7d:5d:11:ca:4f:4e:53:13:bd:db:26:ae:
                    30:b0:3d:c7:8f:7d:cb:18:07:52:47:5a:0c:fc:e0:
                    02:66:f6:6f:5f:ab:25:c7:88:c2:dc:ef:1d:06:45:
                    e0:89:7b:56:6c:10:4d:59:a9:2e:bb:ba:e4:db:6a:
                    c7:e3:54:84:d9:0b:30:72:52:4a:59:6d:b7:96:c2:
                    09:46:62:ae:31:26:7f:59:82:74:f2:75:98:2d:ab:
                    d5:02:76:ac:e4:21:1e:b1:29:66:92:ea:41:6c:2f:
                    49:d9:4e:1a:fc:c8:0a:cb:8c:45:6f:11:fb:93:cb:
                    a0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:48:37:0A:EF:38:43:4B:3D:C5:AD:EF:E2:5D:09:93:34:99:B6:97
            X509v3 Authority Key Identifier:
                keyid:4D:F0:97:04:84:EB:26:BC:59:FD:8F:A8:D5:BF:7C:3C:72:12:D0:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfCXBITrJrxZ_Y-o1b98PHIS0BE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8e1198-e50f-416f-9d6b-1e9bff5e4021/1/TfCXBITrJrxZ_Y-o1b98PHIS0BE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c4:b9:f1:7d:51:e1:de:e9:94:67:7d:89:a9:97:6b:3f:bd:
         a4:46:c1:c3:a7:34:77:f1:03:b2:9a:e5:68:36:89:92:a4:7a:
         dd:4b:16:d4:6d:2b:82:de:3e:1a:e5:23:a0:cb:9e:6b:d7:09:
         c4:21:f5:57:ab:9f:8e:2f:5f:a4:f0:22:f8:6e:45:f8:2e:af:
         43:84:e9:f5:fb:0c:cc:9e:b9:de:fc:f6:10:8f:0d:e5:4a:55:
         a4:93:cd:65:2f:cc:5d:f6:06:b5:1b:d2:40:a8:5f:28:1e:bd:
         23:bc:a1:df:1c:dd:c3:e6:d0:13:c4:3f:12:08:8b:c6:a3:01:
         df:fa:14:24:88:9e:56:9e:d1:cd:bf:c3:5a:e4:ec:8a:e8:3e:
         7a:43:16:d8:ee:37:b0:76:51:38:7d:d6:4f:5f:bf:84:8d:ba:
         d8:1a:f2:81:e5:38:ef:c3:3c:0c:a2:03:55:7c:fe:16:2e:bc:
         9f:52:71:44:f2:8e:af:17:db:81:63:0d:b3:ad:39:16:ef:9d:
         57:cd:84:0e:1d:f9:e4:79:a8:cc:64:01:e6:9e:66:1f:83:83:
         4e:12:40:7d:b6:55:85:e2:db:cd:be:f3:ca:01:62:08:6d:ea:
         a0:6c:a6:72:00:31:c6:9c:cf:13:4c:23:bc:a2:ce:3d:1a:10:
         14:e4:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----