Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
File:                     TzYQM0T807V1ny2z88cHE3b54jM.mft (raw, json)
Hash identifier:          E7vrroCBUZuP4LmLME2bLjTapcXzc5/vHu8jV7b3pw8=
Subject key identifier:   1D:34:4A:A3:1D:EF:F1:45:88:60:8B:60:57:54:7A:C2:70:98:81:10
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Certificate issuer:       /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial:       01962E2B346B19D434A1689BF129853B21F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
Manifest number:          14D7
Signing time:             Sun 13 Apr 2025 08:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:45 +0000
Files and hashes:         1: 8Wt50oYgSIhV5-nromefXM1xUHs.roa (hash: nonj7X6EJpkPkTZ26/d/JTxCuBr7E4OqIEl5kLX7Uvc=)
                          2: 8_cQRjzqzZHtBUadp-m1RHbfYtA.roa (hash: UqDtwYBpkHo94AcNyXlmGDGQI5vQH42VfJTVEsv7Dqg=)
                          3: LlXFwn2Cp-oz5_wkoV4hnOjpZhc.roa (hash: b+9t4WdjfYrQBYgVT5TU7qZAYZFFGjvTZY/AWbdEORo=)
                          4: TzYQM0T807V1ny2z88cHE3b54jM.crl (hash: XgZBm1ILrnQWQ6LKolgETj7alxz7mkBV6GajQc7gTfY=)
                          5: X73zSfeynuQ2HFhZg92JJjuC-hI.roa (hash: S3jxFVJaRrRBYwj6SGNBku30PnQhyId+dYaYtS51gvo=)
                          6: qzzHZUBjcSRGFasL_IeeyUOUJ98.roa (hash: Lhbg0pCg1KfB+dSdb+vO645LuzkQlZQdXs3opMNsPwc=)
                          7: uFl9Jbyr6wsOz0RTyXyU1uLpiuQ.roa (hash: IIGP5wcOQKkgCwi0o8TwNvlGqyYDZZaNOwMVkOIQtWw=)
                          8: ugnRmlrkR8TJKKb_eVy88x5cRBU.roa (hash: wA1+l0+3DAminFs23I5vSPrzOSbWOqFz2PTbS6VlnsM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:34:6b:19:d4:34:a1:68:9b:f1:29:85:3b:21:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
        Validity
            Not Before: Apr 13 08:01:45 2025 GMT
            Not After : Apr 14 08:01:45 2025 GMT
        Subject: CN=1d344aa31deff14588608b6057547ac270988110
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:48:f2:9c:f6:3f:d0:73:d5:1a:16:f3:21:39:
                    64:8d:e7:6d:59:1f:7a:ef:35:4a:97:48:14:65:db:
                    e0:8e:08:1f:6e:1e:00:3c:5f:4b:e6:fd:d9:fd:1b:
                    68:ca:39:d1:1e:f9:3b:01:39:ca:15:a7:e9:5c:3d:
                    2c:19:21:fa:27:40:d6:2d:36:c1:74:d8:67:42:4f:
                    ae:7c:f5:c9:79:3b:20:74:6e:95:5b:b9:c7:40:11:
                    a9:03:85:82:f9:b0:c0:89:47:79:78:24:2e:d7:f2:
                    c8:25:01:47:69:c5:3a:a9:1c:2b:02:95:6e:c0:ba:
                    89:39:5b:78:d2:be:b0:bd:c5:0b:a5:66:55:92:63:
                    eb:fe:e2:3a:03:32:29:05:ca:54:cd:9f:eb:54:87:
                    83:75:56:5e:b5:a7:dd:1b:07:4e:89:60:8f:94:73:
                    d1:61:b9:ce:2e:c3:a1:c2:2f:cc:ba:3f:d4:d5:18:
                    0c:11:d7:7a:f5:d2:d4:a1:f6:fb:22:a2:ad:79:34:
                    50:f2:b5:17:e1:78:e7:2c:ea:1d:bf:12:87:45:86:
                    48:94:ef:92:be:3d:b5:f9:64:e0:78:a4:44:86:e6:
                    52:4c:cb:f9:a6:96:22:e3:a9:f0:4f:02:18:4b:3c:
                    d8:4e:74:9f:0d:69:57:14:cd:2b:8f:57:61:a3:ba:
                    20:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:34:4A:A3:1D:EF:F1:45:88:60:8B:60:57:54:7A:C2:70:98:81:10
            X509v3 Authority Key Identifier:
                keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:5d:39:be:70:0a:09:9e:fc:68:43:df:d3:17:4f:27:55:85:
         a4:ad:ef:81:b9:0f:73:cf:e2:9c:79:3c:4a:76:61:b0:4b:68:
         db:fb:bd:a6:08:a2:9d:d6:26:ab:0b:26:05:65:34:51:26:88:
         94:11:c0:fc:c2:d9:32:67:7b:3c:e2:45:42:05:32:d3:5c:38:
         6a:9b:4d:3b:3e:53:87:fc:ee:a8:a3:96:23:33:37:18:12:ad:
         8c:a6:f3:6d:fd:d4:ce:2a:5a:7b:ee:24:c9:87:25:89:9f:4c:
         61:94:e2:06:4d:37:13:a8:12:d7:8e:d4:bc:08:36:c4:19:43:
         bd:c3:77:8f:f5:d0:88:ec:a2:69:6b:3c:42:5b:3f:84:89:5a:
         0a:87:39:61:f7:bb:62:94:d9:76:42:37:b4:90:74:4d:09:41:
         90:e7:25:c9:dd:e5:db:7f:8b:a7:28:55:6a:8b:bb:bd:c1:0d:
         ba:3c:42:ec:b5:be:6b:d7:bb:74:00:5e:31:2c:8a:28:fb:9e:
         31:e9:cc:00:5c:67:06:43:33:bd:61:49:65:e8:88:6c:82:81:
         46:cd:b2:12:44:21:d6:ce:38:e2:b2:88:74:16:a7:14:80:eb:
         a9:f5:93:09:2a:07:8c:ce:37:f0:00:27:8c:d7:d6:f1:95:de:
         a9:c4:eb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----