Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
File:                     Tj_pDw-taiXUa9fDNbki2gMbLHg.mft (raw, json)
Hash identifier:          O/imdJ3raA26fdsWsT8Y+7MCZFH6KzVWUbRMNBXIfM8=
Subject key identifier:   DA:66:F1:7C:34:43:F1:B2:38:AC:58:B6:54:62:62:70:E6:A3:8A:2F
Authority key identifier: 4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78
Certificate issuer:       /CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
Certificate serial:       01962F74304673C824E619D7E56D4F93D41B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft
Manifest number:          0992
Signing time:             Sun 13 Apr 2025 14:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:05 +0000
Files and hashes:         1: Tj_pDw-taiXUa9fDNbki2gMbLHg.crl (hash: Gzb6HJkpUc26bosLOstyCyV4qe2Tygq9m4hTdaiKMWI=)
                          2: xBLWMt7CnhdMhsDQsxTJKsgubzw.roa (hash: ZCdYsbGv+ldj13bvl4ML8UTblRYPsZ2+PffnDm+YrGQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:30:46:73:c8:24:e6:19:d7:e5:6d:4f:93:d4:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e3fe90f0fad6a25d46bd7c335b922da031b2c78
        Validity
            Not Before: Apr 13 14:01:05 2025 GMT
            Not After : Apr 14 14:01:05 2025 GMT
        Subject: CN=da66f17c3443f1b238ac58b654626270e6a38a2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:19:00:d6:60:ec:61:70:61:d5:1b:5c:05:53:
                    98:5f:8f:8d:6c:0f:c5:56:6c:29:87:58:2a:75:ef:
                    8d:b4:68:cb:5b:46:ad:29:06:cd:19:66:e5:a1:20:
                    b3:33:d4:a6:2e:db:7e:4b:b3:96:e7:e0:f5:c1:96:
                    5c:21:5f:3d:3b:97:32:8e:c3:98:80:18:b5:8f:84:
                    7a:23:51:8e:b6:e0:cb:cb:42:a5:1f:83:70:26:e0:
                    3e:83:31:0c:2c:a5:3c:98:71:9e:35:a5:d8:23:cc:
                    00:51:56:35:02:f1:fa:0b:b9:36:86:5a:9f:3f:78:
                    84:07:f3:5e:28:4b:88:57:b0:64:ba:bd:15:b8:08:
                    67:60:1f:90:86:c6:09:0e:2f:49:6a:44:c2:b9:f1:
                    98:ed:07:e7:5b:d7:88:3e:45:fb:e3:fc:60:0b:cc:
                    5c:ae:9f:e1:92:2b:9d:84:1c:98:87:0d:81:4d:e4:
                    10:d9:d6:17:ce:9d:10:bf:46:3a:b2:37:03:54:6d:
                    7d:ae:b7:d7:0e:6c:e3:21:71:b3:4d:b7:ca:97:3c:
                    fc:d2:65:a4:75:72:03:76:03:00:5c:09:39:95:38:
                    bd:f0:6b:8b:0a:b0:6c:1b:0d:68:5d:59:e7:ec:96:
                    5b:88:63:c2:1a:6a:01:97:36:a7:96:df:eb:82:15:
                    7d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:66:F1:7C:34:43:F1:B2:38:AC:58:B6:54:62:62:70:E6:A3:8A:2F
            X509v3 Authority Key Identifier:
                keyid:4E:3F:E9:0F:0F:AD:6A:25:D4:6B:D7:C3:35:B9:22:DA:03:1B:2C:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tj_pDw-taiXUa9fDNbki2gMbLHg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4f943f-d16a-48da-b93a-1487c6020c46/1/Tj_pDw-taiXUa9fDNbki2gMbLHg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:5b:0e:bb:e2:bd:16:d0:ce:8e:91:e8:17:79:60:53:3b:8a:
         ae:a2:7b:1e:df:9a:1f:13:f2:38:ed:a9:71:18:4d:44:c3:e4:
         b6:1e:83:b0:4d:f8:b7:b0:00:92:76:e6:f7:34:f1:35:81:79:
         37:74:b0:5c:78:7a:be:51:e7:0c:46:e8:bd:3f:c0:20:35:d2:
         20:d3:ef:a6:61:fd:ec:5e:28:4f:f1:d8:fb:81:d5:e7:c7:38:
         ad:02:c1:0c:48:1f:bd:a4:df:75:4b:d7:d0:5f:34:9b:98:94:
         4a:ed:b7:19:04:59:81:53:e5:8c:19:a1:77:c7:6b:d3:a4:53:
         8b:16:72:b2:3d:d9:e8:d7:d1:d2:28:1a:9c:fa:1e:b5:5f:5f:
         36:90:ff:c5:98:d4:50:15:05:a5:da:04:fa:a1:2e:75:05:75:
         e0:bf:75:0c:ab:69:a7:4c:22:c6:0e:a7:9d:57:3c:d0:3a:0c:
         63:1b:3b:63:7d:1f:b9:16:92:e5:7a:70:1e:f5:4c:31:90:6e:
         e3:bf:72:b9:24:d2:63:b1:85:83:30:dc:d0:e1:66:84:de:31:
         26:6a:26:ca:ff:4f:37:23:6d:14:29:37:03:cb:47:7a:67:bc:
         62:d7:a4:00:3c:c8:79:d2:66:5f:63:49:40:dc:cd:77:9f:70:
         f5:48:3c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----