Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File:                     TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier:          ze0cl9pQ86uG3jwh6zJ18xgIcdguUMaZEAxOMJobXVc=
Subject key identifier:   93:8F:30:EB:08:3B:1D:7E:79:01:2E:0E:37:CB:D0:5C:83:06:F1:15
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer:       /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial:       01962F745B6FBEFBD7C78238082540A3ACE0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number:          057C
Signing time:             Sun 13 Apr 2025 14:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:16 +0000
Files and hashes:         1: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: 6J/jkXoctohr2Wh0h+DTJDb3DM0HD4/B2UPPW2zLqA0=)
                          2: fIoweheWq1JqzVdLBCrrD-x4kK4.roa (hash: yoQba86aaUs4p2P/E/UoxSeIL5NEm/wDobQOVMT4e5A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:5b:6f:be:fb:d7:c7:82:38:08:25:40:a3:ac:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
        Validity
            Not Before: Apr 13 14:01:16 2025 GMT
            Not After : Apr 14 14:01:16 2025 GMT
        Subject: CN=938f30eb083b1d7e79012e0e37cbd05c8306f115
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:8e:41:72:4c:f7:98:eb:51:15:ca:51:30:e9:
                    6e:e1:9d:62:60:3f:52:da:11:fe:fc:6e:b5:f6:11:
                    3b:f3:e3:83:ed:dd:1e:08:dd:63:b7:03:5a:91:50:
                    8c:06:11:4c:ea:71:ad:ac:25:69:e5:9d:02:0c:cd:
                    f5:58:92:ab:80:d7:b1:f0:df:55:23:96:28:85:fb:
                    7c:92:41:5f:3a:69:81:38:ea:0a:5d:82:ce:96:14:
                    0c:55:73:83:a0:24:0f:60:4a:d8:ac:ea:e3:6d:aa:
                    b4:f1:da:25:b8:a7:bb:93:26:1c:67:27:3e:60:1f:
                    1a:ac:56:29:81:bf:d7:bf:d7:7d:98:24:37:ca:28:
                    83:80:61:26:7d:d2:b8:a5:92:31:82:8b:58:fd:b6:
                    bf:c1:61:a4:68:b9:46:65:aa:52:54:79:9b:1f:5a:
                    53:9a:a4:bd:e3:a3:b3:93:36:c8:4e:2a:95:51:3b:
                    25:22:ca:10:46:05:21:b8:87:00:74:a0:c3:f1:00:
                    20:40:2d:4e:93:07:28:06:b1:18:73:fe:61:4c:e6:
                    8f:c7:2a:e9:aa:4f:48:fc:02:ee:d8:de:14:c6:07:
                    89:81:5f:35:d7:3e:52:b4:2b:9e:0f:83:11:d2:c7:
                    d8:41:24:6d:90:43:0d:80:93:54:e9:8c:8e:f1:50:
                    10:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:8F:30:EB:08:3B:1D:7E:79:01:2E:0E:37:CB:D0:5C:83:06:F1:15
            X509v3 Authority Key Identifier:
                keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:1c:95:07:8a:4c:06:0c:3b:b4:70:bc:44:40:dd:04:22:58:
         7d:fe:a5:79:68:1f:19:09:f0:d2:f2:13:a5:61:c9:e8:fc:38:
         2f:ca:60:b3:40:b3:b9:db:13:23:c4:96:15:19:9e:99:52:b8:
         47:16:e8:f2:87:3b:74:3a:89:87:d6:96:43:54:1a:4a:ec:91:
         66:c7:f3:86:3c:0d:f3:6c:92:b3:98:ef:e7:35:06:0c:66:31:
         29:e0:9d:c4:02:0e:7c:3a:a6:6f:44:75:7e:54:da:2f:b7:68:
         44:c3:8f:c6:49:4b:d1:c5:50:c2:bd:40:7c:5a:ce:ed:34:a1:
         ee:ab:39:62:7f:23:65:8d:af:34:53:e0:2e:2d:a9:35:86:dc:
         b3:bf:f8:7b:53:ab:d1:44:13:fc:48:2a:18:3a:b6:43:3a:5b:
         ad:ff:f3:86:86:df:52:cd:09:b5:2c:b4:55:00:32:02:cd:13:
         ed:54:dc:16:22:57:63:91:a0:a7:46:98:d2:2a:b9:33:95:13:
         c2:30:77:60:1b:2f:06:ec:be:88:f0:dc:a5:da:e3:0a:a9:4d:
         01:27:f3:b0:fb:f8:70:29:6f:94:4a:95:17:b8:1c:57:9a:d0:
         fa:ee:8d:5e:09:c9:8d:02:8b:95:e6:39:b9:c6:16:c0:59:45:
         8e:89:fa:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----