Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
File:                     TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft (raw, json)
Hash identifier:          ygMcBI4I5o/ZXvPyvpGq6DvP1h7AP8GXzAH9Pw3fxtA=
Subject key identifier:   63:7D:95:CF:C3:1C:18:34:51:CF:6A:36:B4:E4:EA:5B:83:2C:4A:20
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Certificate issuer:       /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial:       01962E62067FAA7A7B95FFD51937AF455039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:38 +0000
Files and hashes:         1: 5XqYz3igdHBUJOarhV6UCk20p4g.roa (hash: OiTQYPv4ItBCPhGaoL4ocDwYxXkvxpj8Eo+XMn3YAwI=)
                          2: BWzUAYzWxehGB0sc7Hoq3s64-5A.roa (hash: Y2Cmk2o0Bi2v58k/tp8mbuKNOVbGQJJqiMnQXIqfVfA=)
                          3: TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl (hash: laAUZ4Mr1CkmMLWYWnN7Q8kA9v5G8rl98/t9AR92OEY=)
                          4: uJBF8l1YNTX1rQwpWIP4iAOZYes.roa (hash: W5zW790ApNcbjg521YyvqbQ8pFLrwOkcD0CU1yoVHdc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:06:7f:aa:7a:7b:95:ff:d5:19:37:af:45:50:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
        Validity
            Not Before: Apr 13 09:01:38 2025 GMT
            Not After : Apr 14 09:01:38 2025 GMT
        Subject: CN=637d95cfc31c183451cf6a36b4e4ea5b832c4a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5c:23:17:b6:d4:db:28:bd:59:30:4d:55:b1:
                    3a:3f:99:2e:70:e0:2f:06:4c:75:7c:09:c5:b0:1a:
                    bc:d9:00:ed:43:7a:3a:2c:26:f5:7e:24:c5:7a:62:
                    2b:c4:0f:63:59:4f:bb:14:67:37:62:1c:fe:a7:a3:
                    b3:5d:e4:39:20:d7:d6:0c:10:24:e8:cd:9c:85:a2:
                    64:52:56:a9:85:7d:04:33:ed:6d:da:9a:f4:30:bb:
                    32:f2:e2:ae:a9:c7:bf:42:5e:ff:6e:d9:ca:1f:a9:
                    54:48:f9:2a:65:42:0b:9b:dd:fe:e2:e0:54:50:7f:
                    2e:64:b4:5d:30:3b:a5:81:01:7a:ad:94:a8:40:4f:
                    9b:01:f7:83:2c:e8:92:17:c5:1c:2d:3b:c7:64:d4:
                    3c:50:27:16:e0:0b:c6:24:92:4e:4f:ea:07:fa:79:
                    41:d9:6c:63:43:8b:ed:ad:6e:c6:9a:79:9b:61:71:
                    7f:38:6d:db:ca:0b:66:3f:90:84:a8:46:d2:96:5f:
                    78:d0:41:77:97:ff:9b:3c:c5:a8:92:c8:9d:ab:41:
                    f6:73:00:5b:52:1b:bb:a1:fc:70:de:ea:cc:9a:89:
                    63:41:04:84:6d:76:15:46:dd:8e:95:69:2e:c1:37:
                    dd:42:80:08:0a:02:29:5c:5e:3a:44:47:4d:81:bd:
                    76:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7D:95:CF:C3:1C:18:34:51:CF:6A:36:B4:E4:EA:5B:83:2C:4A:20
            X509v3 Authority Key Identifier:
                keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:32:31:72:de:79:d9:09:bd:37:f2:ae:70:ff:ff:72:25:3e:
         80:00:8c:e4:36:e4:6f:52:cb:b8:c2:2d:62:73:98:ca:2a:43:
         04:b4:db:be:e5:b0:c5:f8:ff:c9:9c:4a:3d:75:05:89:31:21:
         9c:7a:b7:cc:91:03:a8:ab:b5:2c:53:37:9e:14:60:c3:41:ec:
         e0:49:9f:25:02:64:cd:85:58:04:8e:a0:e8:5d:3c:59:c0:26:
         0f:c4:54:81:7d:54:a3:af:01:0e:98:1f:29:62:b6:82:7f:b5:
         a0:57:19:e9:bd:33:3e:30:f6:6e:1e:09:e1:3c:53:8e:68:13:
         4e:a7:6e:93:0b:2b:19:f5:0f:d2:8a:29:01:39:6b:e9:bb:ca:
         dc:22:10:ca:54:83:77:1f:6d:90:1d:70:a0:a6:02:46:8c:ad:
         db:f4:5a:a9:54:02:fd:e9:f5:23:c3:68:15:44:63:f3:a5:12:
         c7:47:5c:2a:08:f9:d5:4f:76:35:5f:96:30:b5:65:da:a0:cb:
         8e:cb:50:b0:19:a6:48:bb:5f:eb:e7:c8:68:2f:73:98:99:83:
         d2:35:99:d7:c9:7d:77:3c:cf:fe:3d:88:a3:cf:0c:2c:5f:cd:
         c7:d3:57:8d:54:f3:f6:c5:27:3a:46:ce:f5:92:a6:d5:3d:e9:
         bb:f1:26:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYgZ/qnp7lf/VGTevRVA5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjOTg4YjkzYWI3YTI5OTlhMzI1NWVlYWU0ZTE4YWIyM2Iy
ZTBmM2UwHhcNMjUwNDEzMDkwMTM4WhcNMjUwNDE0MDkwMTM4WjAzMTEwLwYDVQQD
Eyg2MzdkOTVjZmMzMWMxODM0NTFjZjZhMzZiNGU0ZWE1YjgzMmM0YTIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0FwjF7bU2yi9WTBNVbE6P5kucOAv
Bkx1fAnFsBq82QDtQ3o6LCb1fiTFemIrxA9jWU+7FGc3Yhz+p6OzXeQ5INfWDBAk
6M2chaJkUlaphX0EM+1t2pr0MLsy8uKuqce/Ql7/btnKH6lUSPkqZUILm93+4uBU
UH8uZLRdMDulgQF6rZSoQE+bAfeDLOiSF8UcLTvHZNQ8UCcW4AvGJJJOT+oH+nlB
2WxjQ4vtrW7GmnmbYXF/OG3bygtmP5CEqEbSll940EF3l/+bPMWoksidq0H2cwBb
Uhu7ofxw3urMmoljQQSEbXYVRt2OlWkuwTfdQoAICgIpXF46REdNgb12NQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGN9lc/DHBg0Uc9qNrTk6luDLEogMB8GA1UdIwQY
MBaAFEyYi5OreimZoyVe6uThirI7Lg8+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEppTGs2dDZLWm1qSlY3cTVPR0tzanN1RHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80YzFmNTktMGMxMi00MTUzLWExNWMt
NzE1ZjljZDYzMDg2LzEvVEppTGs2dDZLWm1qSlY3cTVPR0tzanN1RHo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80YzFmNTktMGMxMi00MTUzLWExNWMtNzE1ZjljZDYzMDg2
LzEvVEppTGs2dDZLWm1qSlY3cTVPR0tzanN1RHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIzIxct55
2Qm9N/KucP//ciU+gACM5Dbkb1LLuMItYnOYyipDBLTbvuWwxfj/yZxKPXUFiTEh
nHq3zJEDqKu1LFM3nhRgw0Hs4EmfJQJkzYVYBI6g6F08WcAmD8RUgX1Uo68BDpgf
KWK2gn+1oFcZ6b0zPjD2bh4J4TxTjmgTTqdukwsrGfUP0oopATlr6bvK3CIQylSD
dx9tkB1woKYCRoyt2/RaqVQC/en1I8NoFURj86USx0dcKgj51U92NV+WMLVl2qDL
jstQsBmmSLtf6+fIaC9zmJmD0jWZ18l9dzzP/j2Io88MLF/Nx9NXjVTz9sUnOkbO
9ZKm1T3pu/EmsQ==
-----END CERTIFICATE-----