Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
File:                     ti1M7HgzBZI-NJftiE8cRFtOePs.mft (raw, json)
Hash identifier:          InxeosLlkdJ2jHD9ZMTbtr33cJLlBUS4FI531HeUpJU=
Subject key identifier:   68:F4:F7:84:05:F8:02:34:84:60:C0:B9:D0:50:E0:2B:6B:4D:EE:F2
Authority key identifier: B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB
Certificate issuer:       /CN=b62d4cec783305923e3497ed884f1c445b4e78fb
Certificate serial:       01962E618A25DDAFD84669D310CE88AC50E4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft
Manifest number:          0588
Signing time:             Sun 13 Apr 2025 09:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:06 +0000
Files and hashes:         1: 1ZLLlpQFZQkTqIBAHCc5d1VfoKs.roa (hash: y420UM0xhYvhHVANW5cNvzv2FZY2TvVXtMQ3bLwlcAQ=)
                          2: 8tw_KHHi6CGYhD3JJ8dYd2q6OZE.roa (hash: CHBEM8ZOI7IV+5GWcU/yA4G3UTbvKnv4HCF4/9ncvVU=)
                          3: Lu657SoGRO5i41akpdqVykwmDPo.roa (hash: L0TXwFUTYgd55jn30MVoW0Y/jyiw8Ro0oBxR271bBjw=)
                          4: mWU4uI3AED3kVRIGqsNYpuYsgY4.roa (hash: Fq84oAvE6fP7h+/uIBzyy7ivRhelDe2jm1K3Ltmpeog=)
                          5: ti1M7HgzBZI-NJftiE8cRFtOePs.crl (hash: opBomyNPT642zo/USqg6Lubm8MxF6/k0m3XYBJN9iZ8=)
                          6: uvReHNZu0Zx8p75NQaqJP-qKUVY.roa (hash: KwvRsYUs0tG71ha16eVgbI+g8wMn509oBtGucdJdGuU=)
                          7: vrn7liTWiOV54a6bn1xF4EHebFc.roa (hash: mJIlU8Z+TC1dGYbjGa/ajMktQWJNT60JPY6KVtsPkZI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8a:25:dd:af:d8:46:69:d3:10:ce:88:ac:50:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b62d4cec783305923e3497ed884f1c445b4e78fb
        Validity
            Not Before: Apr 13 09:01:06 2025 GMT
            Not After : Apr 14 09:01:06 2025 GMT
        Subject: CN=68f4f78405f802348460c0b9d050e02b6b4deef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5f:70:58:6c:35:80:68:c9:1e:49:f4:16:fe:
                    dd:6d:bb:de:d7:12:98:b1:3d:25:25:2a:83:5e:db:
                    d6:aa:df:46:7f:ac:db:6a:cd:18:9c:4f:9c:49:6e:
                    e9:39:46:10:22:e9:3a:1b:6f:4e:a8:59:37:4d:b8:
                    a7:e2:14:fb:06:cb:9a:39:48:44:0c:e8:5f:40:76:
                    37:4e:e0:e7:6b:b3:af:ab:2a:e3:8a:43:81:75:12:
                    12:ca:f9:7d:6e:42:3d:9a:69:64:63:d0:30:82:ed:
                    b2:5a:09:c7:e5:b1:e5:ce:8a:c2:3c:a7:63:b2:cb:
                    fa:58:cd:6f:d6:a6:1f:40:b3:99:45:32:76:2a:0f:
                    0f:3d:5b:1c:29:4d:07:51:20:35:54:c9:8f:8d:80:
                    2f:f3:59:c9:81:47:58:34:9e:43:27:1b:8b:6d:39:
                    83:75:3c:3c:fc:27:b4:6e:cd:d6:ca:a9:44:46:6a:
                    7e:79:b6:00:71:46:c7:c8:95:e3:ea:39:4e:cb:cc:
                    f3:23:d9:71:f5:c5:f7:6d:3a:f5:63:d9:f4:c7:91:
                    2a:ee:4e:35:b0:79:b2:0e:e5:3a:e2:cd:c4:f7:a0:
                    af:00:5c:f2:17:12:2c:0b:c7:b5:c7:b5:e9:90:fb:
                    de:6d:fc:71:39:fa:2e:17:4f:96:32:50:44:5a:1e:
                    76:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F4:F7:84:05:F8:02:34:84:60:C0:B9:D0:50:E0:2B:6B:4D:EE:F2
            X509v3 Authority Key Identifier:
                keyid:B6:2D:4C:EC:78:33:05:92:3E:34:97:ED:88:4F:1C:44:5B:4E:78:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ti1M7HgzBZI-NJftiE8cRFtOePs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f1b3da-bebf-44b0-ab12-d32e27fb7e59/1/ti1M7HgzBZI-NJftiE8cRFtOePs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:d4:88:90:d9:51:74:80:52:9a:be:27:d9:70:09:2b:09:e9:
         6f:23:28:a3:f2:03:8a:f0:5f:d4:88:d4:1b:33:29:49:b8:09:
         85:c8:b0:5f:9b:51:ea:34:e4:b5:b5:e0:c8:8b:0f:85:71:5b:
         41:15:ce:96:71:a2:b3:a9:84:39:cc:51:2a:4e:d6:22:6b:3d:
         a9:51:97:a1:1e:01:2c:5b:a5:9b:55:fb:13:5e:e6:6a:34:6c:
         41:69:95:ad:0e:3a:cc:d6:ae:08:a7:9a:da:d1:b1:00:d9:64:
         33:b1:9f:07:ad:c1:3d:61:c6:f0:88:73:07:af:89:42:44:59:
         26:2b:50:c9:2f:74:cd:3a:2f:6d:fa:9c:ad:07:aa:bc:c5:56:
         0b:38:7a:a3:19:45:c2:c1:1d:48:9a:86:36:bf:eb:06:79:c3:
         8e:3c:e3:e6:c5:ef:9a:fb:f8:69:57:04:d2:d8:1b:f9:7c:db:
         98:62:9c:28:8b:2c:e8:11:eb:66:a4:98:e0:4b:27:8a:2e:af:
         15:0e:4e:04:b7:23:cc:ea:e2:ba:a5:f6:cb:db:3c:05:14:fd:
         57:eb:e8:72:9f:19:7f:ae:1f:99:a5:07:8d:3c:0a:9e:26:a1:
         a9:c4:c8:68:8b:43:3e:7f:66:e8:dd:0d:7e:dd:11:b5:75:7c:
         9f:35:52:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----