Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
File:                     tRYDJr5-XNw1tcA2RBFjzSWkl00.mft (raw, json)
Hash identifier:          K8z5til9k1jww1SJkCY4USyt+FwSWAbKFNY+e7ibEqw=
Subject key identifier:   A9:4B:18:56:76:06:12:72:69:55:5B:C2:52:06:AB:82:24:03:37:79
Authority key identifier: B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D
Certificate issuer:       /CN=b5160326be7e5cdc35b5c036441163cd25a4974d
Certificate serial:       01962E2B4323A3D5849F1CC442C04AEB53D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: 8ia-FfbPiHzFeisz5Ltz_iH4NuE.roa (hash: 2vUluYbn/ZjPa8MjPMnro3n0N0IitO4q9I7893CE2pw=)
                          2: tRYDJr5-XNw1tcA2RBFjzSWkl00.crl (hash: csHeiYY4D7r4GtPEKexaw08AhcZKzoP5LyqqvMWra0M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:43:23:a3:d5:84:9f:1c:c4:42:c0:4a:eb:53:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5160326be7e5cdc35b5c036441163cd25a4974d
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=a94b18567606127269555bc25206ab8224033779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:25:75:11:57:fb:13:e6:42:f0:8b:01:28:71:
                    89:ea:0c:1f:a5:a1:8c:f9:d6:2a:2a:b8:27:35:1e:
                    6c:64:fa:0a:d3:9b:6b:17:23:f1:d3:b2:0b:e5:f8:
                    de:c2:04:f2:62:77:32:1b:96:f9:7f:62:f0:a3:0c:
                    83:73:fb:9a:d3:cf:b3:7c:a8:e4:15:bf:68:ec:df:
                    71:54:cc:cc:f8:a6:4b:79:91:8b:f0:60:0c:f5:03:
                    48:05:c3:8c:c2:9b:04:23:22:20:dc:54:d1:b1:9d:
                    ad:f2:6e:2d:fc:cc:f2:6b:4a:d5:fc:26:af:66:4f:
                    3f:46:78:e2:08:15:00:c5:ea:5e:11:a8:5d:26:a7:
                    c3:fe:a6:bf:a1:49:ad:cf:13:77:0c:17:8e:e7:7e:
                    a1:64:50:1c:d7:02:95:e1:c9:c8:11:f1:72:fc:16:
                    50:09:fc:4a:c3:d0:51:c2:3e:78:5c:73:7e:39:4e:
                    61:df:ad:d6:ae:be:f3:1f:49:1b:1e:94:ef:03:8d:
                    45:91:7b:06:8c:47:04:db:a8:dc:fc:a9:78:b9:cb:
                    bd:45:6c:66:a4:63:87:b5:31:5b:93:68:35:90:2d:
                    86:b5:f9:00:52:1f:83:ca:81:7f:fa:fd:13:88:79:
                    bf:32:37:b3:55:31:97:ca:a7:41:e0:13:53:26:3b:
                    45:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4B:18:56:76:06:12:72:69:55:5B:C2:52:06:AB:82:24:03:37:79
            X509v3 Authority Key Identifier:
                keyid:B5:16:03:26:BE:7E:5C:DC:35:B5:C0:36:44:11:63:CD:25:A4:97:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRYDJr5-XNw1tcA2RBFjzSWkl00.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/0e5aa2-8409-47a0-b479-f48aa2e754e5/1/tRYDJr5-XNw1tcA2RBFjzSWkl00.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:da:ce:3e:14:f3:81:b2:a6:54:c4:d3:5b:d0:82:6c:bb:52:
         3f:04:aa:fa:8e:b2:97:5f:9f:c2:31:09:6c:65:c0:9c:8b:ed:
         ea:35:b2:9a:d0:03:46:b4:e5:5d:64:26:50:a0:20:56:1f:1c:
         d6:f9:63:d4:cd:d8:3f:17:ac:4e:18:2c:3f:3f:af:1f:6a:24:
         4a:8b:f9:c3:5c:1b:60:b0:b2:64:29:9d:ed:6d:f8:78:26:a2:
         55:9e:1a:9c:67:27:66:34:8b:5c:28:8f:3d:49:49:7c:1c:c7:
         1d:9e:75:10:07:1c:48:b2:e1:fa:ac:0c:4e:67:a1:23:8f:e9:
         32:d3:cb:e3:91:df:f9:5e:3e:2e:4f:6a:2b:05:a0:36:3b:bb:
         57:ed:e4:06:70:67:80:78:2f:b2:29:0f:5c:fb:ad:f8:6a:52:
         d6:9d:f6:c4:19:4d:39:00:c3:70:fd:c3:ba:82:3c:e4:64:d1:
         58:37:3c:47:84:d3:3d:41:ec:8a:12:ff:9a:86:ae:d2:c9:87:
         65:5d:0c:61:1d:fd:3d:8d:f0:8c:34:5d:a5:25:aa:6e:66:52:
         49:c9:e3:66:8e:78:16:2f:70:a4:6b:b2:37:9b:db:b0:74:13:
         90:d1:69:d6:5d:b5:87:08:18:89:6e:12:90:ed:85:0c:ac:fb:
         c9:35:4e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----