Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
File:                     TJETJOhpvEyl7IutDT3f9oVEGXk.mft (raw, json)
Hash identifier:          7YpTxB2Oihx5OmlusTWJuWy2qQk9vaQRkYawX9j0uO0=
Subject key identifier:   89:B6:BD:D4:84:B2:EF:30:B1:56:92:F3:2A:49:1F:59:16:5B:F7:9F
Authority key identifier: 4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79
Certificate issuer:       /CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
Certificate serial:       01962DF42ABB998A19A11E0F5FC12F0E77D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 07:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:38 +0000
Files and hashes:         1: 06AfR8ZbdQ5_MZMYhDQjdfTo_kA.roa (hash: EEGnzX0afqpfc3Kn5NnezY7IPw+uVu1JdUrzEk+iDpk=)
                          2: 1-g-A4hn_DsUBjrSOtmwbaV2sjfc.roa (hash: H/p8gImyoUDaEoDvhM9gHqspIznQXZjV/layX0BmypQ=)
                          3: 43zHI9RV_-UV0H8FudTqslXERT8.roa (hash: jjlOWoTue0eCIb3Fk8Ot7n6TxzmNBAQWzlFe/V95Bl4=)
                          4: NBksY7qoZYso21Vw3xYrZFLq5eE.roa (hash: uWalzSU+haa+ieD4qUwSSt1pReJEBtMSVsUZjZILj3c=)
                          5: TJETJOhpvEyl7IutDT3f9oVEGXk.crl (hash: H2dLguw+EB2wXoBdtHcUPFLo5gUbvM34ZqMigGLskms=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:2a:bb:99:8a:19:a1:1e:0f:5f:c1:2f:0e:77:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c911324e869bc4ca5ec8bad0d3ddff685441979
        Validity
            Not Before: Apr 13 07:01:38 2025 GMT
            Not After : Apr 14 07:01:38 2025 GMT
        Subject: CN=89b6bdd484b2ef30b15692f32a491f59165bf79f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:73:d6:56:7e:b9:25:3d:45:0b:ad:43:9b:f7:
                    83:8f:32:63:be:7e:96:2b:05:02:d9:44:cb:51:2a:
                    07:7a:8c:a1:95:64:f9:58:7d:0c:41:b8:6c:4b:1a:
                    22:08:20:ca:26:42:03:6a:9c:97:8b:19:c2:3b:37:
                    3f:48:d0:3f:65:a3:cf:f2:fb:d9:de:60:94:9b:aa:
                    32:8b:6e:fa:84:3c:c5:b7:0e:89:02:33:2b:c9:24:
                    af:56:a4:68:25:df:06:12:7a:01:88:35:b8:3f:08:
                    98:8e:76:ab:aa:14:74:46:97:07:e6:6b:0b:53:cd:
                    41:40:86:33:ec:97:18:9b:fe:88:76:57:23:f6:50:
                    c5:cb:7a:cd:47:02:df:71:10:11:03:66:97:da:0c:
                    3e:b8:2e:66:41:63:3b:d7:1f:71:34:3b:7d:7a:5a:
                    4a:58:1e:d4:7d:45:71:74:f4:a3:39:8e:8e:7a:83:
                    26:e6:13:ab:04:d2:f1:9d:a3:fa:75:42:ec:ec:38:
                    57:ae:3e:52:1a:d6:a8:b8:c3:2c:13:42:ff:bd:4f:
                    eb:a4:49:97:17:ca:4a:74:05:b5:ab:dc:34:b5:6b:
                    df:8d:83:b5:35:14:9e:e1:4b:33:42:a7:9c:b0:99:
                    c6:5e:1f:3b:54:b5:f6:97:7e:4a:a5:e2:7e:f4:bd:
                    26:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B6:BD:D4:84:B2:EF:30:B1:56:92:F3:2A:49:1F:59:16:5B:F7:9F
            X509v3 Authority Key Identifier:
                keyid:4C:91:13:24:E8:69:BC:4C:A5:EC:8B:AD:0D:3D:DF:F6:85:44:19:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJETJOhpvEyl7IutDT3f9oVEGXk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/2b38b3-12f1-4242-adae-b7d1cac51e0c/1/TJETJOhpvEyl7IutDT3f9oVEGXk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:d6:5f:ee:ce:75:f4:3d:33:d9:d9:dd:c0:c1:57:af:5e:b5:
         72:b2:21:f6:17:1a:d0:9d:32:cc:61:29:f1:ec:01:be:d7:70:
         f3:00:63:07:63:76:67:7c:b2:bc:cb:05:ae:5a:91:90:1a:4a:
         60:d1:48:5a:4d:01:47:f1:34:f1:8c:13:5c:df:5c:92:6b:8f:
         6e:60:cd:8d:e5:a0:92:d2:96:98:d3:bc:67:f1:d2:2c:e2:39:
         32:22:b9:92:a4:3a:c8:21:b0:4a:c0:0c:27:24:0b:d1:37:3e:
         3b:c8:15:dc:da:80:aa:58:f9:f9:1c:0e:80:4d:a1:22:cb:8e:
         85:95:cb:45:7c:49:e6:fb:8b:33:4e:0d:a3:fd:68:86:65:45:
         39:0f:a3:b9:2c:3e:f6:f9:3e:28:90:bc:b3:00:0e:97:0f:68:
         69:50:87:c8:2b:26:99:27:62:88:1b:9c:c1:fa:b2:d8:77:55:
         49:b4:a2:cc:e4:9d:c2:28:ac:52:d1:01:5a:a6:ec:af:5f:6a:
         09:fd:19:e5:94:1a:2a:a6:e4:55:e5:15:cc:f4:e4:eb:c2:8b:
         40:6e:07:d1:5c:ac:29:56:38:d7:7a:84:7a:7d:b1:5a:4f:d2:
         39:6c:e0:53:e0:61:8b:ce:93:40:a0:32:a9:ed:53:47:4f:2e:
         41:5f:b1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----