Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
File:                     ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft (raw, json)
Hash identifier:          De3Ms/h7/hi7oskf0cktuMFF62BykvluS8KfoXkx8ek=
Subject key identifier:   6B:92:A8:A1:AA:66:91:CD:6B:7A:8C:B1:82:40:EA:84:D0:4B:ED:BE
Authority key identifier: 4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
Certificate issuer:       /CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Certificate serial:       01962E99B72302A628EFA6D3C672A6D98F74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
Manifest number:          07EF
Signing time:             Sun 13 Apr 2025 10:02:27 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:27 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:27 +0000
Files and hashes:         1: ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl (hash: QsYgPa+H9MYA29CtSf/aqvd7Ys9Y2k3NyvTbd2zXSkE=)
                          2: dhaZ9rJEY3VSapdxzWuOpswb-w0.roa (hash: jRn4LzSctiGARclpcid7MOPCN0FjXXNaOIwerI8w1dk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:b7:23:02:a6:28:ef:a6:d3:c6:72:a6:d9:8f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
        Validity
            Not Before: Apr 13 10:02:27 2025 GMT
            Not After : Apr 14 10:02:27 2025 GMT
        Subject: CN=6b92a8a1aa6691cd6b7a8cb18240ea84d04bedbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:07:e2:96:51:95:64:78:93:a8:3e:fa:e9:
                    a5:93:72:e1:ff:b1:cf:e6:1d:09:85:2f:af:35:c3:
                    21:8d:a3:de:64:7f:10:7a:f8:70:98:fd:65:dc:d5:
                    c8:35:a2:dd:a9:8e:d7:5d:71:07:15:ca:16:d6:77:
                    fc:ae:64:0b:c9:29:bd:37:3d:ed:e6:7b:78:ca:8f:
                    b4:0b:91:26:ed:a7:2d:0b:21:27:b2:67:12:fa:81:
                    14:f0:d3:df:cb:fe:c8:19:cd:24:b1:96:d1:d0:7d:
                    10:bb:ed:52:6e:2e:9d:57:68:47:29:5a:7d:54:e3:
                    2e:a6:a2:4a:01:ae:86:31:75:56:b5:50:6d:68:be:
                    d1:c5:43:9a:97:92:f9:25:5a:7a:eb:d0:88:99:96:
                    d8:18:84:b4:7f:f5:1e:d8:3d:bf:65:7e:ba:c3:b4:
                    9b:6e:cb:8c:ce:48:9a:40:79:d3:41:98:fd:69:4d:
                    36:fd:bf:66:17:6a:f8:83:cf:be:81:22:05:44:02:
                    13:fe:52:35:1d:22:4f:3e:2c:6a:f4:68:9c:68:32:
                    de:1e:d9:50:96:08:f2:a5:7c:cb:f9:70:ba:d2:67:
                    13:af:63:89:40:5d:59:e5:94:e9:7e:66:fa:1e:c7:
                    c3:b3:f6:1c:1c:c9:72:24:84:42:c9:4d:12:02:1e:
                    dd:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:92:A8:A1:AA:66:91:CD:6B:7A:8C:B1:82:40:EA:84:D0:4B:ED:BE
            X509v3 Authority Key Identifier:
                keyid:4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:27:12:c0:bc:9b:da:3f:16:17:aa:00:9a:86:e2:52:ce:2a:
         51:0a:b7:78:95:6c:ed:b0:09:d6:3d:bf:ba:a5:c8:67:90:7b:
         c4:c6:5a:76:d8:d6:ca:56:1e:be:ee:1a:c2:7d:d6:a2:64:0f:
         c1:92:da:f2:56:29:3f:40:e1:cc:98:02:4c:ba:32:e1:79:e9:
         bc:55:0a:0a:18:25:d1:ee:4c:4b:f1:cf:d5:05:62:ea:a8:b5:
         44:99:82:c3:a0:73:a4:c4:1e:8a:ca:43:a3:4d:e7:5e:1a:43:
         ca:6d:4e:1c:59:c8:65:8d:e0:5b:26:87:4f:92:5d:c0:a7:9b:
         37:3e:d8:2d:13:52:39:6e:0f:fd:cc:9a:16:c8:c7:5d:91:ec:
         5d:96:51:df:f3:de:d3:6f:98:95:78:fa:e5:d6:31:b2:08:46:
         d7:84:5f:ef:e2:96:af:ea:d4:9e:1b:4c:2b:ad:98:65:77:1f:
         40:84:9a:b1:e4:b7:48:47:16:f8:aa:76:f7:4b:5a:f0:82:e4:
         66:7f:73:2e:f8:4b:bf:88:96:ac:1d:3b:58:41:c1:b3:26:84:
         6b:bd:46:62:cf:b2:b2:18:a3:a4:5e:86:6b:5b:6a:e6:ad:a6:
         da:3e:4e:97:01:da:3d:26:78:a0:a9:20:1d:1e:6f:6f:a2:7d:
         6f:16:76:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----