Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
File:                     ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft (raw, json)
Hash identifier:          m1FJOeZka2anMn+oqzFHNyGszZYILq8WdydC8jM1ErM=
Subject key identifier:   E5:1F:2C:10:4B:0A:DA:76:8C:C5:F9:04:44:4D:A6:DD:56:91:1E:B7
Authority key identifier: B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD
Certificate issuer:       /CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd
Certificate serial:       01962DF4319CE779F5FF20B363F1304D921A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
Manifest number:          0B0E
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl (hash: p+JO2YZ/WKGS6pIH4bw3oY8VCh6TMkh/qzhvL8OsuBk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:31:9c:e7:79:f5:ff:20:b3:63:f1:30:4d:92:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=e51f2c104b0ada768cc5f904444da6dd56911eb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5a:be:13:22:99:69:ed:c8:c8:6e:94:e6:63:
                    62:cb:11:54:f7:ff:a1:88:1f:9c:ab:a9:5b:46:13:
                    97:24:c6:ac:8f:7f:dc:0e:de:1f:fd:fc:2c:0a:cf:
                    21:99:2d:a6:01:51:a0:aa:46:c4:84:e1:19:75:c5:
                    55:0d:07:4c:17:0c:ef:a8:e7:3d:38:de:c2:9d:45:
                    e5:bd:58:42:a4:6e:6b:1f:07:6a:12:38:37:ad:8f:
                    a4:97:7f:a5:0e:2d:7f:c5:40:2e:13:37:07:93:a6:
                    70:07:06:55:3f:3f:9b:5c:df:b8:12:4d:d4:da:9a:
                    1e:a1:a7:24:42:87:4f:4e:ba:00:41:09:35:a4:df:
                    61:19:9d:1f:b5:14:5e:00:8b:0a:d4:2c:21:17:81:
                    fd:72:a3:f8:7a:7f:04:e4:3e:0b:88:42:c3:2f:43:
                    ab:76:c8:63:36:f5:7b:d7:86:5b:95:b1:d7:27:e5:
                    69:26:22:53:89:e7:2a:81:9c:09:c1:3b:6c:6b:fb:
                    6b:0c:17:6b:e6:b2:1a:3a:fb:ca:6c:a5:02:a3:0c:
                    75:ec:88:40:7b:ef:c7:98:fc:9a:8d:c1:02:df:d8:
                    11:b6:a5:bb:a2:70:d9:e9:0c:e9:70:d9:7d:57:04:
                    fb:25:8a:9f:66:50:74:2f:b4:bc:f7:4d:47:72:38:
                    ff:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1F:2C:10:4B:0A:DA:76:8C:C5:F9:04:44:4D:A6:DD:56:91:1E:B7
            X509v3 Authority Key Identifier:
                keyid:B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:92:04:31:e2:bd:71:d6:06:02:af:b8:0b:d3:c6:7e:bc:cc:
         02:c0:24:eb:f6:c2:57:9d:e8:a2:2f:9e:7d:c2:cd:0d:d0:5b:
         58:22:61:6a:56:59:d3:8b:c0:12:47:ff:26:2b:08:58:4f:71:
         a3:ee:43:d6:6d:28:43:54:8e:cb:b4:d9:ed:46:fb:9b:84:79:
         2d:f9:c2:a7:e6:03:1d:77:04:50:39:50:71:10:36:94:c1:70:
         43:7f:ba:83:2f:07:1c:50:60:63:ab:29:66:86:52:fb:70:9f:
         33:17:1a:01:d1:c3:65:29:cc:85:b0:d7:63:37:fe:35:a4:99:
         dc:00:17:79:a7:a6:bf:3e:cf:0a:33:29:d7:b4:b9:86:40:79:
         78:1c:32:84:e8:be:ae:0c:cc:13:42:c0:a3:ee:fa:3d:b7:b0:
         3f:29:4c:0e:9c:ab:e5:da:2b:52:9c:c1:fb:e6:e0:22:31:1b:
         44:48:b8:08:e6:5c:16:57:e3:5f:46:b2:a1:0b:3f:48:4c:4d:
         b5:a8:f6:ea:51:b2:1a:78:72:7e:61:10:fe:30:06:a6:2c:6c:
         74:e6:11:39:4b:66:81:58:14:4b:ad:c2:73:84:e6:c6:be:8a:
         00:bb:2a:5a:2b:45:54:4e:99:16:5b:3c:74:a6:cf:2e:1d:bc:
         d9:c3:35:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----