Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
File:                     TkJsh9-8xVLceQ_sPtHN56j4huk.mft (raw, json)
Hash identifier:          Ypjmdvgl8+nc1aLxu1yJILZk0rc8DIUTQCjNof9pMuE=
Subject key identifier:   E9:2C:A0:B0:40:D8:E1:35:7C:8B:82:CC:5B:0D:56:97:AB:FB:A1:41
Authority key identifier: 4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
Certificate issuer:       /CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Certificate serial:       01962E98C07BEA32AF1DE65C58C367D1C237
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
Manifest number:          0828
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: TkJsh9-8xVLceQ_sPtHN56j4huk.crl (hash: N6ZOHHPAsx+nd69kg+w6DSQPi77y2/CUZkPDzU9Bmrg=)
                          2: o1pkGMrhjFIHajUuas6hn3OkprM.roa (hash: vhDUewSi85hdhWxPSoEhr0a9lvOVAXD09OTRvqe5guU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c0:7b:ea:32:af:1d:e6:5c:58:c3:67:d1:c2:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=e92ca0b040d8e1357c8b82cc5b0d5697abfba141
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f6:e9:06:24:70:d3:6e:1b:25:19:d1:55:3f:
                    02:10:8c:f5:c3:f8:83:0b:57:24:62:f8:bf:27:73:
                    06:d3:6b:58:bf:26:3d:8a:1c:1d:e1:03:7d:54:49:
                    b6:1b:49:df:e0:9d:91:24:f9:00:83:a0:71:82:36:
                    e9:64:2f:39:e2:cf:18:19:02:f5:11:50:71:35:58:
                    09:4f:29:40:6d:cd:9d:81:cf:3e:88:38:9c:f2:39:
                    3c:ad:00:3e:d8:14:4e:20:7e:95:a8:e7:05:e5:96:
                    37:42:d5:bf:f0:c3:13:b4:72:54:d3:ff:9d:15:f6:
                    c5:20:ff:56:95:aa:4d:11:90:56:2e:f4:5e:7c:6e:
                    07:cb:a1:f2:10:3f:9e:88:30:d9:a8:22:4c:e2:8b:
                    3c:91:3d:77:85:70:a8:e7:32:69:45:27:61:c4:a6:
                    c6:40:70:d1:fe:c3:be:83:37:12:39:1a:84:df:35:
                    62:2f:be:37:c0:4d:fa:4a:7e:d5:29:f8:4e:bf:b0:
                    24:d8:a8:df:53:4b:84:25:ce:93:2b:fc:94:84:e5:
                    be:92:71:58:5b:31:72:d1:04:91:de:6a:cf:8b:63:
                    bf:47:fa:61:59:a6:1e:95:a4:a2:54:6e:1d:d4:2b:
                    f1:e1:03:15:1a:67:8c:06:6b:8d:6a:9f:07:72:ee:
                    c1:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:2C:A0:B0:40:D8:E1:35:7C:8B:82:CC:5B:0D:56:97:AB:FB:A1:41
            X509v3 Authority Key Identifier:
                keyid:4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:3e:35:7f:1d:58:69:2e:69:d2:ef:e0:35:9c:b5:fb:36:74:
         60:41:2b:9b:5b:15:a7:54:44:93:16:a4:cb:45:61:43:d1:5d:
         78:01:6b:46:c6:b1:b2:60:c0:17:85:65:a1:ae:d6:f7:7c:af:
         bc:d0:1e:5f:21:1e:f3:e7:91:97:42:20:e3:d0:68:69:d9:93:
         ca:dd:ab:8c:3c:13:d7:be:5d:0d:8b:d8:78:7c:a6:ee:d9:04:
         12:6f:6e:fd:48:d0:34:4d:1e:80:37:aa:49:1e:ea:1f:f9:e0:
         12:4f:f8:be:78:f0:3f:99:b5:99:8a:fb:af:11:0c:03:72:aa:
         13:74:71:cd:72:8a:85:e7:a0:7c:f4:53:3d:5e:13:e5:de:4b:
         e5:cd:7f:e9:19:2f:84:94:be:e7:04:0e:47:6e:43:b4:c6:fd:
         c2:2b:0c:99:9d:86:16:02:d9:05:68:3a:24:67:44:2f:4c:7c:
         e0:cf:ec:55:4b:c2:49:2b:50:8a:b8:f1:bf:a6:28:07:39:c7:
         cf:54:9c:41:3f:c9:ae:6d:5e:b5:46:b9:a0:56:6a:e7:63:3e:
         69:c7:80:4e:cb:d4:2f:c4:00:7a:0a:08:1c:a7:4e:87:5d:69:
         8d:7f:f7:dc:80:91:ea:3b:ad:c6:45:eb:cb:92:9b:d6:86:b4:
         84:70:52:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----