Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
File:                     tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft (raw, json)
Hash identifier:          5jJY43yWOiBgx/iVf90nFPZ5TEcESOIvOl9rujeS7gY=
Subject key identifier:   7C:D4:8A:4C:11:A1:F9:BC:3D:5B:F8:EF:11:0F:E9:49:6F:AB:21:AD
Authority key identifier: B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88
Certificate issuer:       /CN=b4bdde78415b69c31277c0aac7fca6607d635d88
Certificate serial:       01962E61DFD277A69AFE197B6FF19E52DF7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: ag-uYpovt5JPQ3cFAXtXn4zz86A.roa (hash: 2LKnP2sHY9S5jGwYqiGKID4jG+yM+87plZe5I7Vq4ns=)
                          2: tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl (hash: SOuOtrK+TCrfuL5G7+eXlnKB3HPhaFZnfavWFtnKyrI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:df:d2:77:a6:9a:fe:19:7b:6f:f1:9e:52:df:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4bdde78415b69c31277c0aac7fca6607d635d88
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=7cd48a4c11a1f9bc3d5bf8ef110fe9496fab21ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:12:fa:92:3c:99:ca:2e:17:99:d2:9a:d4:f9:
                    b5:2e:66:92:7c:dc:09:b5:3d:c6:1c:4a:8e:4e:70:
                    31:a9:fc:61:34:7e:9c:f4:ac:e2:71:30:e9:fe:c6:
                    2b:1d:7a:77:c1:f5:c7:77:22:22:66:28:d6:9b:52:
                    22:5d:32:98:46:46:06:51:f2:5c:12:2e:27:c1:28:
                    43:fe:e1:fa:7a:69:a7:f1:43:f9:45:83:16:b0:22:
                    e9:98:34:35:2f:36:08:90:a5:8b:30:46:a3:ee:88:
                    2d:02:80:31:53:43:6c:b3:76:5c:0e:e7:97:87:7f:
                    af:3e:da:2c:bc:a8:3c:4e:c2:4c:f8:18:df:cc:08:
                    5b:88:1f:49:25:29:ca:06:2a:17:3d:d2:02:99:96:
                    1a:c3:39:3f:52:c0:4a:87:88:41:ab:76:eb:4a:97:
                    81:6b:11:29:fe:e6:fb:e9:1c:2a:a2:dd:52:79:db:
                    e5:5c:73:db:b4:f4:3a:04:cf:34:a6:13:a7:ba:08:
                    cb:14:88:76:a7:a4:aa:d8:12:6c:e6:d1:57:8b:90:
                    b0:ee:ae:68:b1:46:cb:39:59:f5:40:4a:f6:50:59:
                    88:2c:ca:2a:4a:45:5d:68:e3:b5:fd:0f:a7:9a:37:
                    29:9a:79:17:f5:06:f9:cb:d0:3c:60:d7:ea:19:12:
                    76:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:D4:8A:4C:11:A1:F9:BC:3D:5B:F8:EF:11:0F:E9:49:6F:AB:21:AD
            X509v3 Authority Key Identifier:
                keyid:B4:BD:DE:78:41:5B:69:C3:12:77:C0:AA:C7:FC:A6:60:7D:63:5D:88

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3eeEFbacMSd8Cqx_ymYH1jXYg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/34d470-49f7-4ae0-b61a-0944bed0ed26/1/tL3eeEFbacMSd8Cqx_ymYH1jXYg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:e0:d2:e4:38:d7:e5:7f:ba:82:f4:bf:7c:72:28:8c:10:69:
         69:f7:b2:05:c5:07:25:02:90:d0:de:60:de:5d:59:cc:dc:b9:
         10:37:db:c7:d5:43:ee:5f:48:cb:59:22:ed:7f:24:5b:46:ef:
         73:27:a5:27:61:85:cb:b3:42:5f:9f:b7:cc:53:b9:61:ed:b3:
         20:94:e2:cc:6e:8e:58:5a:61:1d:49:53:8b:57:f3:5c:d3:c7:
         d2:0c:1c:95:18:1d:60:8d:50:a9:b7:99:83:bd:5f:fd:00:10:
         6a:90:98:ab:b3:05:a4:af:e5:f3:8b:14:b8:ce:e0:53:6b:24:
         f8:ba:f9:45:77:25:f0:00:71:d7:0a:24:a7:99:66:26:8f:44:
         77:9f:45:6a:fd:f7:16:2e:c4:3a:a9:62:f3:08:b2:1c:ee:56:
         a7:f6:0d:b6:2a:4d:6d:1c:5c:2d:71:92:c0:5b:88:00:12:d2:
         a7:f4:7d:c2:13:50:57:b7:0b:e4:63:f8:23:0a:9a:06:08:5d:
         4e:ed:5d:d3:b5:7b:4c:ba:0b:13:e8:61:fc:08:24:e6:7a:fe:
         43:5a:c6:93:47:7a:bc:30:0f:c3:e5:0a:42:60:a5:6f:14:7a:
         9f:5a:4c:aa:09:6e:88:88:33:09:8b:65:76:58:5d:ff:0d:0d:
         95:db:88:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----