Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
File:                     ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft (raw, json)
Hash identifier:          2m3F6OS9FDrbFYQ/5h+adz/PymbU+hBuUpeJj+rrjZo=
Subject key identifier:   42:FD:31:E5:A9:13:2E:D6:8C:7A:DD:CF:7C:E7:57:C1:57:97:96:EF
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Certificate issuer:       /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial:       01962DF403D4BF33B192B11BA656224F1894
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
Manifest number:          03BF
Signing time:             Sun 13 Apr 2025 07:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:28 +0000
Files and hashes:         1: mgO2bfWYu0Z3yfKtycB0eHY39X8.roa (hash: 60DQx4kpFtDfON86MP27ODodoK2c+Xs/qbF18XYACcg=)
                          2: rg97vUvro1QUCZLNC-zT_PYGVh8.roa (hash: iZBiJSmpj/Q8UocwtFDbOX3xmzAVEyiNjKTvOdI8ZqE=)
                          3: ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl (hash: 1bmwbZoenxh2wiwcegOE6qWH34RFDoR2n/VCenqhpYs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:03:d4:bf:33:b1:92:b1:1b:a6:56:22:4f:18:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
        Validity
            Not Before: Apr 13 07:01:28 2025 GMT
            Not After : Apr 14 07:01:28 2025 GMT
        Subject: CN=42fd31e5a9132ed68c7addcf7ce757c1579796ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bf:7f:93:cc:d8:0b:41:b2:21:e3:aa:2c:dc:
                    8f:ce:97:58:4c:16:e0:da:ee:1e:35:9e:17:37:78:
                    24:e9:16:4a:f6:bd:73:fa:36:1d:b6:dd:4e:df:16:
                    e7:fe:6d:db:0f:b4:ec:10:52:91:15:d2:58:4e:7f:
                    a5:f5:26:a6:66:a7:4b:bb:b2:06:e8:f0:45:57:f9:
                    da:f5:43:50:8f:75:eb:3b:31:35:98:db:8c:b0:d4:
                    86:ae:6e:74:69:ad:ec:8a:83:10:f3:95:46:54:f4:
                    98:d5:16:89:16:97:7a:4b:b7:7d:1d:b5:81:c4:c3:
                    c4:3b:d3:6a:fc:ad:6c:82:64:b9:8d:87:88:08:05:
                    24:2e:2b:ba:2b:e2:d8:0b:8d:4e:24:cf:d4:d7:d3:
                    20:01:80:de:b9:63:f5:da:3b:eb:f5:d5:4e:69:50:
                    dc:34:13:b4:ee:30:46:75:f0:f6:fc:f1:80:45:e8:
                    22:d9:d9:35:77:2d:32:23:11:d9:80:78:80:db:3d:
                    6a:b8:54:74:2d:19:0b:5a:6f:59:1a:83:8a:a9:03:
                    02:c5:8e:3c:2a:c8:08:10:e4:b3:81:fb:38:f7:92:
                    aa:12:33:e4:0e:c0:d5:7b:84:07:cd:0a:95:5c:5a:
                    4b:fd:af:5c:51:dd:fd:2a:c9:cc:f9:e1:6c:74:68:
                    ec:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:FD:31:E5:A9:13:2E:D6:8C:7A:DD:CF:7C:E7:57:C1:57:97:96:EF
            X509v3 Authority Key Identifier:
                keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:37:70:52:00:b3:28:a9:0e:de:23:9a:d4:6d:bf:1a:08:19:
         57:b3:1d:cf:41:95:8d:a0:3c:d5:38:de:2e:ce:74:f6:66:7a:
         c7:4e:61:7f:c4:3d:11:46:93:97:ca:4c:8b:94:8d:10:16:27:
         dd:b0:db:f9:59:84:67:31:69:d4:12:43:e2:96:5b:d3:21:d2:
         db:ba:73:fc:a2:f9:2b:1f:fb:76:25:c8:ff:d3:80:09:ab:9c:
         58:4f:68:3b:9b:ec:75:d3:11:ed:3f:96:6b:47:a7:5a:0d:e5:
         39:d1:e5:d0:20:2b:4d:35:91:65:14:b6:25:ab:c5:6e:8f:a2:
         5c:fd:55:43:ba:1c:9e:22:85:b6:ef:bf:39:f3:18:86:cc:a7:
         13:a7:87:10:26:e2:3e:3d:63:12:78:5a:40:d6:f0:8a:95:99:
         e6:8e:48:1e:3f:f3:76:d9:52:f8:ee:65:94:2a:a2:47:b1:ee:
         99:d2:46:6e:81:80:2d:65:73:45:ac:95:7d:a9:9d:85:99:d2:
         b2:10:88:0f:5f:87:ba:b1:21:7e:f0:74:5d:64:b0:49:49:39:
         de:fd:db:d0:da:a5:1d:c4:3e:93:38:74:08:bc:61:ac:08:51:
         ec:1c:c4:e4:88:39:f5:d2:bc:dd:b5:b9:1d:84:27:43:6a:95:
         42:f7:1d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----