Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
File:                     Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft (raw, json)
Hash identifier:          7UOazvcf8jWPthlRRmOe9m37G07IiabPK08tw0zeD1I=
Subject key identifier:   50:D3:F6:29:76:76:F1:AC:27:E9:02:A1:28:00:35:15:2C:BC:81:AA
Authority key identifier: 4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5
Certificate issuer:       /CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
Certificate serial:       01962F74BA6C5E806EC16B907061046B71EA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft
Manifest number:          0BD0
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: 4f1jI7-qAw-Fm-OtnESqUBoebm0.roa (hash: Yj15262IImuG/zvO4RGd+KynWz9BG4CJpl9H3lrssA0=)
                          2: Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl (hash: LF7JE5eC721Ohp8Sg7GJUlfSbwG2ilqLW0km/EI686g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ba:6c:5e:80:6e:c1:6b:90:70:61:04:6b:71:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dbe31b6bedc51f2aa2ec0a6453f2e435e808fb5
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=50d3f6297676f1ac27e902a1280035152cbc81aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e1:d5:c8:44:c7:b4:55:ef:f3:25:d8:8b:2e:
                    12:f5:49:cc:68:0f:4c:d2:e4:e7:8c:69:b4:87:99:
                    69:93:b6:1a:31:a8:e9:0b:a9:99:5a:30:47:00:ca:
                    8f:79:0b:92:71:f2:ad:4c:6e:a0:74:13:44:97:b3:
                    54:07:ba:5c:22:ca:f3:da:c8:22:0c:7d:8a:3a:1d:
                    6d:0b:b3:9e:2a:e9:b7:5f:a6:44:09:20:6b:6e:6e:
                    1c:5f:51:79:a3:f6:4d:88:46:4c:46:94:78:2a:9d:
                    15:8b:35:e6:0f:48:db:2f:22:76:c5:2b:40:f3:ab:
                    26:48:c4:44:85:d0:15:35:f4:76:00:04:78:ea:ec:
                    b6:7f:66:a7:a4:e5:ad:4a:2d:ec:e8:c3:cd:11:44:
                    99:50:db:5c:64:72:e9:5e:fb:63:df:2f:7d:18:c0:
                    9b:0c:d1:c3:80:18:e6:fd:69:1e:9a:6f:57:44:b6:
                    46:c5:d7:78:c6:d1:a9:8e:7c:ad:69:6d:47:66:1a:
                    64:97:ff:96:51:21:bc:6f:62:50:c0:66:67:d4:8c:
                    2e:c6:c3:9a:ef:01:83:97:b5:2c:25:d4:6d:7b:60:
                    f1:3d:a4:d0:c9:0b:43:9f:76:2f:c9:1f:42:25:ad:
                    46:9c:92:70:e7:4e:5b:bd:48:21:f4:65:4c:e7:91:
                    b0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:D3:F6:29:76:76:F1:AC:27:E9:02:A1:28:00:35:15:2C:BC:81:AA
            X509v3 Authority Key Identifier:
                keyid:4D:BE:31:B6:BE:DC:51:F2:AA:2E:C0:A6:45:3F:2E:43:5E:80:8F:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/1d2788-da40-431a-97d0-fbd46d9ca372/1/Tb4xtr7cUfKqLsCmRT8uQ16Aj7U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:63:24:13:2f:80:45:09:a0:5d:04:c3:d4:46:b1:14:7f:08:
         18:53:f8:be:5c:1d:db:e2:47:9c:e2:bb:fa:5a:71:e2:64:8d:
         22:24:31:73:d3:4e:f6:99:9c:8f:34:d8:bc:2d:75:69:7e:15:
         6b:67:8d:e1:5d:79:3d:a7:0e:a2:10:74:ee:ce:06:d2:96:d6:
         06:64:b0:e6:39:4e:c4:69:89:59:ef:1a:a4:3a:e5:57:a8:e4:
         5e:93:5b:16:2c:cf:d3:b9:7e:44:15:58:1a:05:91:3e:85:3e:
         3d:d3:51:1c:6c:3e:ae:86:69:fa:5c:04:16:b1:61:7f:b0:76:
         49:c6:ef:d0:89:51:81:50:f3:4d:86:e6:2c:f2:05:45:bf:f0:
         32:8e:70:8a:42:ad:57:9b:4d:36:43:58:fd:27:17:5e:9e:11:
         65:10:4e:82:0d:92:b2:dc:33:94:58:9d:74:86:7e:f7:b5:f2:
         58:f2:79:7f:29:7a:34:16:57:67:39:b7:a6:74:f1:a6:03:b7:
         8d:89:94:02:6b:f5:04:25:ec:25:9b:f6:e1:f1:aa:23:16:b2:
         e6:04:0f:3e:e8:91:af:22:14:38:f9:b9:c1:2e:b9:02:ed:cd:
         13:91:ec:8a:c7:79:87:51:97:72:16:4b:09:f9:0e:ef:73:63:
         45:f4:a0:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----