Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
File:                     tTZGbQNoUuL3N2reE4BGFDuZTMM.mft (raw, json)
Hash identifier:          BVts4qdYiu2d2HRzpkTe9sC5mfm167T6DAbuBfZxgNA=
Subject key identifier:   77:3E:E0:90:31:90:EB:71:C0:C7:62:F6:ED:94:7A:C2:66:75:6A:13
Authority key identifier: B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
Certificate issuer:       /CN=b536466d036852e2f7376ade138046143b994cc3
Certificate serial:       01962FAB52ED0C6D650A5DF5DE3F612B4267
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: 4dgJmFIjsrGv5rSLSqks3SszRsQ.roa (hash: Sg9Vz95hfxUFPzxyRHpzX8FvIho0lOoY/A6mHLZCWkE=)
                          2: tTZGbQNoUuL3N2reE4BGFDuZTMM.crl (hash: RDdb2bnwhf3Kkattau2ZddQfDAm7k7vLYNzdYiEd2Os=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:52:ed:0c:6d:65:0a:5d:f5:de:3f:61:2b:42:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b536466d036852e2f7376ade138046143b994cc3
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=773ee0903190eb71c0c762f6ed947ac266756a13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b0:a8:07:ad:7c:f7:6d:91:2e:fe:8c:cd:7f:
                    f6:f6:8c:44:1b:02:e2:2f:17:dc:b9:69:c9:cb:58:
                    f3:36:1e:f6:e2:4f:79:05:f6:e7:8d:ff:09:7c:0f:
                    41:b8:b2:59:14:1c:cd:05:3b:4a:31:f3:1d:54:7a:
                    f5:51:92:cd:63:b7:96:39:98:9f:d7:a7:d7:69:26:
                    fd:5c:20:5e:7e:ec:d6:39:e6:ee:b4:44:7a:c9:d7:
                    a4:15:f6:db:1d:53:dd:97:e4:88:39:58:c4:1f:fa:
                    47:26:82:f7:63:08:91:59:00:30:d1:19:97:4c:9d:
                    e9:bb:6a:35:dc:3f:d6:b4:17:1b:9c:a6:65:7d:d6:
                    06:87:54:d3:63:75:c1:95:0c:55:8f:28:ec:43:4a:
                    86:f3:c7:61:7d:0c:03:8e:fa:aa:24:cc:6d:79:43:
                    ee:83:c5:3c:67:63:7f:b2:b4:8f:1d:c2:37:17:2c:
                    95:35:4a:97:c3:96:74:80:d5:03:58:be:98:ba:63:
                    7e:17:77:ea:cc:e9:91:8c:9a:c8:b0:e9:11:79:50:
                    de:9b:57:18:a6:6f:94:56:2f:79:05:75:3f:c4:c0:
                    0a:f7:ee:64:6f:73:d4:b3:d1:1e:22:2a:76:7b:71:
                    17:a2:9a:44:35:68:9d:d0:e7:a3:b7:3e:7d:63:cd:
                    d1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:3E:E0:90:31:90:EB:71:C0:C7:62:F6:ED:94:7A:C2:66:75:6A:13
            X509v3 Authority Key Identifier:
                keyid:B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:fa:0e:db:c3:10:58:a1:39:67:15:5a:24:7e:05:7f:d2:a7:
         74:93:11:3f:76:31:64:80:d8:9d:a7:1e:2b:13:b8:5d:11:99:
         79:ba:2b:66:a8:e0:b8:96:54:34:56:c9:74:29:de:26:6b:97:
         da:d4:aa:96:0b:8a:b1:2d:97:7f:63:eb:9a:3e:4c:56:36:b3:
         6b:54:86:c5:4b:4f:9b:f5:28:58:50:f7:2a:b2:88:37:b0:e8:
         d0:cf:04:bb:59:3d:43:71:e6:f0:87:fc:d6:66:e1:fe:be:c9:
         36:f9:9d:96:85:73:2a:75:fe:c5:1c:0d:22:97:e6:81:f5:ed:
         56:d6:dc:5b:0a:cc:8d:7a:eb:2e:9c:70:86:36:3a:3c:2c:a3:
         aa:8b:60:2a:66:56:73:84:80:4c:5d:9d:42:d7:e3:13:bd:6e:
         b2:0e:99:63:52:6c:9a:11:1b:ab:31:ce:33:ae:c0:2c:6a:18:
         2b:84:69:59:cb:4b:b6:82:aa:5f:99:e9:04:9d:2e:cb:d7:84:
         be:51:b2:22:92:c4:fa:d7:15:16:07:c1:70:55:b5:63:11:4f:
         80:00:b7:4f:11:af:1d:2e:c6:61:65:af:2d:9f:42:c1:1a:62:
         c6:93:f5:c1:cf:8d:cd:d7:cf:1d:00:cc:a6:43:e3:db:ca:98:
         ad:01:8f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----