Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
File:                     rwlQP8rAF2lRWhny3CZX2S_TUN8.mft (raw, json)
Hash identifier:          a+yaaWaKeI/euj8Bh4ZWOw3Kd0dX90MYS0PtSh8QNA0=
Subject key identifier:   EE:39:62:C3:FB:2F:14:E7:DB:4F:0B:95:D9:99:87:B2:6C:2E:1F:CA
Authority key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
Certificate issuer:       /CN=af09503fcac01769515a19f2dc2657d92fd350df
Certificate serial:       01962F3DCF1E2B9B05AE3E98B6C885D20679
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 13:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:41 +0000
Files and hashes:         1: bI5hqVT8m0qS2JmySaAVyieiKDc.roa (hash: Ur47592mLsTtDVQWZDc8e3eMtHnqyDHoxs3kpjL/ez4=)
                          2: rwlQP8rAF2lRWhny3CZX2S_TUN8.crl (hash: veycCvWw491aC/LWkmyYU3SsGdBdm51bO9ZdxuS1RTM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:cf:1e:2b:9b:05:ae:3e:98:b6:c8:85:d2:06:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af09503fcac01769515a19f2dc2657d92fd350df
        Validity
            Not Before: Apr 13 13:01:41 2025 GMT
            Not After : Apr 14 13:01:41 2025 GMT
        Subject: CN=ee3962c3fb2f14e7db4f0b95d99987b26c2e1fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f7:8d:81:00:ca:18:b4:cb:6e:6b:e9:ba:ff:
                    8a:f9:19:1e:d7:d8:38:03:2c:11:b6:52:45:dd:18:
                    9a:4d:b5:53:89:4a:9f:aa:41:23:6c:dd:7b:25:33:
                    3a:7b:62:eb:d5:3c:85:fa:a5:78:be:c6:f8:f5:60:
                    dd:6c:07:d6:32:bf:2b:fb:be:a4:1b:68:22:a6:81:
                    17:10:ee:0f:18:74:fa:a4:b9:5f:01:f4:66:8f:75:
                    f5:4a:07:81:cb:00:1c:e5:56:21:a9:2d:14:93:e9:
                    1a:74:2a:be:5d:d6:57:84:35:a5:3e:11:9a:3d:b5:
                    69:e7:ac:49:66:f6:93:b7:d5:e8:38:1c:98:0e:66:
                    00:fd:3a:c6:63:59:ae:36:0d:b1:e3:0c:9c:b3:ad:
                    53:02:9f:8e:f5:6d:94:85:35:0d:36:b8:24:25:92:
                    c2:d9:2c:ff:3c:da:b0:b8:6f:67:79:85:07:0d:76:
                    10:d4:b3:52:33:ec:25:4c:a3:3c:8a:ed:24:5b:a5:
                    24:fc:3c:f2:9b:ba:3c:9d:f2:a7:f1:53:ad:9a:65:
                    96:dc:9e:41:49:53:f5:8d:35:12:e7:ae:ea:d3:90:
                    38:04:73:6e:30:31:a9:0b:f6:39:6d:48:7a:d7:83:
                    40:b0:c3:74:87:e4:95:51:6b:49:d2:31:8c:06:f3:
                    2c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:39:62:C3:FB:2F:14:E7:DB:4F:0B:95:D9:99:87:B2:6C:2E:1F:CA
            X509v3 Authority Key Identifier:
                keyid:AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:ed:c9:55:c9:1c:df:d8:13:55:29:98:bf:34:d3:6d:42:cb:
         9c:83:2e:e1:f8:4d:c0:67:bb:03:96:e1:82:af:e6:e4:24:fc:
         6e:ad:4a:1e:d3:ff:be:30:d0:dd:fd:48:ce:eb:82:d4:6d:25:
         30:c4:e4:86:2f:2c:33:c9:13:b2:93:fb:31:dd:43:44:e9:95:
         9d:90:07:23:0e:b8:d0:66:79:5d:76:06:26:bb:ee:9d:1e:6d:
         2a:3f:6e:9c:67:ff:8b:ec:c5:f4:9b:bc:f4:49:f8:61:56:13:
         00:9b:f3:17:b5:df:22:8a:96:49:d5:11:a3:8e:9e:62:06:c9:
         34:89:36:1b:ca:ca:29:76:2a:97:cd:b0:86:f2:8e:e6:61:59:
         45:02:ca:d5:f7:b4:c5:39:16:aa:17:3c:47:69:94:6b:47:9b:
         76:81:fe:d5:8e:11:e5:94:bb:96:04:35:10:9f:77:08:b5:3f:
         08:59:45:37:78:16:b9:44:35:d9:c6:f3:5b:42:d9:ba:cf:88:
         5c:03:3f:29:33:b7:f1:97:aa:2a:d9:72:2b:9f:8d:cc:1d:29:
         f2:6e:35:8a:e8:9d:b2:9c:da:f1:04:e0:5a:f1:b6:e1:d8:66:
         59:c4:56:05:86:1b:2e:01:c1:25:3f:51:18:8a:29:5c:fa:59:
         bd:71:4f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----