Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
File:                     Cp_TCP4-rbozRozku5lrvdjN5hU.mft (raw, json)
Hash identifier:          a6tGEuUG1SoRPT/21g+iQwxXspzZcPYkGAFchpnL8gU=
Subject key identifier:   4C:01:64:08:94:83:5B:40:1F:FD:0C:12:5D:83:4B:02:5E:8F:78:5B
Authority key identifier: 0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15
Certificate issuer:       /CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
Certificate serial:       01962E98D5CE7FEE61D899B0BD0179215B89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:30 +0000
Files and hashes:         1: Cp_TCP4-rbozRozku5lrvdjN5hU.crl (hash: TR8eAtT0NWy/xRAaRBdUYZ7gY6NdQrt0E+Z7AY/2xBc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:d5:ce:7f:ee:61:d8:99:b0:bd:01:79:21:5b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a9fd308fe3eadba33468ce4bb996bbdd8cde615
        Validity
            Not Before: Apr 13 10:01:30 2025 GMT
            Not After : Apr 14 10:01:30 2025 GMT
        Subject: CN=4c01640894835b401ffd0c125d834b025e8f785b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:96:c2:3b:0a:7f:fa:b7:9e:c2:11:53:7e:ad:
                    47:75:cc:25:c0:97:f1:b9:37:62:45:06:ab:02:6d:
                    2c:a6:ea:f1:7c:89:12:73:0e:2b:0c:62:ce:59:ae:
                    a8:9b:f6:5e:78:d2:a5:af:9e:92:9f:21:06:34:27:
                    24:b8:4a:e6:f1:46:5a:44:de:3b:89:15:1c:d4:29:
                    4d:dd:f2:f1:a8:91:93:da:38:90:94:02:1a:27:52:
                    98:20:b8:03:ab:ce:6d:7f:a8:75:db:9a:d5:91:7d:
                    32:96:93:a8:cc:f5:78:56:24:4f:62:41:c4:0e:c3:
                    ea:0b:26:6a:11:9e:97:76:2e:04:ae:13:75:16:32:
                    c3:e9:44:12:dc:de:3c:19:14:4a:ad:f0:46:95:a3:
                    5d:58:e5:a5:47:de:d6:12:6b:87:b9:14:d6:64:f0:
                    b2:d0:90:5c:9c:ba:49:eb:a9:98:90:3a:62:22:58:
                    87:41:e5:69:23:a3:9f:88:12:24:24:35:45:73:f6:
                    d0:c1:cd:fa:be:0f:10:02:ad:c6:a2:d8:f9:74:0e:
                    a3:22:d4:20:3e:aa:8d:71:49:ce:46:9e:a0:d3:62:
                    f5:6f:42:c5:84:70:9e:a3:5b:99:c8:b8:94:ba:c2:
                    26:c8:fa:17:8b:22:87:8a:53:d5:26:4b:47:6e:55:
                    b6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:01:64:08:94:83:5B:40:1F:FD:0C:12:5D:83:4B:02:5E:8F:78:5B
            X509v3 Authority Key Identifier:
                keyid:0A:9F:D3:08:FE:3E:AD:BA:33:46:8C:E4:BB:99:6B:BD:D8:CD:E6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cp_TCP4-rbozRozku5lrvdjN5hU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/cf178c-da3e-4dc5-b247-a1abb2efc81c/1/Cp_TCP4-rbozRozku5lrvdjN5hU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:6d:c4:e4:d1:fc:54:b9:f7:83:16:d9:60:06:72:58:d8:5f:
         06:64:d9:87:95:36:3e:d7:4b:35:27:8b:c5:97:b4:20:6b:ea:
         2f:0d:a8:6a:15:a3:d9:87:68:c6:a8:6f:55:c6:ce:d0:c0:fd:
         32:d6:2b:f0:0b:eb:13:08:42:c3:c8:ef:3d:04:56:2c:33:84:
         1b:04:7f:8c:f2:c7:5e:75:8d:c4:b8:67:ce:0e:75:c4:9a:2b:
         c1:7a:11:1f:18:0e:5a:12:97:72:0f:88:f9:c4:90:28:ce:30:
         24:08:0f:f2:2a:a1:f9:c4:0c:2a:80:80:48:76:cc:54:4f:1b:
         06:53:7e:21:dc:b0:18:2f:f5:6c:64:d2:82:03:39:01:5d:4b:
         e8:ff:d9:70:d3:93:ff:31:b4:d3:02:2b:29:d4:ff:69:dd:c0:
         71:83:7b:5c:ad:5a:15:d8:40:36:cc:27:27:00:8e:fc:92:b6:
         e6:fd:f7:b6:8c:4b:d3:ef:dd:57:b0:31:f0:4d:9c:ed:90:74:
         7b:23:20:79:d8:9d:92:cb:6d:ee:5d:ac:6f:78:28:f0:db:f2:
         a6:60:c6:62:95:10:22:78:dc:8c:c4:5e:13:52:9b:3d:ec:47:
         95:a2:8c:81:ef:9d:55:6c:c1:f3:29:19:1c:b3:5f:31:3a:4e:
         7e:51:16:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----