Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
File:                     TtaClltaFeoMReqF7z20vnFnlpY.mft (raw, json)
Hash identifier:          RRBHeSz48LrqrV/mbDJBaU9X2lBc6hgNLc6N0pORp3I=
Subject key identifier:   BA:2C:20:CC:0B:28:46:88:45:42:2C:E8:A7:F1:22:68:16:73:18:63
Authority key identifier: 4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96
Certificate issuer:       /CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
Certificate serial:       01962DF3D0857506D1B49E790C01D1292686
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft
Manifest number:          0310
Signing time:             Sun 13 Apr 2025 07:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:15 +0000
Files and hashes:         1: 3aqe87dN2fz6qQQtxNwtFo2__ps.roa (hash: Lt1Bd1g6jAvktpInXW5Oo10n3abY0buPeadfOybeVY0=)
                          2: TtaClltaFeoMReqF7z20vnFnlpY.crl (hash: b44YaP4AdZMptWYG3rNrYBivH/gKo80/TMGmGYdAg3w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:d0:85:75:06:d1:b4:9e:79:0c:01:d1:29:26:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed682965b5a15ea0c45ea85ef3db4be71679696
        Validity
            Not Before: Apr 13 07:01:15 2025 GMT
            Not After : Apr 14 07:01:15 2025 GMT
        Subject: CN=ba2c20cc0b28468845422ce8a7f1226816731863
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:e1:50:1b:d1:b4:db:27:55:98:bb:11:5d:
                    35:41:96:1e:86:de:0d:bf:13:0c:f6:57:0c:c7:2a:
                    b7:b8:3c:89:81:94:3b:20:c6:e0:0d:35:7e:df:0d:
                    ac:db:e2:2f:ba:1a:b5:58:62:c4:34:3f:f6:ed:b1:
                    20:5a:83:7f:e3:66:06:90:15:bd:1d:2f:13:89:48:
                    03:a3:4a:bb:c9:b9:38:09:b2:1a:01:fa:df:25:f3:
                    2b:d8:cd:91:78:79:38:92:b1:bb:c1:f2:50:7c:66:
                    54:22:7e:d9:d8:70:75:5f:be:32:71:c8:dd:e0:bf:
                    96:bc:57:72:2b:06:c7:67:01:c6:2c:73:7d:3f:69:
                    7f:b3:ad:8d:e1:5d:19:d7:1d:a7:b8:5a:fb:1c:47:
                    18:4b:7d:6e:27:09:f3:54:cf:92:ae:6f:5a:78:99:
                    28:46:a9:f7:b4:48:fb:4e:3b:0f:49:d0:28:d2:3b:
                    48:02:d4:d7:21:b1:ed:40:e6:96:c0:03:59:91:d7:
                    55:69:25:69:4d:b4:ae:a7:e4:a3:e3:a2:42:59:54:
                    c7:bf:aa:47:80:b7:14:12:f6:f2:5e:3c:4d:a4:f4:
                    3e:ab:ab:9f:73:c3:d3:e1:2c:f2:b5:dc:d0:4c:7f:
                    41:b5:0d:63:eb:d6:10:14:55:9f:50:06:4e:5d:a7:
                    ae:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2C:20:CC:0B:28:46:88:45:42:2C:E8:A7:F1:22:68:16:73:18:63
            X509v3 Authority Key Identifier:
                keyid:4E:D6:82:96:5B:5A:15:EA:0C:45:EA:85:EF:3D:B4:BE:71:67:96:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtaClltaFeoMReqF7z20vnFnlpY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3e401b-64c1-41aa-98df-133e7e6f6069/1/TtaClltaFeoMReqF7z20vnFnlpY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:f3:67:dd:dc:77:84:3e:32:d0:e3:3e:f2:b9:3a:a7:59:c9:
         9c:43:57:42:bb:91:bb:c8:da:eb:e2:02:e7:e5:5d:48:02:40:
         0e:51:4e:15:62:52:d2:41:0e:24:d9:fa:e3:f1:c2:8a:d1:94:
         ad:92:49:a2:b5:2c:46:7f:c3:44:d9:06:3e:2a:d7:13:32:fd:
         f0:02:d4:9a:a1:c8:86:03:09:01:4a:38:32:df:07:24:8d:94:
         02:87:06:72:11:98:78:74:a5:b0:c9:68:74:94:36:b0:6c:6d:
         cc:12:a6:6d:b3:a9:c0:a0:e7:7c:b0:2d:0d:a1:ed:05:5e:63:
         74:f9:a1:a1:c2:c9:97:7f:13:08:3f:bc:59:61:44:ef:55:61:
         5c:1e:0b:bd:13:c5:71:dc:63:b2:92:c4:e8:98:1e:e5:f5:05:
         71:59:91:bd:14:69:e7:cb:15:c4:57:43:c3:0a:87:08:a8:86:
         48:5c:eb:69:4f:69:de:01:79:d7:d0:ae:79:37:bd:b9:4c:64:
         99:55:5f:5d:e2:b5:d3:60:8f:2e:e1:8c:35:72:73:ac:16:14:
         bf:3c:7a:46:c4:67:eb:36:a9:c7:c0:b1:87:30:81:e8:1f:6d:
         d2:7c:aa:31:ef:0a:8a:76:b4:72:2e:97:99:6f:82:21:0d:80:
         eb:e6:f3:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----