Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
File:                     TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json)
Hash identifier:          L74Y1uh74siW7I+a1wd7wYYqtG7fQje3K0bbzfZwYYA=
Subject key identifier:   DC:EF:90:BD:E1:D9:79:6E:01:C3:05:26:54:A6:DF:A0:79:14:76:E7
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Certificate issuer:       /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial:       01962F7425F49BE704CD3DC794AD770DC1B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
Manifest number:          0E68
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: xUMlSulqF67lMle1rljMKWlvAAeLgZM+gpMhbMjdrRM=)
                          2: eOJpQF5FNoppqB79NhjuknNPvas.roa (hash: 0TneR6h3XAtyeO7uLkVkGQTYXZHCJ04//nJtpw2jBn4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:25:f4:9b:e7:04:cd:3d:c7:94:ad:77:0d:c1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=dcef90bde1d9796e01c3052654a6dfa0791476e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:48:8f:1b:8c:66:fa:ca:2b:43:c5:2a:96:df:
                    4d:d1:d4:9d:f8:24:ed:7f:26:a1:88:89:90:f2:7a:
                    4f:69:95:39:be:40:93:cd:02:c7:2b:01:0c:68:5f:
                    aa:e6:3e:4e:dd:3b:3d:5d:02:c1:95:f3:14:9b:34:
                    13:dd:1c:67:81:ab:e3:15:bf:7c:20:3c:51:31:a2:
                    d3:b9:1c:e0:23:bf:0b:d8:99:ca:e5:47:9d:70:4d:
                    96:b8:4f:a8:cf:43:75:91:1f:02:34:4b:8a:91:85:
                    40:a1:03:82:72:2d:93:ae:e6:55:6e:c6:a7:68:77:
                    3e:6c:bb:09:f9:fd:13:2f:c5:9b:33:6b:b5:fb:ea:
                    92:a0:aa:de:b8:ba:1e:f4:53:65:41:4f:50:d1:d7:
                    5b:b7:8d:3c:bb:c8:78:82:11:0d:4f:50:dc:0a:9d:
                    3c:c6:de:c8:16:6f:5f:37:d0:d3:d1:f2:42:07:2b:
                    03:5e:6e:d5:db:27:29:92:5f:2d:58:53:49:87:24:
                    39:cc:9e:65:98:a9:36:d6:2e:23:85:a8:0b:1d:b2:
                    1f:5f:0f:44:88:38:25:49:c8:af:e1:75:ef:a7:c5:
                    43:c9:c3:92:29:38:c2:8d:77:16:69:24:6d:4d:e4:
                    a4:bb:16:c3:c3:bb:b7:30:85:37:01:4c:6f:0c:c0:
                    c9:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:EF:90:BD:E1:D9:79:6E:01:C3:05:26:54:A6:DF:A0:79:14:76:E7
            X509v3 Authority Key Identifier:
                keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:b8:71:b3:db:03:2d:db:ae:35:61:38:e7:bd:d6:19:fd:90:
         52:4e:f8:5b:98:e1:2a:a7:e8:dc:93:8f:99:68:56:9a:c8:23:
         23:d7:7a:3a:6a:60:a7:17:7c:78:72:d7:f4:6b:9f:b4:16:89:
         a7:58:f3:5d:33:84:0b:53:4d:66:44:01:ea:02:4c:44:9a:31:
         77:2a:2f:5d:39:52:71:f7:75:6f:99:a8:ef:29:5d:5a:25:fb:
         fe:d2:ed:26:34:3e:85:6c:0d:44:46:67:b8:9d:e7:21:94:94:
         18:87:08:0f:d9:1d:6a:3c:81:1b:63:1a:46:4e:7c:0f:c3:69:
         df:72:61:85:db:de:2d:17:e7:f1:ff:93:ee:b9:9f:0b:0c:f9:
         fd:60:52:a6:cf:a5:98:64:16:c8:a3:fd:3a:62:5f:43:04:e3:
         99:22:bb:73:e9:8f:41:28:ff:89:ff:ae:8c:8d:d9:f9:8b:f1:
         7b:48:b2:67:e2:1d:c3:27:c0:f3:99:92:ed:2e:40:84:73:be:
         c5:09:a4:43:10:16:e0:8e:d0:53:7f:7e:f3:5a:68:da:be:c0:
         94:18:2d:87:42:1e:76:d6:f0:0d:72:62:7e:72:1c:8e:87:1e:
         3d:35:14:a0:3a:41:99:19:6f:ed:c0:3c:a4:4a:c7:21:1c:f7:
         fe:b7:82:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----