Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
File:                     T7ZXbs2iUkbfcNenLhz_-tiI6js.mft (raw, json)
Hash identifier:          hN9RPOC/Ksqd/m+41UkWMTejQ20iuqlPLVNU2jC5BYc=
Subject key identifier:   E5:B2:35:4B:E9:88:27:81:DB:DC:F6:D4:43:F0:EF:D3:87:A5:08:80
Authority key identifier: 4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B
Certificate issuer:       /CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
Certificate serial:       01962E2B436795961356220C5F3E39FDA251
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft
Manifest number:          048C
Signing time:             Sun 13 Apr 2025 08:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:49 +0000
Files and hashes:         1: T7ZXbs2iUkbfcNenLhz_-tiI6js.crl (hash: Ky9T3qIqMtORkuFKEusO/pnd2DHZOKeP9Tjzb8MhuGo=)
                          2: q0JCtn0ymXJ_44Fp2RsnS-aL5Os.roa (hash: ol9vwFP2kye7kweAuJ86LI17vpYzbBP1gC/LI4vVUEU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:43:67:95:96:13:56:22:0c:5f:3e:39:fd:a2:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fb6576ecda25246df70d7a72e1cfffad888ea3b
        Validity
            Not Before: Apr 13 08:01:49 2025 GMT
            Not After : Apr 14 08:01:49 2025 GMT
        Subject: CN=e5b2354be9882781dbdcf6d443f0efd387a50880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:02:5f:a1:b7:a3:26:b3:1d:b1:dd:62:8c:21:
                    44:c0:f6:55:83:f1:b5:b3:cf:ab:e1:8f:e0:ea:e5:
                    59:63:fc:e9:37:a7:23:93:13:e8:1f:5a:a1:9f:e7:
                    90:b1:ec:66:34:c0:5d:e5:71:f6:7b:c9:f1:ee:b8:
                    9f:66:9f:7b:3f:5b:29:fe:a3:7b:85:03:b0:3a:e5:
                    73:1c:1a:8f:3d:18:f6:99:09:0a:d4:0e:31:36:8b:
                    12:5c:1a:7f:de:5d:ba:03:49:d7:d7:4c:21:13:29:
                    d7:6c:17:86:45:75:9f:cb:e0:b4:ca:8d:bf:7c:41:
                    de:3f:21:ca:1d:ec:2b:b4:e7:c5:e5:6d:c0:56:58:
                    a4:92:9b:b6:60:e7:db:c5:42:ff:75:9b:be:8c:2d:
                    47:1d:e2:81:78:ce:56:5f:ca:33:18:70:44:4b:e2:
                    82:00:d7:b8:75:9a:87:a2:9f:eb:d5:6c:df:bd:42:
                    d1:81:ce:52:f1:71:1f:5c:8a:b2:d2:6d:a0:17:f9:
                    f3:23:a8:17:22:d9:3e:d0:69:71:1c:49:b3:c8:e5:
                    f1:89:b9:2f:d1:38:93:ef:f7:72:df:97:e2:e0:26:
                    64:e8:2e:76:db:ee:a9:7e:c3:d4:21:1e:20:35:5e:
                    00:e0:18:ba:0d:f7:26:27:ea:c0:d7:3c:89:0e:38:
                    31:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:B2:35:4B:E9:88:27:81:DB:DC:F6:D4:43:F0:EF:D3:87:A5:08:80
            X509v3 Authority Key Identifier:
                keyid:4F:B6:57:6E:CD:A2:52:46:DF:70:D7:A7:2E:1C:FF:FA:D8:88:EA:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7ZXbs2iUkbfcNenLhz_-tiI6js.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/501ebf-5ffd-4cda-a66d-062d70e3aa23/1/T7ZXbs2iUkbfcNenLhz_-tiI6js.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:9e:bb:4d:19:0d:05:fb:06:e5:31:d5:19:60:d9:0b:7f:94:
         c7:0e:94:14:58:d3:3b:8d:d9:5a:a1:10:92:c8:df:09:bf:c5:
         fe:b3:67:9c:1b:b2:ea:b2:a6:17:72:cc:56:69:c8:a7:a5:1c:
         cb:e1:31:77:cb:fd:74:2d:b4:ab:d4:30:7f:c2:ee:cd:90:58:
         b3:89:e4:56:ed:bd:48:bf:6a:bb:7b:f1:4d:3e:2d:24:d8:8c:
         a0:f0:71:b7:e2:c7:fc:14:79:73:5f:06:04:ad:9e:d1:b9:6e:
         9c:06:0c:b1:80:05:52:ec:aa:eb:9d:8a:6c:db:92:e7:92:bd:
         1a:a0:a4:bf:ce:e2:39:8c:fe:cd:d6:35:b2:e7:70:a3:a5:2d:
         05:b4:2c:8e:5c:af:3a:e6:3b:a7:4e:55:a2:f6:73:00:e2:16:
         b6:f5:42:5a:75:6f:c9:48:fc:9e:be:13:58:02:e2:f4:9c:a9:
         b5:dd:01:cc:74:37:d0:38:aa:b1:99:06:fb:df:18:bd:b8:f8:
         da:ef:4e:2b:9d:e6:f0:2b:a2:e8:45:9a:ce:95:94:45:13:d1:
         9d:2c:6c:ce:fd:40:6a:fb:cb:ff:2f:a4:7c:1a:c9:5f:bf:71:
         d4:08:d8:11:92:e4:44:ef:54:da:9a:31:e5:b4:93:96:64:43:
         e3:87:77:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----