Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
File:                     TkwTiahJ713MuDA3A7iYyR5j0U8.mft (raw, json)
Hash identifier:          uGtiauqexbm3cDmPK8RWo9YB/XF1XP80CJCISrFx/Mk=
Subject key identifier:   89:56:97:7D:2E:42:02:A8:B0:A9:D0:5C:DD:62:5C:AA:3F:0F:7B:A3
Authority key identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
Certificate issuer:       /CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Certificate serial:       01962F74E3472A78C4FC13FE7F08E73D1BFA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
Manifest number:          0DE6
Signing time:             Sun 13 Apr 2025 14:01:51 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:51 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:51 +0000
Files and hashes:         1: TkwTiahJ713MuDA3A7iYyR5j0U8.crl (hash: MQ0rSz+qfbFERhxxr+ACJGmj3FGJ7tc1CxNgdcAf5TM=)
                          2: Y2AwHZ4LjgCyZ7c3VA39uJ1uOJA.roa (hash: jN16HvDKq8wIqjLIVTWw0neRTt/pe6lIdR9PV+gdOvM=)
                          3: oslVCzjJDktKYJryYSyNdvUnSkk.roa (hash: SorYVglRqEFAzZq8qsgmev36Xx5W3U58FYVpLFp4hYs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:e3:47:2a:78:c4:fc:13:fe:7f:08:e7:3d:1b:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
        Validity
            Not Before: Apr 13 14:01:51 2025 GMT
            Not After : Apr 14 14:01:51 2025 GMT
        Subject: CN=8956977d2e4202a8b0a9d05cdd625caa3f0f7ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ca:a0:b4:06:4c:e9:3a:ec:64:2a:1a:47:3e:
                    7d:4c:28:66:71:6b:73:5b:73:73:22:c2:b8:9b:77:
                    5c:f0:5a:78:20:f0:1c:76:59:b8:e5:d4:58:60:8a:
                    17:25:cf:89:fe:77:cc:ee:e4:4b:0d:d8:90:01:9c:
                    c3:87:98:71:e9:16:7a:b9:1f:15:37:62:f3:3e:48:
                    cf:15:ce:f5:be:2e:13:26:c0:99:e1:ef:b5:33:a5:
                    af:32:90:bc:7d:4c:37:50:13:e3:8e:64:d9:90:e0:
                    5e:56:16:5e:c3:2e:3d:2f:69:78:94:44:eb:35:9e:
                    c0:0b:0c:94:d4:04:04:ab:55:df:71:8a:ef:e4:c4:
                    29:b0:6c:9c:0b:78:6d:c5:e4:3f:5e:9a:8a:3d:2c:
                    b9:4a:72:a3:ec:e7:ac:ff:d5:f9:7d:90:37:be:88:
                    80:da:fb:97:af:11:a5:61:d9:81:e0:67:00:bb:6e:
                    34:d3:8d:57:a1:9c:92:c3:52:db:93:44:01:1d:36:
                    82:df:bd:08:f3:bc:7a:4a:bd:95:a2:af:cd:10:7e:
                    28:10:fb:65:b0:6a:e3:65:db:77:28:6f:e0:70:81:
                    27:d3:40:b6:2a:e8:8a:31:be:38:24:e1:2f:a3:a4:
                    15:0b:d0:00:93:91:e5:5b:4d:c6:12:04:db:2b:e9:
                    1c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:56:97:7D:2E:42:02:A8:B0:A9:D0:5C:DD:62:5C:AA:3F:0F:7B:A3
            X509v3 Authority Key Identifier:
                keyid:4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:d6:d9:ce:36:7d:17:73:3e:bf:53:81:f0:74:97:33:2f:7a:
         ab:84:e3:9f:e6:be:6c:69:93:13:bb:09:4f:55:b2:69:10:34:
         c5:ce:2e:32:26:b7:e5:6d:6e:86:3f:91:5c:82:e2:47:72:50:
         d7:79:eb:7e:8f:d6:d1:fa:d8:a8:0c:63:a4:7a:8e:ba:ca:03:
         4a:fc:93:20:b3:ab:b1:e4:53:e7:fb:57:7f:b2:a7:21:68:44:
         65:d7:38:cd:16:cb:62:43:e5:d3:41:43:ab:bb:14:6b:86:74:
         b3:1e:75:9e:42:c0:f2:0b:88:dd:ff:59:dc:6b:44:68:47:f2:
         70:e8:ae:cd:a8:ae:8f:a1:c2:22:d4:c2:98:4c:29:84:85:b5:
         24:cf:c7:8c:8e:b7:ce:d4:01:f5:68:cd:e5:7e:c9:59:fb:07:
         11:7a:6a:45:38:07:1b:4b:4e:bb:53:cb:ef:09:ee:06:d3:08:
         68:e7:c7:e0:98:69:f7:be:c2:d7:23:ff:64:08:20:d1:7d:d2:
         5b:fd:b1:a0:e5:77:0b:30:af:18:25:aa:1a:60:29:a5:5d:3e:
         5c:d9:1a:2c:71:2c:15:2f:64:84:07:ec:01:99:a1:a0:83:56:
         2b:6b:8e:bc:6c:d8:be:69:40:32:48:fc:7c:c3:15:9f:d3:1f:
         61:dd:2a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----