Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/847c9d-201c-477a-ba96-328f66996ec1/1/TShV3jcUZy5-qwceFh0RoDDT048.mft
File:                     TShV3jcUZy5-qwceFh0RoDDT048.mft (raw, json)
Hash identifier:          6tnX0Vbv5oFIpCbJa0Eu3O7T7V+cDaZmlB3RHW/dSQs=
Subject key identifier:   F5:61:08:D0:9A:4D:73:97:3D:66:E1:26:5F:78:42:97:52:D4:4D:8B
Authority key identifier: 4D:28:55:DE:37:14:67:2E:7E:AB:07:1E:16:1D:11:A0:30:D3:D3:8F
Certificate issuer:       /CN=4d2855de3714672e7eab071e161d11a030d3d38f
Certificate serial:       01962FAB15A935690A3E2EB9759081AD77AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TShV3jcUZy5-qwceFh0RoDDT048.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/847c9d-201c-477a-ba96-328f66996ec1/1/TShV3jcUZy5-qwceFh0RoDDT048.mft
Manifest number:          01A4
Signing time:             Sun 13 Apr 2025 15:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:03 +0000
Files and hashes:         1: TShV3jcUZy5-qwceFh0RoDDT048.crl (hash: H+2CyIhFFsFfZCJnEC0yM3pp73WYJKZyWz+MRqjXSV8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:15:a9:35:69:0a:3e:2e:b9:75:90:81:ad:77:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d2855de3714672e7eab071e161d11a030d3d38f
        Validity
            Not Before: Apr 13 15:01:03 2025 GMT
            Not After : Apr 14 15:01:03 2025 GMT
        Subject: CN=f56108d09a4d73973d66e1265f78429752d44d8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:be:c5:9c:e9:9d:e7:34:96:a3:33:f4:d6:f6:
                    3b:42:ff:26:05:74:60:4a:ef:6b:fb:9e:10:42:de:
                    ca:bf:4a:13:ba:77:f3:06:ca:35:97:8b:3c:16:68:
                    62:86:13:4c:b9:73:8a:80:76:6e:28:13:81:15:5c:
                    a0:2c:d6:21:f0:d6:f6:a2:94:50:07:a2:b2:eb:fe:
                    50:47:d8:5b:73:f7:54:7e:1f:e9:d6:4a:4f:b5:61:
                    02:ba:38:b7:5f:d1:54:b1:c3:70:f2:3e:e7:63:0f:
                    bb:74:82:76:c5:c1:e1:f9:05:46:ac:aa:5d:2b:ad:
                    f8:aa:48:41:ee:b9:70:62:68:41:e4:f0:3e:f6:ac:
                    6d:6f:1c:1f:12:fa:8d:5f:b1:cb:4f:ab:f3:d3:89:
                    2e:ca:3a:3f:2e:4f:a0:75:5c:f8:2c:73:3f:c4:4e:
                    e2:36:01:94:f7:fe:43:37:71:3a:5b:e7:22:a9:d2:
                    3f:8d:92:e1:d9:10:99:63:e1:14:e4:98:f9:e8:ff:
                    cd:4e:88:58:e1:83:b9:9b:68:b0:d5:b7:c7:8c:2a:
                    7a:68:5d:78:ad:25:cc:8a:e8:a1:a2:77:29:3c:cb:
                    8e:41:3c:93:47:f6:1b:e2:81:b0:da:03:31:b1:3d:
                    90:8b:10:26:46:17:d1:94:63:7f:1c:31:a9:3e:35:
                    21:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:61:08:D0:9A:4D:73:97:3D:66:E1:26:5F:78:42:97:52:D4:4D:8B
            X509v3 Authority Key Identifier:
                keyid:4D:28:55:DE:37:14:67:2E:7E:AB:07:1E:16:1D:11:A0:30:D3:D3:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TShV3jcUZy5-qwceFh0RoDDT048.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/847c9d-201c-477a-ba96-328f66996ec1/1/TShV3jcUZy5-qwceFh0RoDDT048.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/847c9d-201c-477a-ba96-328f66996ec1/1/TShV3jcUZy5-qwceFh0RoDDT048.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:49:92:97:6b:7c:67:e7:9f:3f:5a:10:d4:22:f4:62:01:3b:
         5e:10:7e:bc:e4:e4:41:37:37:2c:ca:d3:27:1b:a9:01:c1:96:
         ee:b1:7a:0e:4d:b0:03:59:92:c6:6b:d2:de:00:bc:96:0e:c2:
         fa:be:c6:47:98:32:78:5d:bf:29:f7:11:d4:ee:89:46:fe:56:
         59:15:0d:b8:c1:28:c1:c6:5b:1e:6e:87:37:a4:e0:ec:a0:b8:
         bc:d5:b3:4d:aa:27:6f:39:e0:d3:99:2d:a6:96:96:37:03:f3:
         e3:b3:df:dc:9c:74:6e:80:12:50:90:6d:53:c9:10:df:59:1e:
         6d:12:41:69:e2:75:3b:bc:6b:0b:99:68:c1:dc:77:ac:c4:bc:
         7c:1c:3d:99:b4:be:e5:74:16:7e:bc:45:07:7b:b6:d1:dc:ef:
         0f:bb:90:65:55:2a:df:f3:6d:fb:ce:6b:40:74:b0:35:06:90:
         3a:21:25:a0:ed:29:87:c1:33:a7:fa:42:c7:1e:bc:65:32:50:
         12:d9:c2:94:56:23:23:0c:97:5d:42:34:99:60:59:e6:27:a2:
         05:d8:3a:df:f9:4c:60:e6:6c:13:1e:45:15:f1:e8:42:6e:e0:
         ad:9b:35:66:2a:7c:a6:7a:36:3d:38:89:09:f6:36:4b:53:28:
         51:c4:ed:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----