Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
File:                     8TM6Z1TACO27rF8y69AZ6mRzrqg.mft (raw, json)
Hash identifier:          bDDWMWaPeMaaf8lB2QJQH9KAZe6UJkAs7YttbpE95RY=
Subject key identifier:   E7:DB:B1:F0:6D:17:88:E6:FE:1A:FD:23:B8:50:FC:26:8A:F8:F7:E8
Authority key identifier: F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8
Certificate issuer:       /CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
Certificate serial:       01962DF3EC5340BAB4DDD3EC08168575994C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft
Manifest number:          0D5F
Signing time:             Sun 13 Apr 2025 07:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:22 +0000
Files and hashes:         1: 8TM6Z1TACO27rF8y69AZ6mRzrqg.crl (hash: +Su7Y+GzMePeTFtGNpeONHtqnU6j3ChpgK3kCuj4OZI=)
                          2: G1CMU250DLNf-oup7Q0hOPQNrZw.roa (hash: 0pwKFn2zlhCRBk1YacOr41wGcqVSw2Yno4Qxh/muNvo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ec:53:40:ba:b4:dd:d3:ec:08:16:85:75:99:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1333a6754c008edbbac5f32ebd019ea6473aea8
        Validity
            Not Before: Apr 13 07:01:22 2025 GMT
            Not After : Apr 14 07:01:22 2025 GMT
        Subject: CN=e7dbb1f06d1788e6fe1afd23b850fc268af8f7e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c5:c4:40:cc:0b:0c:ba:8d:d4:65:e8:5d:8d:
                    15:a4:d5:1a:86:eb:19:7f:30:8a:1a:d4:9b:bd:0b:
                    0f:bf:79:80:ca:e9:24:47:ed:93:ed:3f:cf:95:49:
                    1d:ee:32:3d:0a:6e:54:4f:1f:39:e6:d1:67:96:41:
                    6a:e9:9d:f5:d1:fc:aa:61:9f:77:2d:c9:bb:32:f2:
                    9c:4a:30:fa:fe:2b:99:d6:50:94:54:eb:cf:c0:25:
                    ce:fe:fb:e8:ac:f8:89:9b:cb:46:63:37:ee:d6:a9:
                    15:a9:86:35:e5:da:cc:ae:a4:67:e9:63:64:d1:da:
                    2c:25:3d:73:cf:34:de:2f:22:3e:23:28:a4:4a:0f:
                    3a:a8:17:74:fe:e0:eb:5d:fb:74:3d:99:7a:95:b3:
                    0a:d5:42:3f:31:f4:4f:06:be:bc:8c:5d:47:eb:4d:
                    d9:e7:e2:45:91:cb:05:2f:28:22:a6:c4:4c:b9:3b:
                    ba:9c:c8:12:3c:fc:41:ea:02:d2:c3:71:58:78:8d:
                    d2:3b:3f:55:50:30:63:57:f8:f3:c0:ad:21:25:16:
                    70:5f:a9:76:ee:48:c1:6a:3b:0c:8e:06:14:ba:ee:
                    8c:56:ae:bc:28:28:f3:83:1d:c5:d0:91:4a:1a:cf:
                    6e:c5:c3:aa:82:03:ab:fc:5b:8f:93:7e:93:28:ff:
                    b5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:DB:B1:F0:6D:17:88:E6:FE:1A:FD:23:B8:50:FC:26:8A:F8:F7:E8
            X509v3 Authority Key Identifier:
                keyid:F1:33:3A:67:54:C0:08:ED:BB:AC:5F:32:EB:D0:19:EA:64:73:AE:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TM6Z1TACO27rF8y69AZ6mRzrqg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/849dfd-939d-4c5d-8eb6-f059670daf3d/1/8TM6Z1TACO27rF8y69AZ6mRzrqg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:db:02:21:bf:d9:11:70:2d:aa:a9:a0:07:5c:76:43:e4:97:
         96:28:7d:9d:25:02:21:c0:84:3f:da:5b:3b:02:7a:90:0d:1b:
         8e:23:a9:c6:f1:c1:9f:51:39:74:0f:65:c1:33:60:c6:7c:a4:
         42:9f:4b:80:93:95:e7:30:78:e6:78:61:70:25:93:0f:e0:54:
         67:aa:fe:8b:53:fa:0d:cc:eb:c8:0b:19:9e:fd:3c:0b:d9:0f:
         ac:b4:8f:6a:eb:41:af:21:70:0a:d3:d9:06:b5:0e:c0:86:ee:
         6a:f1:5a:76:8b:46:ca:10:80:55:7b:16:e4:48:6e:49:5f:66:
         22:86:1a:34:e9:ba:fb:1d:b8:d7:3d:d5:f5:30:f9:28:26:8a:
         80:b3:3e:a8:76:53:a5:5e:f1:9d:99:7d:a2:16:2b:9a:60:72:
         e4:70:9a:bd:2b:99:71:30:31:1a:9f:71:f2:ce:6e:ba:ef:ad:
         e6:5c:ae:63:0b:c4:de:df:f6:95:4c:df:3e:16:42:8e:4c:bd:
         9c:61:5b:f2:7d:b6:f2:de:a9:0e:26:2c:61:82:08:96:db:9a:
         ee:20:38:8d:d7:06:92:9d:c3:ed:69:55:47:e4:0e:68:4e:c1:
         4e:41:0e:9c:40:97:a1:41:5f:17:b1:d5:75:24:fc:29:04:bc:
         ca:20:a1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----