Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
File:                     tFBrzj9-GuOn4sua0gXEzfsC3bU.mft (raw, json)
Hash identifier:          7vNU1qhik+ESwWMrnEoBoyq/wREuLH//2JFIhn5B3wI=
Subject key identifier:   33:5A:56:34:9E:5F:4E:3E:4B:37:B8:25:34:BD:00:9E:B2:D1:71:CB
Authority key identifier: B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
Certificate issuer:       /CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Certificate serial:       01962F7426679308C0638375B9FE61A68468
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
Manifest number:          13F8
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: Kd39P6546NpKkTMGeJ0Di1Tm-dg.roa (hash: whkcH/ShQkUqu7p697My2+ymwjNji4wGQLqM0wmvkYA=)
                          2: To-uv46-3XmiPKg6c_GrFJdFcf0.roa (hash: SmXcvoxvyvRm/BeOwyu47J7sKwYa3+1oFy5V9rexUqQ=)
                          3: tFBrzj9-GuOn4sua0gXEzfsC3bU.crl (hash: z6ogH9AHMheeK78ctLj8CNrnhy93e/nhA2XWp7ihcKA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:26:67:93:08:c0:63:83:75:b9:fe:61:a6:84:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=335a56349e5f4e3e4b37b82534bd009eb2d171cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dd:69:fa:c3:78:c3:30:9c:56:43:32:82:45:
                    c7:e5:1f:b0:e7:6d:82:a8:f6:6d:5d:26:b8:3c:86:
                    27:7e:07:6f:f7:9a:4e:c4:41:d3:d2:16:98:6c:d8:
                    73:c1:e2:04:e2:d5:9c:65:73:a0:05:7a:6f:55:03:
                    5a:86:d6:c1:1c:72:74:7d:0b:bc:03:d0:57:7b:ee:
                    d8:07:63:c1:14:21:ce:26:74:59:e6:8b:c2:ef:73:
                    cc:bf:95:58:9f:f4:31:26:0d:a9:ea:6d:93:19:0f:
                    b4:78:5a:90:09:45:99:af:06:76:39:f6:21:f5:47:
                    03:12:1e:d8:0f:52:1e:04:d5:44:74:18:18:9b:da:
                    ac:5d:5e:ca:70:61:ec:06:dc:a6:91:46:ce:17:03:
                    5f:0c:07:5f:53:f6:ea:3a:54:e1:ac:8e:c3:fc:33:
                    f4:10:92:da:30:aa:6e:90:77:03:57:12:c1:98:3f:
                    ac:1d:8b:9a:ae:05:60:b8:2c:71:4a:4d:f7:45:18:
                    0f:b4:12:bd:71:5b:39:f7:55:3c:a4:b3:0d:4e:d1:
                    7c:c3:50:7c:5c:bc:2a:ea:9d:d9:a8:87:9c:b1:f0:
                    9f:dd:8f:82:76:d7:9b:b7:3f:11:3d:90:f8:b7:e4:
                    7e:45:5b:9c:d5:c8:0c:96:e6:be:9e:4d:fb:37:34:
                    2b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5A:56:34:9E:5F:4E:3E:4B:37:B8:25:34:BD:00:9E:B2:D1:71:CB
            X509v3 Authority Key Identifier:
                keyid:B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:7a:07:ad:06:40:8c:43:aa:4a:ac:71:0d:b5:65:e2:f3:17:
         a8:e9:6e:25:a3:49:1d:10:d4:51:11:ec:41:9d:91:8f:26:c3:
         eb:b8:6c:45:95:cf:30:05:19:9e:3b:8f:a3:f3:3e:a5:36:b3:
         e5:32:bc:e6:cb:b3:8a:b3:e2:6c:53:2d:2b:d3:51:5d:f7:80:
         89:5e:2d:a7:2a:db:e1:2b:05:7c:9f:a6:3f:01:53:6b:1c:8d:
         45:95:c5:3f:96:57:5f:0e:0b:00:de:54:b9:c3:c9:db:b8:26:
         d9:2f:85:e3:52:95:88:5c:0f:b0:9c:f5:ef:9c:b3:46:00:db:
         7f:20:18:9d:f2:47:c2:71:bd:1a:92:5b:69:ec:c1:8a:4a:40:
         95:c2:a0:80:b5:83:d4:bf:b3:23:69:e7:be:e5:fa:e3:ec:f2:
         a4:b2:b9:16:9d:35:a6:13:3c:03:8f:11:9f:f3:1f:55:46:74:
         7a:33:df:ef:36:c7:db:70:88:42:33:17:d7:3c:9e:4a:a0:12:
         ba:16:51:c4:7e:6a:33:c1:73:ae:85:77:c2:43:90:4f:88:2c:
         20:fd:89:8c:f2:e3:3f:3b:ab:ea:85:d7:50:41:1d:93:45:05:
         40:c9:19:6c:8a:5f:f1:59:bf:da:17:d3:09:56:50:72:ac:d0:
         78:e6:f9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----