Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
File:                     tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft (raw, json)
Hash identifier:          cGCmIMJruRJgJIiklkWx8mYxxLSKT48WkL+u/rcThus=
Subject key identifier:   26:5A:C6:0D:44:BF:DA:61:8F:DF:12:5A:73:84:C8:3E:76:B8:07:7E
Authority key identifier: B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
Certificate issuer:       /CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Certificate serial:       01962E995F48D9682267783475E0A5DC595A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
Manifest number:          0737
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl (hash: Tls9CFw3mZIcxusIODdmJiath6DmkNNs753LhfAshVo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5f:48:d9:68:22:67:78:34:75:e0:a5:dc:59:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b66c4985cd60643220e064a2e114d78f5b039c2b
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=265ac60d44bfda618fdf125a7384c83e76b8077e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:04:08:d6:05:5a:49:96:62:0e:de:64:2b:a8:
                    d3:9c:0e:9b:01:45:26:35:cb:33:14:ac:81:c7:6e:
                    c0:c3:d0:fe:c6:7e:65:7a:9f:3d:79:7e:56:42:3b:
                    db:f1:1c:8e:aa:9d:df:3f:81:48:c0:78:24:b0:bd:
                    45:26:a5:48:a2:e0:77:4b:22:65:5c:9b:64:3f:72:
                    3c:f4:68:26:46:01:b7:8c:a2:2e:9f:d6:d7:03:34:
                    7c:49:6d:f4:9c:cc:11:6a:8d:d9:1e:b5:b1:36:30:
                    f3:37:d7:ba:7d:81:6f:d6:4d:44:cd:13:ba:4a:6a:
                    a7:46:1c:2c:96:2b:53:fb:de:d7:89:dd:74:58:47:
                    40:51:6e:b7:18:08:95:df:5c:74:fd:78:0b:0f:11:
                    be:3f:98:6b:1e:ba:4d:9c:ed:f3:0f:93:a4:48:0c:
                    e4:62:2a:01:f8:82:7e:aa:a2:6e:77:25:eb:6b:40:
                    69:64:fa:1b:04:2c:3e:98:06:ac:37:7f:db:1c:f9:
                    41:c1:22:c7:2c:22:ae:84:64:4e:1a:00:0a:9d:17:
                    a5:78:09:8a:b7:57:1a:b9:a1:96:88:be:23:ec:61:
                    fb:5f:15:34:c2:20:25:e0:66:08:22:31:39:9b:96:
                    19:d1:ce:c2:8f:07:31:e5:98:f2:9b:62:8a:53:3c:
                    d0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:5A:C6:0D:44:BF:DA:61:8F:DF:12:5A:73:84:C8:3E:76:B8:07:7E
            X509v3 Authority Key Identifier:
                keyid:B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:11:10:c2:03:7d:3c:af:e7:2e:e2:04:84:66:22:60:70:c0:
         ef:08:3d:3e:68:a4:cf:99:e7:85:a7:8a:5a:da:1b:da:c3:92:
         85:43:43:b3:70:d8:38:d7:b2:d5:24:22:21:31:ff:03:88:ce:
         a5:a2:65:63:10:63:a4:d0:72:34:57:2b:ca:e1:28:0e:35:c0:
         7b:53:c2:1b:7e:88:55:0b:4c:d3:55:a6:b4:50:9d:f3:25:ba:
         94:91:9a:3d:08:25:a7:95:d9:10:6e:cc:e7:32:4a:cb:90:1b:
         56:b2:4f:96:54:10:6a:e2:55:b2:22:15:60:92:70:f0:6d:74:
         d8:87:31:ea:43:79:a0:83:da:d1:db:98:93:fe:ac:b5:2f:5e:
         f7:1b:e8:ee:c9:9a:d9:ac:ef:10:21:4c:56:32:ab:ec:ae:cf:
         c4:58:29:fe:a4:94:e3:05:ef:04:a2:1b:1c:a9:cc:3e:fc:7a:
         f5:0b:12:a1:65:f3:06:6f:63:68:0d:fd:4e:4e:7c:03:19:58:
         b1:eb:cc:48:20:23:b2:f6:5c:37:1c:9a:9f:36:23:e4:a0:4c:
         82:cb:05:68:af:5e:07:80:02:a4:fe:0f:32:55:79:96:79:9c:
         76:b4:61:32:d7:1a:00:e8:6f:9e:dc:19:b6:39:dd:2d:5e:1a:
         67:bc:92:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----