Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
File:                     TYqYddfQ0SvEenC37emjymTYLTI.mft (raw, json)
Hash identifier:          HB7ubDz/Cdst3DiwAJoL21EZUvUJkOkHA0sTXgCGxIE=
Subject key identifier:   C3:67:0B:E2:C4:48:79:99:AC:D8:7A:CB:86:7D:9F:D2:39:DC:8D:B0
Authority key identifier: 4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
Certificate issuer:       /CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Certificate serial:       01962E61D03AA8A5892682DFB7518E0B3C60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
Manifest number:          0B63
Signing time:             Sun 13 Apr 2025 09:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:24 +0000
Files and hashes:         1: Qkkirv8lLJuTeoHE2XBshzOic18.roa (hash: JXSnxQgZnKW02ndUqgQ4ahHIPbZr+aCryUo1lSsSpVM=)
                          2: TYqYddfQ0SvEenC37emjymTYLTI.crl (hash: llTBdQt2xfXeZKy1sykAgvDQlX2mwQ/puXAHHVVgw/s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d0:3a:a8:a5:89:26:82:df:b7:51:8e:0b:3c:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
        Validity
            Not Before: Apr 13 09:01:24 2025 GMT
            Not After : Apr 14 09:01:24 2025 GMT
        Subject: CN=c3670be2c4487999acd87acb867d9fd239dc8db0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:dd:d2:6c:91:6f:5f:4c:a1:e5:ec:78:21:3c:
                    a4:5f:55:3e:e5:c2:90:f0:1a:b1:2c:ff:4a:7f:2d:
                    2d:e4:56:66:ce:03:66:34:4f:93:ea:b8:ef:78:c9:
                    ab:3b:05:56:9b:1f:76:6c:ba:86:92:ff:a4:6c:9c:
                    09:20:f1:05:18:f9:6e:d7:7b:35:1b:40:ce:6e:0d:
                    9a:f2:72:d0:f0:63:c6:75:20:d9:10:96:31:a5:cb:
                    a0:23:f2:8a:25:0d:ce:37:a4:7e:68:8b:77:85:00:
                    af:1a:34:d6:81:63:9c:82:17:34:7d:a9:3d:97:cc:
                    cb:3c:91:42:de:a7:68:e7:74:52:dd:72:ec:32:d4:
                    19:2b:9e:7e:92:b5:1d:55:34:14:18:fe:6e:fe:cd:
                    3b:26:8b:78:35:0c:d9:be:6f:69:26:9f:21:e2:53:
                    ad:93:61:2e:c2:33:c8:65:30:41:83:f2:1b:4a:08:
                    1e:d1:34:c8:ee:78:ce:e9:58:48:27:d6:79:c5:7c:
                    4d:71:4f:9c:42:89:83:a4:2b:46:35:2b:c7:17:c3:
                    4b:77:d0:d2:dc:6a:e3:c3:61:d9:ed:d0:91:30:a5:
                    07:64:a7:cd:53:0f:d5:3b:a1:6e:69:34:c6:6d:e4:
                    47:f6:f2:bc:57:09:d4:dd:3d:c0:93:3a:da:0e:0e:
                    98:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:67:0B:E2:C4:48:79:99:AC:D8:7A:CB:86:7D:9F:D2:39:DC:8D:B0
            X509v3 Authority Key Identifier:
                keyid:4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:46:87:02:37:89:aa:13:81:cf:9c:d8:08:8b:47:fe:7b:9f:
         a1:8f:24:63:6a:1f:0f:44:65:02:ea:d9:b9:d6:8d:50:54:ad:
         d5:63:1e:32:ee:aa:54:80:3f:1f:7d:7a:10:7a:af:b4:20:a6:
         fc:e9:75:4d:b5:16:8a:bc:f2:ad:18:bf:90:0b:13:9c:11:d1:
         4d:54:77:38:4b:14:25:cb:0d:fd:69:a3:a6:32:6a:e1:ee:36:
         95:41:91:dc:73:0b:10:ae:d9:98:9b:02:82:56:e2:56:33:b2:
         61:27:75:b0:4f:2c:3e:32:20:57:11:e7:1c:5d:a6:90:88:34:
         c2:6a:00:6a:d8:55:a7:87:29:71:4d:a7:9c:a1:0a:ad:eb:64:
         e2:d0:d9:a9:34:01:36:b1:0a:d5:d2:34:7a:2f:fe:c2:c5:e9:
         a9:b7:7c:4d:39:c9:0c:93:0c:53:21:f8:82:5b:06:2f:eb:b1:
         b5:ef:da:c5:d5:21:a5:f8:b4:1d:45:b5:ad:e6:75:8a:93:89:
         d9:6d:42:a8:32:99:20:00:a8:36:45:2a:4e:cf:cd:b9:2e:12:
         70:e1:54:ea:b6:dc:85:df:6c:86:23:0e:99:5b:ea:c8:e4:fc:
         cf:78:a0:54:29:d8:18:1a:64:9c:3d:cc:71:be:81:0b:98:28:
         6e:88:79:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----