Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
File:                     TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft (raw, json)
Hash identifier:          +c1TK+LYICiNHGmABz5Y+9OYociTLWHrILwr0T8CD1M=
Subject key identifier:   26:C3:03:BE:6D:A9:F5:30:EF:00:14:3F:1B:D6:2B:9A:F1:3A:F0:70
Authority key identifier: 4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4
Certificate issuer:       /CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
Certificate serial:       01962F3D9A6CC265354C3D34B2EEA15726DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:28 +0000
Files and hashes:         1: TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl (hash: 5sp5vTIwiZ/qLrCHa7zBFmD/sFl9hbqqAh8Cs3MU37M=)
                          2: sXBtr0RmYgN7EHzS2OAuZuhPnSk.roa (hash: vzTvtT3U+hF4Cf7zWB9jndQ+LVyRdJBiHZIGS8DcnuI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:9a:6c:c2:65:35:4c:3d:34:b2:ee:a1:57:26:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d98fe502ac16e957cc33ebc2ec1be83bbed7cc4
        Validity
            Not Before: Apr 13 13:01:28 2025 GMT
            Not After : Apr 14 13:01:28 2025 GMT
        Subject: CN=26c303be6da9f530ef00143f1bd62b9af13af070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2f:e6:9b:bb:6c:e1:d5:ea:c3:01:31:0a:93:
                    17:ea:c4:d9:51:a9:29:78:21:d6:7a:06:e0:dc:20:
                    44:c4:95:ec:7e:b3:88:bb:f4:1e:06:6b:4d:a0:cc:
                    d0:80:00:a6:9b:88:36:74:bb:2c:bf:ab:4e:86:02:
                    69:18:b1:9e:4f:1e:fe:c5:3e:90:fc:1b:f4:10:40:
                    f3:77:16:fa:5d:c1:97:cc:c9:52:53:63:e6:8f:0f:
                    2f:e3:58:be:78:bc:ca:8b:80:b8:e2:19:11:6b:74:
                    09:04:e2:87:29:f7:83:68:96:5c:93:3b:85:c5:ab:
                    3f:9c:e0:bf:0e:d5:e0:97:72:45:8a:23:43:5c:90:
                    19:b0:10:45:d2:3b:69:18:db:7f:c3:3e:d6:06:f0:
                    c3:70:9d:41:57:bc:7f:ce:e7:e6:6a:7a:a8:cf:13:
                    54:e3:a1:8d:6a:51:bd:8e:6e:a7:15:4c:f1:ac:5c:
                    12:14:b8:d6:e6:ce:1d:12:39:e1:82:db:8a:6c:1a:
                    02:b6:c2:0f:a0:85:b1:a7:46:88:a6:8e:20:d4:81:
                    88:00:3e:9e:9c:a4:82:ed:20:03:d4:a7:7f:20:79:
                    37:a7:a0:5e:24:37:5a:ac:37:af:49:f3:e5:7b:c4:
                    60:19:f4:80:b6:e9:d7:81:04:0f:75:a4:bf:d1:2f:
                    5a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C3:03:BE:6D:A9:F5:30:EF:00:14:3F:1B:D6:2B:9A:F1:3A:F0:70
            X509v3 Authority Key Identifier:
                keyid:4D:98:FE:50:2A:C1:6E:95:7C:C3:3E:BC:2E:C1:BE:83:BB:ED:7C:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZj-UCrBbpV8wz68LsG-g7vtfMQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/09da87-a2b2-429b-be96-cd009b300a6c/1/TZj-UCrBbpV8wz68LsG-g7vtfMQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:73:e1:c4:f1:56:e3:03:03:f3:cd:9e:76:b6:fd:7d:c8:89:
         a2:57:77:e6:de:b8:07:af:15:38:5d:9e:82:94:5e:a0:83:c3:
         0a:86:68:3d:85:5b:1e:f5:aa:4f:b7:36:a5:2f:79:20:03:06:
         2c:d8:0f:ed:e4:16:31:27:e0:38:e4:4b:3a:2c:5f:17:a0:c6:
         ce:ef:95:ab:d3:1d:57:fb:1b:52:f0:2c:30:66:b6:3e:5c:4e:
         3b:29:a5:a7:32:a9:af:ce:9e:9a:a6:c4:84:ca:53:00:f3:d7:
         e9:4f:5c:28:21:77:33:d2:e8:d0:13:d1:33:b1:1f:16:22:45:
         7e:f8:cc:ee:56:0e:a1:06:20:55:5a:1b:95:06:59:c3:07:eb:
         d2:5c:d7:2d:7e:a1:15:09:22:59:69:13:8d:d9:4b:36:26:57:
         6f:f5:71:85:15:57:b3:d5:69:0d:2e:93:15:c3:66:6e:a8:91:
         4e:85:c0:d0:24:43:c3:f4:21:43:19:54:ca:1e:ea:71:6d:78:
         46:c5:80:ce:dd:89:6f:57:4b:7f:0d:84:19:3c:6f:2d:99:e6:
         35:ac:c8:e4:90:49:98:ce:88:f8:ff:e9:b9:77:08:bd:8d:16:
         2d:d5:01:aa:3c:ee:bc:56:cb:60:2d:35:0a:bb:39:e1:7f:48:
         87:54:4f:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----