Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
File:                     tGasCkklUoPNUwZpcc17Pf4qPOg.mft (raw, json)
Hash identifier:          49CrVNpmrlpnrMxYmzqu+EbRuwMvju3nvYEWCeBiphk=
Subject key identifier:   97:D8:69:59:CF:18:50:4B:61:74:EA:E0:6A:A2:04:B3:9E:27:B0:5B
Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
Certificate issuer:       /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Certificate serial:       01962E618E8F3856B28DCB198FB7EE17301A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
Manifest number:          1432
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: doq0g_q616KoQiCYhBpjnY3GXAI.roa (hash: 2NaVQRnf2IQ50I0pWc2BZKlLLETET7Nu4U+ng9RipiU=)
                          2: tGasCkklUoPNUwZpcc17Pf4qPOg.crl (hash: g+JMKIaJD4uuAODziKwA9K2IrTfqsGAfdTqr7XsYI+A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8e:8f:38:56:b2:8d:cb:19:8f:b7:ee:17:30:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=97d86959cf18504b6174eae06aa204b39e27b05b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:36:0a:8d:a8:7d:e3:b6:2e:32:eb:1b:32:13:
                    cb:83:1b:a2:33:11:89:c1:29:f1:fb:8a:6e:ee:4b:
                    b9:b9:5b:76:3f:99:63:4d:47:9c:29:bb:3b:ab:af:
                    1f:c3:32:1c:e3:26:b5:28:78:c7:53:01:19:73:f6:
                    a6:60:dd:8d:35:54:53:e3:30:23:e9:39:b4:81:22:
                    66:5c:34:e1:4b:9b:77:2f:41:85:be:84:8a:9f:25:
                    d8:a3:29:45:4f:23:6c:a8:69:e2:03:76:a1:bc:f9:
                    e3:be:b2:61:8f:ce:e1:94:a5:df:0e:28:ff:a3:1e:
                    81:e4:ba:12:ad:2d:43:64:7d:69:d4:96:15:99:73:
                    df:db:e3:d0:b7:cc:ce:f2:eb:3c:88:05:d4:f9:0c:
                    ba:e0:87:a3:6d:09:bd:fa:b9:99:dc:ef:c4:f8:4c:
                    bf:51:c8:bf:31:77:0c:74:3b:f5:b0:d6:d9:51:ce:
                    2a:e4:b9:59:ff:f2:fe:0d:02:9c:b6:b5:b4:c4:f3:
                    7c:f3:83:4a:5f:3d:80:a6:b5:c7:d1:4c:3f:07:78:
                    f7:ec:5c:38:2d:e3:b2:4a:26:73:34:20:66:a4:aa:
                    f7:48:13:57:8a:ea:a5:c4:ae:94:74:a4:33:82:ae:
                    8e:b7:99:e2:20:3b:06:27:a4:c8:00:c3:5e:f9:af:
                    d3:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D8:69:59:CF:18:50:4B:61:74:EA:E0:6A:A2:04:B3:9E:27:B0:5B
            X509v3 Authority Key Identifier:
                keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:4c:77:4e:c1:8b:c6:ea:7c:6d:23:46:dc:38:9e:a6:8f:94:
         96:05:ec:57:47:58:22:a1:2e:5b:7c:9d:be:1b:53:c7:c4:ac:
         e6:12:73:ce:67:94:04:c4:10:e3:28:49:2e:f4:ed:cd:d9:c9:
         56:e3:91:23:66:09:e8:d2:c0:11:aa:86:dd:90:33:93:20:93:
         a2:4e:04:7d:8f:d0:0b:ee:b3:5e:90:13:3d:31:67:0b:c6:6a:
         6d:56:b2:48:9c:51:5c:a4:52:a4:20:34:11:ff:d9:36:89:88:
         3d:56:a6:03:35:ac:2f:33:42:ed:81:f8:e8:02:b9:1b:58:a2:
         95:03:a7:71:43:36:db:2b:56:78:c1:54:0b:64:11:a3:cd:96:
         ee:6f:74:e4:98:96:ee:bd:21:2f:71:17:cc:9f:ba:42:08:91:
         1d:86:72:a4:a4:88:05:90:d0:b7:0c:22:ad:eb:58:fc:f2:79:
         21:e8:ba:38:2a:ed:e2:da:7c:1a:96:5d:bf:30:57:06:91:94:
         e4:ae:28:76:0a:f4:22:54:2d:da:26:f4:02:45:df:e7:d2:53:
         a7:08:04:f5:a4:8b:2d:49:88:25:34:af:d9:95:20:20:97:c6:
         d4:a5:e7:d9:7e:41:b8:c3:7d:5d:98:7c:b7:5d:c4:aa:d6:3e:
         16:b4:2e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----