Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
File:                     tNftFLjVGiC67HtmDwioDNz4F78.mft (raw, json)
Hash identifier:          oT6jQMlVO8X5q8Gou4dqfdadetJZUnflUfHoH5Na0tw=
Subject key identifier:   27:9A:4D:90:20:49:B9:3A:7B:88:0F:54:21:B8:0C:EB:81:22:04:39
Authority key identifier: B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
Certificate issuer:       /CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Certificate serial:       01962DF40B33B958772FB466C9B9231E75CB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
Manifest number:          144A
Signing time:             Sun 13 Apr 2025 07:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:30 +0000
Files and hashes:         1: VhTYh9Iw5PVI--2GM6MQuLQlHfw.roa (hash: 4Hkp0WmvBYBS95p1FHn/M3/EZ2GIH50SPjU4ACziYZE=)
                          2: YVY9twtvMqgJ8wFpvv3lKZVmEkQ.roa (hash: 17qlPl9D+uyL5rzeTz5pj3TELME7ziHzDZ+/fRR9Vec=)
                          3: tNftFLjVGiC67HtmDwioDNz4F78.crl (hash: ZjAL4TmDfg+u0Qa61hooIjSO+qka+s1B2CFuMk2HnNc=)
                          4: y_HvmHHGVlKjcbTPtfwbbemE9ts.roa (hash: 8SIoZagJaVQOy82S0A9ugj7Iv6sEqZZHPMha1KNQ3uM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0b:33:b9:58:77:2f:b4:66:c9:b9:23:1e:75:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
        Validity
            Not Before: Apr 13 07:01:30 2025 GMT
            Not After : Apr 14 07:01:30 2025 GMT
        Subject: CN=279a4d902049b93a7b880f5421b80ceb81220439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:07:cf:47:bb:4f:50:43:49:c9:e2:17:f7:5d:
                    5c:9b:f0:39:e8:75:a7:82:d4:1b:5a:5b:08:2d:da:
                    aa:51:fa:1b:83:49:52:4c:83:2b:50:19:eb:47:7e:
                    f0:d1:a0:99:49:a8:9f:aa:f3:26:dc:a2:ea:2d:e6:
                    59:fe:d3:be:ac:77:55:de:ee:e4:55:c6:1c:89:07:
                    86:f7:55:06:38:1c:36:1f:aa:40:32:ac:75:07:1a:
                    47:8a:90:f0:7b:ae:f6:f6:71:6f:c7:ef:7a:9e:89:
                    b8:05:7f:1e:54:7d:88:1d:53:1f:ad:d6:f4:04:3e:
                    43:c3:af:ad:92:42:65:d0:ff:50:2e:6b:a8:ac:52:
                    a9:b8:1f:77:e7:58:f1:13:99:7a:a6:7d:26:56:7d:
                    e4:69:d2:4e:39:ab:8b:25:b6:21:3d:cd:97:10:e6:
                    ca:8f:81:55:c8:d7:e0:df:9f:fe:b7:bd:ec:c4:e9:
                    b6:1b:cd:00:e4:60:47:ac:08:04:e2:9a:7f:cb:38:
                    b3:50:63:fc:05:83:58:cb:0e:a2:e8:24:8b:34:0c:
                    32:2d:e8:62:b7:03:d8:d4:e2:7a:a6:0c:af:b7:0c:
                    77:2f:70:1b:84:9d:a1:83:e7:5b:08:21:91:a5:5d:
                    79:44:a9:80:e0:87:97:ab:4e:70:e7:db:08:2a:32:
                    60:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:9A:4D:90:20:49:B9:3A:7B:88:0F:54:21:B8:0C:EB:81:22:04:39
            X509v3 Authority Key Identifier:
                keyid:B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:34:2c:16:48:65:d2:dd:7c:72:96:b0:16:f1:bc:3a:9a:55:
         17:5f:5d:9b:70:3e:90:94:07:1e:68:55:7c:5a:1a:ef:98:bb:
         ed:1f:4f:3a:3e:83:74:46:b6:f7:37:9c:7b:e6:53:53:e6:c2:
         a2:17:49:f2:cf:0e:9f:c0:96:cd:6a:32:46:29:c0:44:98:82:
         c8:1f:5d:64:c7:71:57:c9:87:a9:96:ee:33:48:5e:49:01:fd:
         23:95:5d:c3:aa:4c:cc:7b:52:48:e7:4c:ea:ef:40:90:f2:f9:
         24:5e:55:d2:26:0f:49:48:dd:04:b0:fc:19:00:e2:cb:b6:94:
         f1:53:54:dd:d7:e3:3a:4b:db:d3:44:99:5f:1c:34:50:7a:09:
         86:0f:7a:97:52:ab:09:d1:cd:5d:3b:28:89:40:4d:30:2b:f4:
         c1:e8:19:b5:a4:41:38:0c:81:58:e1:37:ae:ab:70:4d:ee:f8:
         54:d9:60:ea:93:11:4f:08:5b:64:0a:66:bb:1c:c4:65:c0:37:
         0e:b3:ce:37:b1:95:f8:b1:4f:38:9d:f9:a9:a4:29:f1:0d:0a:
         e5:09:30:47:f5:87:4a:28:ba:8d:9d:6c:cf:e2:63:ec:2b:71:
         a4:8e:3e:42:43:be:7e:5e:4a:14:92:07:f0:9e:2e:13:86:21:
         cb:0f:78:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----