Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
File:                     tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft (raw, json)
Hash identifier:          t+EsIFXXfCbAGKy/byAkIeOJNf/C4FdeFF0JdQKlFPc=
Subject key identifier:   04:B5:78:37:91:D5:92:BE:64:A6:54:1C:17:80:68:9C:BC:69:65:62
Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
Certificate issuer:       /CN=b53b0a45f060e10eccf126b6f667589b80328c95
Certificate serial:       01962FAB522848A3484C3C7B3B93AC7606DD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft
Manifest number:          0EE6
Signing time:             Sun 13 Apr 2025 15:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:18 +0000
Files and hashes:         1: QmuYhMxVHMJMwyzvnCygHs-m3Zo.roa (hash: /n3/bE2lrLZKCXuOWQR91nGS2U+GVup7q9CGUuChZsQ=)
                          2: tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl (hash: ISB7Ix1sEOt6BFIy9+RMeVpq1FZcOX95ZHSUWspMLLA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:52:28:48:a3:48:4c:3c:7b:3b:93:ac:76:06:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95
        Validity
            Not Before: Apr 13 15:01:18 2025 GMT
            Not After : Apr 14 15:01:18 2025 GMT
        Subject: CN=04b5783791d592be64a6541c1780689cbc696562
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bf:43:e0:ab:dd:d6:38:61:26:dc:f4:3e:91:
                    27:a3:f3:61:22:be:ac:6f:78:86:47:98:c6:ac:13:
                    a0:2d:a6:c2:ff:9e:4b:92:45:66:52:af:da:fd:82:
                    14:b4:86:7b:e2:ef:d3:11:b6:2b:f5:62:4b:76:b0:
                    45:cd:fa:3d:af:26:38:98:cd:81:0e:bf:d5:d4:7e:
                    96:6e:02:b2:8d:be:7b:05:9b:b0:b7:77:e9:fb:f7:
                    38:bf:c2:dc:c5:ec:fc:4b:f3:4c:50:f1:51:91:95:
                    ba:72:56:1f:c3:50:d3:65:a1:9d:b8:61:28:e4:af:
                    aa:aa:52:b7:64:a8:d9:06:d1:90:e6:1c:f5:80:77:
                    6c:2a:ef:01:f9:f4:f4:24:ea:68:b6:33:4c:7c:03:
                    6a:d2:29:26:cd:a1:4e:57:69:45:90:eb:4b:16:ee:
                    aa:07:84:fa:94:1d:c0:55:be:58:f1:ca:b0:0b:9d:
                    59:5e:fb:d9:7d:2a:b0:a7:8d:6c:a5:d0:82:2c:00:
                    6f:3e:18:9a:a8:3b:a8:c7:97:b0:98:76:e2:16:dc:
                    49:d3:1f:c3:34:5e:8b:b9:64:d7:80:92:89:c4:de:
                    d1:24:b1:06:2c:33:92:cc:0b:d0:45:6a:e7:b5:bf:
                    cb:40:32:53:08:d5:ac:4d:29:47:d2:ca:b1:70:2e:
                    c5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B5:78:37:91:D5:92:BE:64:A6:54:1C:17:80:68:9C:BC:69:65:62
            X509v3 Authority Key Identifier:
                keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:66:6f:8a:ad:b3:f6:ef:a9:4c:27:d1:30:2e:65:5f:f1:9b:
         25:e4:b3:3f:77:7e:a2:61:d9:c4:85:a5:74:49:84:37:9f:dd:
         91:5e:9f:0a:d6:6b:cd:88:63:ae:9c:10:5f:b4:11:b6:3a:5e:
         cf:3c:a7:8a:59:c1:e6:9a:fb:1e:b6:6a:f1:5a:de:db:ae:92:
         b0:a4:9e:06:06:3d:49:c6:04:3d:54:8f:60:a3:49:e2:c7:bc:
         04:2e:7b:87:4b:8b:ff:ca:56:da:24:1e:13:c5:04:b9:09:9b:
         b4:01:80:37:3f:45:a1:fa:89:95:97:d7:cc:e4:2d:48:34:c0:
         d6:81:57:0d:8b:58:8b:01:1f:07:d0:f9:09:00:61:c1:33:9b:
         04:18:33:de:76:82:a9:56:75:ce:4e:ac:6f:b4:b9:4e:74:dc:
         15:7a:90:10:59:ef:d1:46:fc:e3:0c:cd:55:9a:bf:a2:c0:92:
         96:49:a1:3d:fd:ab:72:3f:99:24:58:d3:79:cf:ec:6a:85:93:
         c1:1b:0d:05:f3:96:0f:45:83:12:1e:02:01:f9:24:c0:18:75:
         02:2d:af:7b:76:7b:97:92:98:0b:2e:2f:56:a0:28:d0:09:2c:
         08:12:14:68:dd:1c:25:3c:f8:2d:a2:76:4b:24:2c:32:31:2a:
         dd:d9:55:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----