Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
File:                     TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft (raw, json)
Hash identifier:          QmAzKoLX4Od8EjkfLzlEO90Yp/0vvEEChWvHfOUYX0Q=
Subject key identifier:   0A:1F:75:20:01:20:C8:07:F4:AA:82:A2:76:37:B6:65:C4:DF:DD:6F
Authority key identifier: 4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC
Certificate issuer:       /CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
Certificate serial:       01962E989515E6D580C58BC22B6B09FE3E12
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft
Manifest number:          04A9
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: 4m_ZlqWE1YEBP4kWtbELic7ECzg.roa (hash: t8PO7dqvDfBV4dwcfBXHsLynSbU2oXoJqnNbzqZG81g=)
                          2: TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl (hash: Lqd3kVoBvdb3Xo/QFsI+BlF8k8EVgkAKUigYZ6YU1Lk=)
                          3: risExVobQciJpjckh7R5a6pHayQ.roa (hash: smtSJjRXs0E72dzCfhCCARBzkZPKWKCqhHgp8E/C6HY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:95:15:e6:d5:80:c5:8b:c2:2b:6b:09:fe:3e:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4df1811f3997b950ac89e410ea3ef018a673d5fc
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=0a1f75200120c807f4aa82a27637b665c4dfdd6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d3:a1:d1:35:ca:92:98:25:b1:1e:0e:19:a5:
                    e4:31:b5:ee:c7:4d:ad:0c:c3:4a:b1:e0:4b:0e:53:
                    5d:9a:11:24:52:c4:96:58:49:be:dd:55:0d:57:60:
                    3a:4b:69:cf:4d:5c:ef:06:12:2f:95:38:9e:46:95:
                    27:20:2c:73:e5:fd:ce:02:1e:95:fc:4b:48:23:bc:
                    1a:98:d1:58:be:17:37:60:74:25:71:e9:3f:b1:f3:
                    71:4d:b0:98:1a:2c:33:fa:eb:40:33:75:61:e0:12:
                    40:29:31:53:de:6b:55:db:d8:64:25:c1:f9:04:f8:
                    db:a0:be:00:4e:c7:21:c2:84:dc:6f:da:09:06:ae:
                    f1:fd:e2:f8:8a:de:e1:3d:a7:0c:26:7d:bd:9d:f9:
                    d4:1b:ec:ee:9f:af:f7:42:d5:e8:d4:e7:0e:90:e5:
                    c8:2d:e8:ca:d9:8d:16:01:af:72:3e:bc:af:e1:ec:
                    9c:f4:d4:7d:5a:f7:f3:c3:77:11:35:98:24:61:d9:
                    49:9b:05:77:43:cb:ac:b2:cd:16:c3:01:98:fa:c2:
                    35:1f:60:8f:cc:cf:92:32:d1:fd:46:f2:67:da:05:
                    60:e6:12:c3:20:dd:0a:60:75:0b:db:52:90:ba:9a:
                    ac:a0:27:70:4b:eb:ee:18:ab:e7:d3:35:04:fb:be:
                    00:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:1F:75:20:01:20:C8:07:F4:AA:82:A2:76:37:B6:65:C4:DF:DD:6F
            X509v3 Authority Key Identifier:
                keyid:4D:F1:81:1F:39:97:B9:50:AC:89:E4:10:EA:3E:F0:18:A6:73:D5:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfGBHzmXuVCsieQQ6j7wGKZz1fw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3fe931-7dd6-443b-aade-d9a61937a1e5/1/TfGBHzmXuVCsieQQ6j7wGKZz1fw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:bd:01:10:3d:13:74:01:16:a8:bb:28:f1:ad:ff:f9:fc:e7:
         85:81:7f:45:b5:75:fc:2a:51:93:d2:9c:c3:c4:ed:d8:41:ed:
         8a:83:76:cf:b3:65:14:9c:1f:e3:49:b8:97:5c:c1:db:fa:d2:
         de:e4:d1:66:1c:7f:19:74:88:cc:2b:52:df:b2:e8:a3:ba:a0:
         1d:a7:80:38:88:c5:1c:e2:0d:8f:45:29:fe:a3:a0:61:c0:d2:
         69:84:77:a8:69:ed:2d:10:99:cb:99:94:44:e0:b7:6c:0c:22:
         cf:a0:9d:8e:48:47:22:6b:f7:6d:b5:60:e1:51:96:b6:e9:af:
         1e:03:fa:87:9d:a9:fb:a5:a3:81:28:0b:07:8d:62:29:37:cc:
         ae:62:7c:f8:4c:6a:fe:32:da:1c:fe:d5:31:be:8d:3b:df:62:
         d6:be:87:24:8c:d0:64:e8:0e:70:69:0e:05:bc:5d:57:22:b3:
         19:2a:15:e9:aa:51:60:43:53:e9:3a:0a:d7:98:d8:ca:7a:04:
         af:8f:a1:a7:f2:2f:d1:c2:63:d6:f7:42:a5:37:c7:55:a4:0e:
         27:40:a1:ca:f7:22:bb:38:0a:45:f6:7a:9e:15:68:03:ea:cb:
         3c:55:75:46:26:84:e1:3c:03:4f:0f:eb:f6:0e:1a:e1:e2:76:
         57:8e:9a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----