Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
File:                     tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft (raw, json)
Hash identifier:          Eg2UT4c6nAvWV3q1IBYTrcYJzukSvpxWs6gj3Y1HfsU=
Subject key identifier:   24:B0:13:27:B1:63:77:B4:7B:42:A4:36:90:F8:F4:F3:E4:77:8D:E0
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Certificate issuer:       /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial:       01962F74D221477DBE7477C6D235F0ECA336
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
Manifest number:          14EF
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: m8jqf0t6bK4OvZVKVGnvFB0mdKA.roa (hash: 0ftdeq2I0Ls/OwARQ/FHezOkmfJrEt6ekfubL8KjG/I=)
                          2: sGGZndDmRMx-w7J8U5J6G3BFVOk.roa (hash: uF6jgyxh4ugT/l6V+mIZvN4IJ+X7IddAc7QQehPWZsY=)
                          3: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl (hash: JTV0zVS50tBuENU1hx9UBvLqMmENHmjIlZl76ke1JzI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d2:21:47:7d:be:74:77:c6:d2:35:f0:ec:a3:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=24b01327b16377b47b42a43690f8f4f3e4778de0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1d:76:33:82:63:d7:5e:ff:16:41:0f:58:83:
                    d0:c9:4a:4e:15:3e:0d:c6:e6:c1:fe:58:f0:fe:85:
                    62:b3:e2:a7:fb:2d:ee:8e:85:e7:eb:6d:14:f3:a8:
                    51:2a:56:d2:92:30:b3:de:d5:38:01:d5:17:10:6b:
                    6a:36:f3:53:f0:3d:ab:7b:a6:26:a6:6e:f4:c6:be:
                    a6:13:86:8c:ad:42:b1:e6:b7:db:1f:da:54:a1:46:
                    07:02:32:40:d3:3a:9f:8d:b5:e0:8a:45:47:9a:c6:
                    d8:e1:88:e4:ab:5e:04:4a:f6:6e:ea:1b:94:73:b7:
                    78:5e:2f:8d:4d:9f:17:3e:02:b9:e3:0a:8c:94:ec:
                    1e:6b:05:fa:75:bd:8c:e0:57:d3:f9:7d:0b:75:38:
                    6f:87:95:c2:18:b7:3f:d2:cd:ed:eb:de:4d:de:ab:
                    8f:57:d0:f1:51:b8:29:c7:81:20:a4:f6:7a:ca:8c:
                    93:e7:5b:be:39:89:5b:a9:b3:ce:c3:58:c1:1b:48:
                    a7:b3:76:c1:64:9e:c5:df:29:fd:a4:f7:4d:d0:82:
                    bc:a3:b1:ec:76:e9:29:da:6a:f6:e4:ed:4f:cc:7b:
                    f9:1c:7f:50:f2:d1:32:41:1e:f9:2e:fe:8f:9e:e9:
                    37:b6:5f:83:b2:1e:dc:21:aa:83:b4:9c:b1:48:3b:
                    d1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B0:13:27:B1:63:77:B4:7B:42:A4:36:90:F8:F4:F3:E4:77:8D:E0
            X509v3 Authority Key Identifier:
                keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:f4:54:88:5d:4f:c7:db:78:43:9b:18:4a:f1:ee:7b:31:bf:
         77:15:fb:4b:45:56:ee:83:c1:26:11:00:30:0b:ee:93:fc:06:
         2b:06:7c:c7:8e:bf:7a:e1:86:cb:f3:f9:19:f3:7f:ab:e7:ef:
         8f:66:f7:5a:8f:04:6e:98:3a:97:73:ee:5f:5d:3c:70:6b:81:
         6c:44:ec:0c:b9:de:88:de:10:6d:d4:31:21:f8:04:e4:d3:4b:
         a6:17:a4:a5:e2:69:59:5d:f8:46:77:05:05:65:7e:f4:32:18:
         71:22:06:55:39:4f:f6:e8:1f:03:b6:e8:67:94:3c:55:36:6c:
         22:be:5b:e7:f9:0b:7f:e8:1f:fd:d4:65:29:6f:e3:66:7a:bd:
         fc:bf:90:60:42:7f:60:de:66:64:53:7b:28:9c:5e:49:6a:22:
         b6:5f:93:31:de:9d:29:59:3e:76:be:3d:fe:4d:f3:9c:4b:dc:
         c7:8d:84:73:cc:79:b6:6b:a1:71:e7:e4:18:dd:a8:2b:c0:b0:
         b8:fb:f7:d9:2c:13:da:15:ed:b4:fd:f8:92:64:6e:dc:01:6e:
         1b:66:21:14:74:42:8d:8e:84:b0:7d:cd:15:69:e2:ac:6a:ae:
         a3:80:9b:b0:a3:3e:88:ee:c1:e1:c6:c2:48:75:4f:b1:9e:34:
         e1:09:a0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----