Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
File:                     tWyxebPbXGs2zTMINAgB_tsrfRk.mft (raw, json)
Hash identifier:          iz3rMclae0DTyM0qWn92gUqjwo3dH/QC3U+nY1nBWYU=
Subject key identifier:   75:49:DF:5C:E9:CF:75:52:93:4C:D4:48:EA:9D:63:D3:D4:E7:2D:3D
Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
Certificate issuer:       /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Certificate serial:       01962F07132B14A44A65679FE44B14CEF2EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:54 +0000
Files and hashes:         1: egERklG4JDoNVaiZcO7pQtm8HwI.roa (hash: UCPCOxDDKaXVSI1SbOM7CcRIC7mRuotxlKVUCRUv8VQ=)
                          2: tWyxebPbXGs2zTMINAgB_tsrfRk.crl (hash: +pwyF1jH5pSickhPVCY4tRWswkDD++oAuvX1gz8VwB8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:13:2b:14:a4:4a:65:67:9f:e4:4b:14:ce:f2:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
        Validity
            Not Before: Apr 13 12:01:54 2025 GMT
            Not After : Apr 14 12:01:54 2025 GMT
        Subject: CN=7549df5ce9cf7552934cd448ea9d63d3d4e72d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:62:9a:3b:dc:34:70:81:3a:b7:b4:85:e0:32:
                    cd:0c:bd:cc:36:e5:56:2f:50:71:53:08:d9:b1:b6:
                    84:9d:28:cf:46:46:38:7d:8e:80:31:8c:89:a4:18:
                    f7:78:62:8d:8c:a4:d5:f8:2c:ea:26:16:79:1c:c9:
                    3e:19:35:e1:73:4e:82:53:0f:6b:31:e3:12:bd:13:
                    9e:22:f4:4b:23:8d:99:e2:7c:87:ad:b9:5a:5c:5e:
                    68:53:26:90:1e:45:a5:99:c4:4b:84:34:ea:d9:6c:
                    69:21:77:7f:f5:31:b9:c5:bd:45:a0:be:ce:5c:48:
                    0b:d6:fd:7e:e6:d6:2d:31:5b:4a:9a:d3:27:aa:e8:
                    ec:80:b9:ba:48:9d:f3:8e:47:41:90:be:31:c0:67:
                    c1:e5:0d:72:d2:6e:bb:a3:a4:1a:09:85:d3:73:47:
                    62:e1:00:ad:7d:67:c3:a1:d3:bf:97:32:6b:5b:f7:
                    ad:bc:8e:2d:1d:0e:8a:e9:e9:56:71:ea:6b:20:db:
                    03:cc:9c:c5:39:c4:32:9e:5c:1f:fd:74:67:af:cc:
                    08:9b:8d:f1:65:0d:0b:55:9a:0d:39:63:e7:e7:46:
                    e7:d0:7b:ce:16:de:3d:2d:b0:18:68:af:e1:fa:c6:
                    d8:2d:6e:ad:fb:f9:b6:0e:48:2e:1c:0e:f9:b9:36:
                    68:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:49:DF:5C:E9:CF:75:52:93:4C:D4:48:EA:9D:63:D3:D4:E7:2D:3D
            X509v3 Authority Key Identifier:
                keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:44:4d:02:25:61:44:59:c8:67:00:a9:19:01:17:dd:f3:4d:
         d3:cd:67:76:8d:25:bf:12:06:91:85:33:f9:84:2d:35:46:a3:
         d3:ce:3e:39:b4:96:b8:83:94:ba:90:67:fc:31:7e:7f:9a:48:
         3b:15:21:cf:92:3d:4a:c3:6c:7e:04:5a:b1:74:86:86:62:87:
         2a:8f:ac:40:45:18:63:a8:d2:51:33:50:f9:19:f3:32:20:fd:
         0b:70:d0:b7:a5:89:e9:ec:fc:e8:dc:92:81:89:26:ad:01:8e:
         2e:dc:72:3c:0a:2d:81:7a:93:6b:d4:ed:d4:8e:00:96:f6:b1:
         72:27:40:77:59:b4:1e:be:d7:50:cf:f6:5b:93:b8:ba:83:9e:
         97:ce:3a:66:ae:fd:95:0c:3d:c0:68:99:4a:d5:e4:1f:13:2f:
         b3:04:d4:6d:82:ca:52:67:38:97:99:7b:48:61:78:84:ce:48:
         da:89:38:1b:87:94:9c:cf:98:7a:67:06:0b:10:86:3a:6c:7b:
         70:cb:1d:f9:25:f0:db:aa:cb:00:bd:5f:92:30:8d:58:5c:99:
         6c:24:a1:52:8e:ed:f8:83:ec:60:85:60:81:80:55:c5:79:43:
         7e:7f:53:45:ca:4b:b6:62:5c:45:ca:66:06:b6:22:5d:3b:15:
         1f:b4:55:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----