Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
File:                     TXfM16lEFd_GjMyodOlMLowiIC0.mft (raw, json)
Hash identifier:          T07EuhHBzqaqwl1WgzIvu4wl28o0N8JQ7H4wZzBesk4=
Subject key identifier:   72:87:12:44:7A:5D:2A:23:91:DF:0C:E8:A7:04:CD:B7:E2:8D:FD:34
Authority key identifier: 4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D
Certificate issuer:       /CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
Certificate serial:       01962ECFA7C4A514C400AD913C1B8E785EFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 11:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:22 +0000
Files and hashes:         1: JgzpPohbfVvMIcKTpIBaDGYyTbE.roa (hash: G+qmeF9FhBKU4LJ3ZbSw7iLKTabN9a1acVHHKbI2D6M=)
                          2: TXfM16lEFd_GjMyodOlMLowiIC0.crl (hash: XaJIHXQ5U/vYfnFGhLiZmDehHU0fZrRdL8Jclo8TCfo=)
                          3: WlzyMJALtky3UfCL3LeynZJn274.roa (hash: cFugyqePAm3Z5xloXfQbWqCEPWkm4mnJFuRR8A9Tn3Q=)
                          4: mn0eBW57NQIPiKHlN3VjBOCrBwM.roa (hash: Q9KukE1TFuxZdPyKM+3q4VKMJP4x9GkCYDXI40jMHbY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:a7:c4:a5:14:c4:00:ad:91:3c:1b:8e:78:5e:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d77ccd7a94415dfc68ccca874e94c2e8c22202d
        Validity
            Not Before: Apr 13 11:01:22 2025 GMT
            Not After : Apr 14 11:01:22 2025 GMT
        Subject: CN=728712447a5d2a2391df0ce8a704cdb7e28dfd34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:70:26:5e:59:97:47:a0:43:53:f9:6a:f4:b0:
                    da:93:e5:86:ec:60:21:2c:a3:3c:5e:0f:ac:13:9b:
                    e1:1d:40:bd:0f:1d:36:36:6a:82:af:fc:4d:ec:bf:
                    cf:56:b2:9f:99:ad:84:ef:21:13:9f:09:49:ba:40:
                    2e:ec:41:48:8e:19:c5:7d:a3:0f:00:07:64:e4:2c:
                    37:75:7c:32:bb:6c:2d:0e:6c:80:80:c9:1f:bd:ad:
                    fb:0d:fb:de:fd:e8:7f:f3:0c:34:a5:51:53:bf:c8:
                    ad:f9:d5:a3:e1:cd:bf:37:82:aa:18:cc:bc:c3:05:
                    1c:bc:38:11:d5:88:e7:8f:b7:4a:e2:61:0e:92:27:
                    9f:f9:2e:87:dc:1f:01:27:b0:73:76:95:ca:a4:46:
                    6f:c4:23:b4:52:e0:74:3b:f4:a0:82:ac:5f:7e:d3:
                    24:c4:15:f4:cc:54:d3:6a:24:7b:e2:36:76:c1:fd:
                    ca:cd:a4:66:61:0c:3b:4a:04:49:61:0c:58:cb:8c:
                    06:7a:34:47:23:21:e9:70:c1:2b:96:a5:b9:54:b8:
                    e4:ce:12:37:7c:12:3b:4b:13:95:9d:f4:d1:21:f4:
                    3e:2a:7e:5c:b1:82:3f:97:f3:fc:54:0c:72:36:13:
                    d8:35:11:3e:f8:2a:cf:d5:b1:1a:0e:3b:61:35:06:
                    9a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:87:12:44:7A:5D:2A:23:91:DF:0C:E8:A7:04:CD:B7:E2:8D:FD:34
            X509v3 Authority Key Identifier:
                keyid:4D:77:CC:D7:A9:44:15:DF:C6:8C:CC:A8:74:E9:4C:2E:8C:22:20:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TXfM16lEFd_GjMyodOlMLowiIC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/d608b8-501f-491f-a2f2-10e57f56a17a/1/TXfM16lEFd_GjMyodOlMLowiIC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:70:f9:e4:a5:9a:2f:bb:1e:1f:84:6b:b8:74:9c:d5:08:78:
         6f:3b:a0:af:9c:51:b9:7f:01:1a:fb:4b:71:ce:4f:10:a4:a7:
         a4:9a:6b:3f:06:db:b0:1b:b3:05:4a:21:92:6a:53:c0:89:93:
         77:c4:9e:17:c2:a8:d1:28:d5:29:d3:09:82:3f:7b:4c:4e:d1:
         49:23:8d:5d:59:d7:b6:b1:43:c0:f7:c3:d9:60:c4:cb:ea:5a:
         99:ce:4f:69:c7:8e:1f:56:40:97:9b:c0:8e:18:9d:c1:05:3a:
         33:c8:0d:e0:e8:bf:e1:1f:38:24:42:25:d9:c6:b3:f0:c0:a3:
         f3:bc:c0:b7:bf:cb:6d:76:dc:4a:9e:ec:bb:24:9a:50:d6:8e:
         07:a1:8e:2f:54:8d:9a:67:f3:5c:d2:4b:9a:bd:ba:3d:4d:81:
         f4:40:0e:2a:17:23:01:26:dc:99:c1:ec:77:e9:f2:29:1c:b8:
         87:98:56:ad:43:8b:14:04:ef:0b:66:26:56:8f:63:76:95:95:
         be:d7:39:e8:14:85:4d:da:0f:55:19:e8:3e:6a:3a:96:92:17:
         6e:62:36:17:6d:9d:b1:7c:35:fe:78:70:2b:18:86:fe:89:7b:
         bd:6e:6a:fd:5e:7d:b3:ea:d5:89:98:89:15:a7:47:74:3b:14:
         22:88:b7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----