Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
File:                     TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json)
Hash identifier:          flBFT1qca6E2YfY+YL3r3VfVtFFKyJKE485tP8KLw4g=
Subject key identifier:   45:BD:D2:AA:E4:A3:F6:8F:86:55:F0:0B:DE:F2:EB:F3:7E:22:7B:2E
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Certificate issuer:       /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial:       01962E98F98DB18FB5CF1D96585596A74955
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
Manifest number:          1340
Signing time:             Sun 13 Apr 2025 10:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:39 +0000
Files and hashes:         1: CEuXJrDVGtc7Z4aBHwivyFbJk6I.roa (hash: YlEuDFYK1ghHbSy2lJ7W4OAiAQ8b74GXZr4K2Q1Nk+o=)
                          2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: 6UDPFEfPGtXcd3RvQgGgMkyB/SLM0LOFeUb66ZzCi+g=)
                          3: zQYGnUVB4bBy-t9A3BsXP2JPTI8.roa (hash: yYhiUqDeYjOIAS1CW8QCSgxrWRWrSjdPUM0N7RvDxVg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:f9:8d:b1:8f:b5:cf:1d:96:58:55:96:a7:49:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
        Validity
            Not Before: Apr 13 10:01:39 2025 GMT
            Not After : Apr 14 10:01:39 2025 GMT
        Subject: CN=45bdd2aae4a3f68f8655f00bdef2ebf37e227b2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f8:92:8f:7c:09:02:8c:48:4d:b3:78:e6:49:
                    1a:54:4c:d1:42:38:9d:ee:0c:5d:8f:d8:bf:27:a6:
                    b7:4a:81:4d:37:b4:1a:74:dc:d2:55:b5:d6:c0:60:
                    bd:a1:26:b7:70:b8:e1:22:ee:0d:54:16:71:7e:5a:
                    f3:af:f1:d7:3d:ed:59:31:d9:bd:c8:e7:12:b1:18:
                    66:7a:50:fb:a5:fc:c6:e9:59:7d:89:86:e4:8d:cc:
                    e0:b1:0d:26:2b:25:6f:4a:92:a1:c4:3c:94:53:d6:
                    6d:c0:88:04:ce:ce:3c:52:ab:a9:fe:50:10:b4:72:
                    8e:af:d2:82:b1:06:8a:d3:67:0d:86:cc:ac:8b:61:
                    b3:48:36:cf:89:7e:c7:bb:e7:2c:76:a5:50:59:3a:
                    c2:b8:c7:28:44:2a:16:9b:7d:98:26:42:98:64:b0:
                    33:2e:e0:04:1d:4c:37:72:8e:73:d9:53:16:b1:ba:
                    7b:69:d9:de:9d:fc:ab:06:c3:03:2f:84:3f:de:2e:
                    04:6b:de:a6:ef:1c:59:4c:11:02:41:54:44:c2:8d:
                    bc:02:a6:f6:26:ec:97:f8:59:2b:83:c2:c2:e0:4c:
                    c3:55:f9:f4:d4:a8:41:e0:34:9d:30:6b:84:64:48:
                    8a:fb:ea:06:17:9e:b2:e8:c9:de:cc:f6:b3:22:b5:
                    a2:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BD:D2:AA:E4:A3:F6:8F:86:55:F0:0B:DE:F2:EB:F3:7E:22:7B:2E
            X509v3 Authority Key Identifier:
                keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:5d:3e:18:c7:c7:d7:8e:11:d3:17:97:84:c1:f4:9c:b5:51:
         dd:fc:26:54:4c:ca:9f:94:6e:9e:10:68:a2:f2:c8:ee:3e:e4:
         b4:8e:20:8f:95:ab:99:43:8c:dd:0f:66:09:27:4c:e1:db:d9:
         89:e8:a1:40:30:6d:77:d6:1e:a8:3b:4e:82:35:17:d1:04:5a:
         66:81:e1:4d:59:23:43:1b:be:7f:97:1c:51:99:6c:01:bb:61:
         0b:67:05:ed:36:d4:a7:e1:e8:1c:4c:48:9c:c1:2c:7f:31:70:
         a1:f2:90:5f:43:17:66:8b:19:fb:28:1b:bd:b7:62:19:ed:5a:
         37:43:b4:fe:8e:a6:ba:ce:8f:51:af:5f:2e:19:2d:87:3e:8a:
         e9:14:03:98:2b:62:d0:c9:71:73:eb:c2:5e:6f:fd:da:00:1a:
         84:f7:9b:6d:7d:dc:ce:1b:b8:bb:a2:c8:7c:20:21:59:d2:46:
         c0:88:fd:21:1e:8f:e8:92:12:9d:f1:3e:c2:56:63:84:bf:42:
         e1:68:ea:33:65:b1:20:e6:4b:4f:db:01:ec:b5:e0:8d:b7:32:
         d0:79:1a:8f:49:2d:76:20:ba:7b:3c:42:b6:e1:e0:5e:c0:0a:
         18:25:27:a8:98:99:54:21:92:e3:d7:97:bf:c4:8e:cc:03:9b:
         3b:7f:d2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----