Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
File:                     TlyvXlSV9UsDnx0PJHERJGfJeRw.mft (raw, json)
Hash identifier:          yFCv6m/gahgbFZebsSnFqvkLiVqD365tp6FQsEphicQ=
Subject key identifier:   9B:9E:73:4B:0B:CC:85:CC:EA:AE:9D:C6:04:B9:7C:72:4F:86:25:6F
Authority key identifier: 4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C
Certificate issuer:       /CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
Certificate serial:       01962E2B312D00547ACC53A51708B2BA31CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 08:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:44 +0000
Files and hashes:         1: Sjk-hMVz5Yq15653m82LHzN2q2c.roa (hash: v2IafRkq9Sg922Tj4NY8dbGZtPOD35/xpm6wAYKPODI=)
                          2: TlyvXlSV9UsDnx0PJHERJGfJeRw.crl (hash: w7m7H9UyihxeRKCb54EMNj9PvECTxLOCBwQ7AsTATgo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:31:2d:00:54:7a:cc:53:a5:17:08:b2:ba:31:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
        Validity
            Not Before: Apr 13 08:01:44 2025 GMT
            Not After : Apr 14 08:01:44 2025 GMT
        Subject: CN=9b9e734b0bcc85cceaae9dc604b97c724f86256f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:63:8e:f3:bd:06:f5:87:3c:69:4d:a6:69:03:
                    92:d3:34:4d:ed:cd:95:9f:8e:95:af:34:e0:b7:31:
                    71:18:ae:36:04:64:77:da:99:71:c9:48:ad:7d:fb:
                    5d:c7:21:5d:e3:3a:c9:0b:bc:65:9c:51:54:54:a9:
                    22:34:1d:e6:42:49:d5:ae:46:7b:02:00:81:1f:1d:
                    e3:fb:77:52:8b:b4:b4:a3:75:46:15:6f:d7:26:9b:
                    a8:4d:24:ac:98:f0:72:6a:50:54:e0:f6:b4:5b:18:
                    37:cd:57:8c:9d:62:3a:42:c9:52:ca:80:53:48:03:
                    e3:24:29:7a:81:af:d7:b3:9d:26:d8:f1:c9:a9:2f:
                    6b:45:bf:11:e0:3a:f2:11:99:a4:af:2b:1c:0e:6d:
                    12:ec:c0:6d:15:1d:d7:fe:1d:b6:ed:95:6c:58:93:
                    4a:10:6d:81:d0:4b:06:25:6d:49:b4:06:07:26:a4:
                    5d:92:f6:3e:14:97:85:7e:a5:bc:33:58:d8:8d:9e:
                    b5:53:db:a9:24:36:73:5c:8a:13:21:fb:5f:e3:8a:
                    53:0b:4a:4b:eb:77:4d:90:7a:b0:58:d6:14:30:d6:
                    ea:a0:17:e3:f9:9d:30:13:3e:ac:51:96:68:ea:95:
                    fc:2d:0b:03:00:33:72:85:a8:8b:bc:ae:6b:9a:f1:
                    c6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9E:73:4B:0B:CC:85:CC:EA:AE:9D:C6:04:B9:7C:72:4F:86:25:6F
            X509v3 Authority Key Identifier:
                keyid:4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:6c:28:6d:e0:2d:fb:93:34:31:77:7b:97:72:6d:48:f2:6f:
         b5:8a:17:de:83:f9:5a:00:26:30:6d:9f:ff:24:fa:4d:9b:b9:
         83:33:d5:11:37:ab:f1:13:09:41:7e:3e:b8:f1:f0:4c:68:ad:
         82:45:2c:fd:31:67:1d:a3:05:60:67:13:dc:47:5d:a7:a8:79:
         35:25:f9:4d:a6:f4:c1:77:b3:93:09:4c:14:85:bc:1e:de:af:
         2f:a4:3d:fe:fd:eb:0d:1c:1b:d8:77:21:cf:56:ef:74:8e:09:
         e7:08:ca:f7:33:c6:07:1f:f8:4f:1a:c0:a0:c4:0e:fd:df:de:
         e0:bd:aa:c9:76:f3:01:09:06:94:a3:9d:87:03:63:c6:b6:3c:
         f8:17:c7:fc:68:b7:71:33:85:a1:29:f8:98:42:8c:7e:24:ed:
         59:d7:8a:e6:41:38:ca:b3:da:74:36:93:1b:44:06:8f:f3:43:
         f9:07:ef:bc:cc:aa:f5:db:79:c7:01:65:53:d6:b9:cf:86:5a:
         05:b0:be:02:56:81:e9:ee:98:9b:4f:e8:33:71:55:df:3d:c3:
         b0:4e:c4:27:da:4c:5f:d4:7d:77:8e:d9:03:66:16:bc:c6:b9:
         42:4c:f5:94:12:0e:1d:3b:55:4e:52:e2:9a:46:99:d1:2c:d3:
         5c:ec:74:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----