Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
File:                     ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft (raw, json)
Hash identifier:          uVUUylmStX8XqZUr61eqocHoqXcNluKIA4Wq+yKJshI=
Subject key identifier:   7F:5F:3B:4E:B0:E4:89:B2:BD:95:3E:46:74:50:CC:A1:F0:BB:3B:B2
Authority key identifier: 4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0
Certificate issuer:       /CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
Certificate serial:       01962FAB9F47040E917C8C9974A01ECC6DB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 15:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:38 +0000
Files and hashes:         1: ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl (hash: tl2LDlCVtOVXTsfVVfk61A6pa/SJa3MbRhhckHQBrd0=)
                          2: zYbNNn2pDjFT8gDS_6qFcvUdYos.roa (hash: 7AsdJdwMwtIuFiP9RKf61Dpwj0s/SnQWNIRFQ6k6zXM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:9f:47:04:0e:91:7c:8c:99:74:a0:1e:cc:6d:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e167ee5f8d2ac0d9cc0137b41912f181b0489b0
        Validity
            Not Before: Apr 13 15:01:38 2025 GMT
            Not After : Apr 14 15:01:38 2025 GMT
        Subject: CN=7f5f3b4eb0e489b2bd953e467450cca1f0bb3bb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:92:69:fb:9a:1c:a6:71:d9:dd:b3:d0:82:5e:
                    de:0f:72:f7:aa:d9:2f:a4:86:63:31:c3:78:a0:f7:
                    49:66:8e:53:0c:33:b0:0d:5c:03:6a:0e:c8:24:62:
                    75:bd:a5:ec:04:66:2c:54:e6:90:c9:f1:93:b4:54:
                    68:32:2f:83:88:59:38:be:71:0c:5f:14:13:58:ac:
                    cc:73:07:46:c7:40:c7:68:3e:3f:6c:5a:5c:da:a2:
                    7a:7a:09:89:19:b0:d1:dc:68:5f:d5:fc:3e:74:3c:
                    cd:9f:24:aa:29:e9:3f:36:36:85:26:16:82:20:cb:
                    8d:87:6d:94:9c:93:16:fa:03:24:e3:45:24:7c:b4:
                    93:25:ba:55:c4:52:71:f6:3b:58:25:b0:0c:de:aa:
                    a7:89:97:86:60:c1:c7:c2:96:56:7f:2b:97:e7:30:
                    2b:f7:8d:c3:f3:bd:ae:58:93:fc:42:b3:1f:a3:e1:
                    52:74:ec:52:59:a1:df:39:00:7e:a7:7a:37:24:83:
                    85:ba:ae:2a:aa:a2:bf:53:6f:bc:e6:7d:61:85:80:
                    40:a8:84:a2:99:ea:e7:9f:70:9e:96:72:1d:31:0e:
                    2f:49:61:79:13:e8:b1:04:8e:47:6d:9f:a6:71:2d:
                    26:ac:9f:0e:9e:f7:1f:b9:01:a2:cc:84:b4:1f:7b:
                    99:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5F:3B:4E:B0:E4:89:B2:BD:95:3E:46:74:50:CC:A1:F0:BB:3B:B2
            X509v3 Authority Key Identifier:
                keyid:4E:16:7E:E5:F8:D2:AC:0D:9C:C0:13:7B:41:91:2F:18:1B:04:89:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThZ-5fjSrA2cwBN7QZEvGBsEibA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/6e178e-9cbf-489e-aa3a-f662b0a65e8e/1/ThZ-5fjSrA2cwBN7QZEvGBsEibA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:a3:fa:2b:35:b9:db:17:ed:03:93:01:88:bd:fe:8e:14:fa:
         e2:e8:a5:73:e1:10:3c:83:fb:b4:84:87:6e:9f:f6:6a:49:fc:
         4b:69:87:b5:e9:b1:a7:c1:11:07:6e:9e:3d:f2:61:0b:a5:4d:
         90:44:08:ec:d2:a8:42:98:64:dd:89:7b:53:9d:74:0a:b0:de:
         18:c8:e6:27:41:a9:83:57:0c:a6:82:a6:a5:25:a7:c1:6d:44:
         b1:33:4d:a2:ee:a1:0d:ae:7a:a4:09:89:2c:97:fa:af:1c:49:
         71:81:44:f0:9e:16:9c:85:2c:f2:46:3c:3e:a3:05:a4:ae:d7:
         47:8b:1e:df:13:44:e3:c2:cd:b9:6d:b9:7f:7d:fa:20:9b:5b:
         07:5c:2e:bd:d5:8a:b7:ba:e3:bc:74:c2:ca:84:82:8e:e1:aa:
         59:4a:97:02:1b:1c:0e:a2:8c:f2:aa:99:61:15:28:ff:3f:f7:
         48:5a:93:b2:c8:3c:78:e1:65:51:ec:04:6f:05:44:9a:da:2e:
         58:f8:fd:64:ee:7e:39:1d:a7:0d:d3:d2:08:dd:34:76:bb:28:
         70:2f:69:aa:4f:e6:45:a2:bf:64:ea:14:f0:44:88:4c:38:b3:
         b2:c3:cb:04:93:1f:be:0a:a5:87:5c:fd:29:0c:7f:19:46:2e:
         6a:e3:5d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----