Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
File:                     TGD9CUHz0veinDVh5WMYbvd1oeU.mft (raw, json)
Hash identifier:          hKvL5PuXxs6+87HrZIW1j0XphRoN6kn0U3JVOC0hD4I=
Subject key identifier:   CA:6E:57:7F:04:85:A4:DF:58:56:49:A8:84:4F:E8:A4:A0:F1:22:AD
Authority key identifier: 4C:60:FD:09:41:F3:D2:F7:A2:9C:35:61:E5:63:18:6E:F7:75:A1:E5
Certificate issuer:       /CN=4c60fd0941f3d2f7a29c3561e563186ef775a1e5
Certificate serial:       01962FAB5541EF0FBFF3B7CDA871F9A420A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
Manifest number:          0497
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: InvlOQlXHysCNzw0ls55YDrBMiI.roa (hash: w/RbbXLN25pr436QWg9t/JqUqj+z8QTi6SAzMiRWMFM=)
                          2: TGD9CUHz0veinDVh5WMYbvd1oeU.crl (hash: nCG2CBTbc3PK4m45D2iPTBPBzXuHUMzDCBumqeZuPbE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:55:41:ef:0f:bf:f3:b7:cd:a8:71:f9:a4:20:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c60fd0941f3d2f7a29c3561e563186ef775a1e5
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=ca6e577f0485a4df585649a8844fe8a4a0f122ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:61:e1:78:3e:84:d2:43:3a:b8:ed:c9:1c:c7:
                    54:d6:ea:ff:3e:52:d4:8e:17:27:7b:ea:72:b3:e2:
                    f5:ad:60:46:20:dd:dd:31:13:9f:20:e8:7e:1e:51:
                    94:b8:5a:be:72:f2:0d:17:c3:d4:e0:05:cf:25:f2:
                    fc:1c:62:46:3f:ad:4e:8b:96:b6:18:7c:fa:09:82:
                    f6:a4:da:92:a7:c4:25:54:87:7c:fb:cd:1f:6c:27:
                    28:a8:bf:e0:b9:66:e1:37:61:ae:9c:17:18:8e:18:
                    b7:09:4b:5b:1c:4c:46:8c:16:78:d7:20:d8:43:b9:
                    1a:0b:9c:ea:8f:33:2c:9d:75:de:4f:77:2e:22:51:
                    1c:89:83:9b:c6:f9:da:8b:5a:c9:0d:58:28:75:76:
                    a2:99:70:87:aa:67:0c:f7:b0:b8:9e:3b:5c:c0:81:
                    40:cc:cd:a6:ad:42:56:71:b9:80:b8:84:d6:e2:ba:
                    aa:47:2c:81:16:b4:49:e3:43:e9:e6:4c:82:01:33:
                    14:58:dd:d9:18:63:ed:ce:ab:b5:be:c7:05:6d:7e:
                    f7:3b:9a:5c:b4:d1:73:c8:2f:be:09:a1:ba:1f:2a:
                    be:7a:e8:72:18:88:a2:96:96:4e:85:c5:b9:dd:3f:
                    60:f1:84:c5:7a:78:bc:88:83:68:56:60:c5:21:c8:
                    e5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6E:57:7F:04:85:A4:DF:58:56:49:A8:84:4F:E8:A4:A0:F1:22:AD
            X509v3 Authority Key Identifier:
                keyid:4C:60:FD:09:41:F3:D2:F7:A2:9C:35:61:E5:63:18:6E:F7:75:A1:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:ce:5a:3e:6e:a3:4e:21:73:b8:6e:b5:2b:57:57:af:0b:c3:
         93:45:c0:6d:24:95:2a:03:72:d1:4b:47:ea:ae:28:3b:99:5e:
         08:c0:46:cd:5f:c2:7d:34:d1:4a:3e:1f:8c:54:3c:2b:ac:5f:
         9b:c9:1b:66:a2:19:44:68:38:8a:ca:47:af:bf:2b:31:77:4b:
         a5:70:0d:72:e5:f4:28:aa:f8:da:65:9a:5c:da:ad:de:34:2e:
         35:ac:e4:66:2c:c9:7f:fa:ac:c2:32:24:c5:ce:6f:95:99:83:
         c9:5f:ed:52:c2:24:dc:ac:88:8a:3d:e2:65:a8:30:1b:88:a1:
         75:05:2e:5a:d4:67:d7:a2:44:45:db:9a:62:49:55:d8:75:0e:
         20:9f:45:55:88:88:2e:91:48:9e:b8:af:2a:16:5a:a9:a8:24:
         c9:01:49:3b:0b:ef:91:9b:ce:be:6e:2b:46:be:92:1c:7b:b2:
         56:6e:73:cf:0a:3a:6c:6a:f4:0f:d3:52:4f:b1:89:3d:61:59:
         00:ae:1f:99:5c:c3:33:98:f9:5a:bb:fe:36:98:04:db:73:d1:
         ea:2a:f7:a6:e6:69:be:d8:22:3e:18:df:7b:4a:2b:fc:df:b4:
         0e:75:e1:1c:24:7a:11:97:c5:17:50:d4:df:b4:87:f7:23:55:
         ec:2f:f5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----