Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
File:                     TK8RFQzl_p9w82yYBnR7toKxyiE.mft (raw, json)
Hash identifier:          cvfsYsau2rXyW8YfFczppWgPHHHBTfP7PQ01XkZ/pt8=
Subject key identifier:   79:C2:79:47:D0:B2:4F:44:AF:1C:40:47:DB:F9:2C:47:F4:2E:97:7A
Authority key identifier: 4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21
Certificate issuer:       /CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
Certificate serial:       01962F74880EFDCD30800B64B6FCFE952EEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft
Manifest number:          141E
Signing time:             Sun 13 Apr 2025 14:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:28 +0000
Files and hashes:         1: TK8RFQzl_p9w82yYBnR7toKxyiE.crl (hash: mXqGCggtSjoDAMIt69vRlai3B8MEJIyAPpYDgjhi5xc=)
                          2: fuMrSOrjtC2Pjn0DbbjzzEXmpIM.roa (hash: 82A1cuez1ZD0Bc+8PeFu3N5JKG3dUU8f0mhUHsfa/b0=)
                          3: tT8Bhk3TRbD92onTtD9xdUFkuBo.roa (hash: nGHXcTt4lmnaxv72VD2WiGZwBBegRpFmPrLz3wSYepE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:88:0e:fd:cd:30:80:0b:64:b6:fc:fe:95:2e:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4caf11150ce5fe9f70f36c9806747bb682b1ca21
        Validity
            Not Before: Apr 13 14:01:28 2025 GMT
            Not After : Apr 14 14:01:28 2025 GMT
        Subject: CN=79c27947d0b24f44af1c4047dbf92c47f42e977a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:1f:e1:c7:f1:f9:08:f9:79:0d:69:b9:35:f0:
                    dd:23:07:60:c6:7e:4f:01:56:5b:79:93:cc:f0:b8:
                    30:1e:a2:6a:36:7b:d2:bc:31:2f:2c:7d:8a:05:c9:
                    e1:57:dc:71:84:ad:a5:0c:a9:e3:77:ca:54:df:c9:
                    23:9c:ca:e5:9a:9f:59:d5:db:8c:ac:65:62:58:95:
                    c1:ca:09:79:d6:6a:53:30:d4:f5:1e:ec:82:80:17:
                    77:c4:b3:6c:6b:a7:1f:49:c8:2d:b9:9f:b5:f9:c9:
                    93:ff:9a:dd:9d:4f:d1:73:42:7f:5c:40:52:f0:d8:
                    62:af:7c:36:3e:64:a6:8b:eb:9f:62:0e:ca:ec:21:
                    4c:cb:55:ba:89:de:0b:f2:5b:4b:80:b3:65:bc:86:
                    ec:16:1e:30:4a:34:9a:61:ee:68:0e:8c:fa:67:d2:
                    32:7e:99:45:f4:75:c2:07:24:3f:62:c0:ec:db:48:
                    c0:78:a4:57:cf:e3:a1:5b:c5:c1:21:d6:fb:f2:04:
                    72:3b:ec:c0:b4:fb:22:5b:1e:84:0c:c6:35:e8:8f:
                    22:30:8d:b8:ef:21:8a:ad:b6:59:9e:f9:03:70:83:
                    68:bd:8a:f8:aa:95:a6:86:3f:70:38:97:26:2b:44:
                    24:d7:cb:14:69:e0:db:f7:c6:e7:92:c9:84:c3:4c:
                    60:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:C2:79:47:D0:B2:4F:44:AF:1C:40:47:DB:F9:2C:47:F4:2E:97:7A
            X509v3 Authority Key Identifier:
                keyid:4C:AF:11:15:0C:E5:FE:9F:70:F3:6C:98:06:74:7B:B6:82:B1:CA:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8RFQzl_p9w82yYBnR7toKxyiE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/f3695c-e340-4e2f-afeb-6b95d3c89c91/1/TK8RFQzl_p9w82yYBnR7toKxyiE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:8a:fc:8e:16:97:e7:fa:47:5a:5a:46:c0:08:78:2e:06:59:
         dc:76:89:7e:35:2e:16:58:48:db:2c:ee:88:b3:67:7c:50:d5:
         ae:fc:a0:4e:77:00:26:f7:3d:1f:e4:aa:b7:98:56:d3:86:79:
         cc:c5:86:85:ba:68:8a:c8:b5:10:e8:00:e1:7a:45:4e:69:3a:
         ae:83:27:0f:70:08:61:0e:d7:66:17:ff:86:ba:1f:4d:f2:11:
         5d:dd:3b:fe:e2:22:cc:55:9f:eb:f8:cb:cf:b7:5c:d3:55:6d:
         b3:e6:8d:f0:c1:82:01:cf:8b:1e:e8:20:5a:48:af:ee:a3:42:
         8a:f7:ae:01:80:3d:31:49:3b:4d:fe:4f:1d:03:d5:70:2d:cd:
         89:a1:58:13:f7:b2:7b:c5:23:2f:ea:11:60:e0:6d:cd:bf:ab:
         05:04:9d:63:50:bc:3b:51:f7:e8:ae:93:6a:3d:2b:82:73:94:
         74:d8:a3:d3:17:b8:50:9a:0e:bd:2a:82:bd:35:f5:be:3c:9c:
         c8:7e:31:d4:5e:24:fe:4c:5a:80:52:fe:4f:71:10:f1:78:14:
         0e:a8:81:59:6d:c7:9b:6e:a6:cd:fa:a3:66:f7:b8:27:32:c8:
         de:ea:89:a3:88:f9:97:02:9f:2a:ce:74:b6:86:d0:92:93:cb:
         fc:44:e7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----