Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft
File:                     TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft (raw, json)
Hash identifier:          JaAbsZM+CjxaOqSokgcZ6TxeqHuUucHJ4IjeS9PgGZY=
Subject key identifier:   04:BF:07:BD:BD:BD:DE:9A:E3:7E:59:5A:94:CF:A5:E3:6C:E9:DC:CA
Authority key identifier: 4C:EA:66:AD:DA:9D:F9:62:5A:3D:78:D6:28:FB:05:E2:48:4D:D8:78
Certificate issuer:       /CN=4cea66adda9df9625a3d78d628fb05e2484dd878
Certificate serial:       01962E2B1B001BC02066B14BB69451E1D7F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TOpmrdqd-WJaPXjWKPsF4khN2Hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft
Manifest number:          0192
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: 1-QbsigNOAsIOrzATvCDKf5YVw3s.roa (hash: gWNRwRZG0Ifn0uSFb+Au9uZSZqHds/SqKOwbteITnow=)
                          2: TOpmrdqd-WJaPXjWKPsF4khN2Hg.crl (hash: jJUdPZAtduie0HdRnWgA547xRIKkFs9kkwISBZzslEA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:1b:00:1b:c0:20:66:b1:4b:b6:94:51:e1:d7:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cea66adda9df9625a3d78d628fb05e2484dd878
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=04bf07bdbdbdde9ae37e595a94cfa5e36ce9dcca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:65:8a:69:a4:e5:43:e1:ff:7e:16:9d:d9:81:
                    cf:0f:bc:fb:39:15:b2:cc:d2:70:58:d2:06:d7:7c:
                    c9:63:d1:11:8a:fe:67:b6:60:e7:11:4e:88:51:39:
                    51:d6:5d:33:85:a9:45:99:18:99:db:bf:ec:bb:50:
                    f4:31:62:55:65:4d:a7:a4:6f:df:5d:f8:0c:a9:24:
                    cf:b4:3d:82:94:f5:3c:42:94:57:6a:be:05:da:91:
                    2f:be:98:ee:a8:dc:64:ea:c7:5b:c1:c1:8b:64:7d:
                    ce:63:95:cf:d0:30:e1:92:0e:0c:6c:1c:e1:56:4a:
                    2d:1f:96:78:01:0d:78:9e:14:bb:5e:63:89:10:b5:
                    2f:1c:d6:51:c1:68:3b:0d:de:a9:22:b5:da:09:91:
                    de:5b:82:c8:aa:76:25:74:22:9f:46:a6:14:62:a7:
                    f7:94:57:19:f8:a0:f6:98:35:8d:bc:43:f3:ed:9f:
                    30:32:f7:35:bc:79:da:9e:fd:d9:70:7d:ee:e6:1e:
                    8f:dc:d3:c7:35:82:16:e1:be:29:29:60:3b:bf:33:
                    c4:e3:82:fe:79:9c:30:e2:7b:95:8f:50:41:49:64:
                    66:b8:95:9c:fe:af:ae:1d:76:c1:18:62:45:f3:41:
                    bd:30:dd:92:84:ce:98:ce:47:ac:86:2c:83:c6:c1:
                    dd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BF:07:BD:BD:BD:DE:9A:E3:7E:59:5A:94:CF:A5:E3:6C:E9:DC:CA
            X509v3 Authority Key Identifier:
                keyid:4C:EA:66:AD:DA:9D:F9:62:5A:3D:78:D6:28:FB:05:E2:48:4D:D8:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOpmrdqd-WJaPXjWKPsF4khN2Hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/570d93-696d-47eb-93b1-77836e2fcbdd/1/TOpmrdqd-WJaPXjWKPsF4khN2Hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:a9:24:7a:c0:13:d9:ea:dd:72:75:81:3c:c0:6c:3a:ae:ac:
         ed:79:3f:e3:85:72:38:e0:20:66:59:59:b4:09:29:89:c7:55:
         3f:1c:60:fb:5b:1c:8f:fc:3d:4c:bd:5f:3e:44:61:fc:44:52:
         76:77:85:fc:f2:57:84:49:95:15:87:1e:c8:84:cd:e6:47:de:
         4e:58:55:cf:3a:25:27:04:d9:18:bb:24:db:04:31:8a:2f:97:
         05:ea:8d:4e:29:91:fc:07:1d:44:25:5f:5e:d3:88:b0:61:02:
         e7:30:cc:3c:c7:ce:de:ff:7c:97:d1:ae:98:69:9e:a2:f9:82:
         0f:69:99:48:ed:e1:0e:4c:30:ce:f1:fa:40:9e:ea:9c:b6:16:
         31:50:42:d6:fa:75:37:b9:ef:c3:41:05:2f:fa:d3:84:3f:00:
         56:cf:bb:ae:18:04:4b:94:8c:2c:34:c9:e5:45:31:92:75:2c:
         c8:a7:4e:c7:00:6c:19:eb:92:4d:38:40:c4:16:49:cd:b3:9a:
         bb:14:30:24:39:31:ff:01:c3:21:66:82:85:c1:85:54:36:60:
         cc:31:57:7c:f9:de:ee:36:69:b4:8d:8c:8e:b5:4f:ef:f0:0c:
         5f:05:68:be:d7:59:0c:d3:8a:00:1c:bc:c2:77:41:e2:6a:1b:
         da:80:dc:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----