Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
File:                     T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft (raw, json)
Hash identifier:          qZ4sDTLGTT44pEvEpnE+FK0x33LVigFpq1fLacpyNyc=
Subject key identifier:   A3:7D:2D:05:80:AC:AE:43:36:25:AD:7B:37:56:F7:79:51:E1:12:B5
Authority key identifier: 4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
Certificate issuer:       /CN=4fbb63df06de00c843da63977349595471e51a26
Certificate serial:       01962E2B1052EDC6F5D2F0FA1B30DD304085
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 08:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:36 +0000
Files and hashes:         1: T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl (hash: 3D5F+8ca/GzK0iGLhmVa/SKPmAPz7mI07b/QPMhDq8A=)
                          2: qMVYOgqIzk9KMROylZiVtF-t3Zc.roa (hash: xqIRDpc2sFOdr1/l4Pzbo0nNaeEXShJ8C0GuGpTGneI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:10:52:ed:c6:f5:d2:f0:fa:1b:30:dd:30:40:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4fbb63df06de00c843da63977349595471e51a26
        Validity
            Not Before: Apr 13 08:01:36 2025 GMT
            Not After : Apr 14 08:01:36 2025 GMT
        Subject: CN=a37d2d0580acae433625ad7b3756f77951e112b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b5:45:08:ea:28:90:23:be:8a:2a:95:0a:a6:
                    67:ae:17:44:1e:1a:c6:78:a3:09:0d:04:d8:09:1d:
                    e1:13:59:d5:72:e7:c7:d0:99:69:81:f0:de:8b:51:
                    80:27:0f:ee:be:49:be:89:0b:c4:e9:ac:b4:8f:e4:
                    ed:93:c7:24:53:6b:1e:97:21:fd:06:70:5c:74:4a:
                    25:3e:93:b1:2b:34:9c:f7:f2:4d:af:c9:c7:22:f7:
                    f5:a6:77:b3:a0:cb:c8:2b:2b:17:2c:fa:9e:b4:27:
                    0c:ff:0d:51:5b:05:e5:8c:8a:4e:84:99:2c:ad:89:
                    8a:b6:2b:b0:35:86:c8:59:9c:13:f9:83:49:17:2e:
                    41:67:e0:95:a4:c9:da:90:cc:63:98:be:8b:15:e4:
                    c6:fc:79:5e:ed:9e:23:e8:c5:ad:37:36:8f:93:bd:
                    06:ae:f9:5e:44:17:cb:de:30:d6:27:30:c1:ff:0f:
                    94:a5:b9:5d:55:66:1b:94:60:fd:e3:bd:8c:2e:53:
                    0b:86:0a:a8:3d:6c:4f:f1:14:0e:95:fa:62:da:6b:
                    c4:5d:05:63:c2:34:87:df:22:40:fb:fb:5d:5c:1b:
                    15:5e:93:32:af:5a:f0:bc:83:3f:33:2b:ca:d9:c1:
                    e6:74:33:28:ac:3e:d0:ec:ae:7f:de:e9:05:68:7b:
                    fb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:7D:2D:05:80:AC:AE:43:36:25:AD:7B:37:56:F7:79:51:E1:12:B5
            X509v3 Authority Key Identifier:
                keyid:4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:ef:85:b0:c1:c3:cd:c3:bc:74:fd:f6:e5:00:0f:bc:13:40:
         8b:dc:34:f7:1e:26:6d:be:10:5a:02:e8:1d:e5:0f:46:de:c4:
         b6:0c:12:0a:00:7a:4b:07:c1:56:92:8f:35:4e:ee:9b:ca:15:
         bb:da:26:b8:1d:dd:8f:e9:34:f4:77:0b:0d:0f:dc:5f:1e:50:
         39:89:ed:7d:d8:6f:ed:f1:92:57:f8:d8:ec:7a:1f:14:13:86:
         0f:57:71:88:86:48:6d:16:96:98:45:d6:76:14:26:f2:39:0d:
         11:17:e6:46:13:6f:80:f0:69:03:96:f5:a5:d7:5d:8f:b6:cf:
         1e:ae:5a:c3:77:24:f2:80:a2:89:be:f6:1b:ac:35:75:54:e7:
         85:70:94:49:5e:42:08:b3:58:96:03:2d:ac:95:54:b9:42:69:
         77:16:cd:fe:7b:07:3e:3b:f2:ad:6b:e3:ab:84:8b:47:59:b2:
         f1:a4:62:39:67:b3:55:60:22:de:02:dc:da:4b:b0:75:32:66:
         8c:2d:1e:6b:cb:b3:5b:7e:08:52:b9:27:8c:58:37:4c:2f:76:
         e3:88:ee:1c:85:e8:db:53:b6:bc:35:c0:93:c1:f9:fa:f7:b7:
         22:01:9a:30:09:45:ba:be:26:83:db:bc:f0:2b:6e:7d:7a:b8:
         35:ef:95:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----