Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/876166-f057-46e1-be08-a65e5e33dcc0/1/TDXafoQ-N8fbpPynGPQ4Zf18mNw.mft
File:                     TDXafoQ-N8fbpPynGPQ4Zf18mNw.mft (raw, json)
Hash identifier:          hZew/UcRvU16g4lna8AlPhgTP81OqX/lDtygFYUO7+0=
Subject key identifier:   0A:44:DA:0A:38:DC:CE:92:90:89:41:69:41:44:70:5F:C6:01:A4:E0
Authority key identifier: 4C:35:DA:7E:84:3E:37:C7:DB:A4:FC:A7:18:F4:38:65:FD:7C:98:DC
Certificate issuer:       /CN=4c35da7e843e37c7dba4fca718f43865fd7c98dc
Certificate serial:       01962F3D80743E0C592EB8643A0C3DFC60D8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDXafoQ-N8fbpPynGPQ4Zf18mNw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/876166-f057-46e1-be08-a65e5e33dcc0/1/TDXafoQ-N8fbpPynGPQ4Zf18mNw.mft
Manifest number:          11B8
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: TDXafoQ-N8fbpPynGPQ4Zf18mNw.crl (hash: LGOKu7vY8jx+3xXWiqpnf22xax8oPTOtMbdP/EQGrR0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:80:74:3e:0c:59:2e:b8:64:3a:0c:3d:fc:60:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c35da7e843e37c7dba4fca718f43865fd7c98dc
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=0a44da0a38dcce92908941694144705fc601a4e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1d:78:59:2f:40:04:64:1b:f4:69:6e:62:3d:
                    34:3b:71:45:50:b8:5f:80:29:a6:85:99:45:f5:43:
                    a0:6b:26:2c:fd:04:71:c1:3d:b5:84:3b:25:06:0b:
                    a9:1d:fc:de:03:77:d3:eb:82:d0:ff:96:97:01:d1:
                    4b:f4:91:0e:96:75:df:73:c5:ba:13:4c:85:0d:33:
                    20:f2:9d:75:97:f4:34:c8:fc:2b:e7:d5:cf:d5:99:
                    ba:18:5a:d2:60:9a:20:3e:52:f5:2a:36:c7:cd:71:
                    8f:e2:b1:b2:15:b1:27:60:37:c7:4c:16:fd:6e:14:
                    57:72:65:6d:97:1e:04:51:ec:b4:83:aa:e1:f0:07:
                    e8:67:b7:c4:01:36:90:fa:17:f5:4b:a0:66:a3:27:
                    53:dc:0f:c7:ad:f8:04:d2:7c:68:97:b6:d9:a7:60:
                    8a:2b:52:46:b6:95:4a:71:19:85:98:aa:64:de:ea:
                    81:8e:cb:92:19:c4:02:7a:5a:4a:7a:c1:5e:f8:55:
                    d1:cb:8a:68:0b:02:81:ba:42:93:fe:3e:08:ad:9c:
                    a7:bc:3b:0f:f0:b3:20:21:11:9a:51:bb:42:ef:5f:
                    28:88:2f:02:2c:fb:b3:07:d4:e7:1a:96:c1:49:21:
                    09:d3:79:76:4a:58:02:2c:2e:ef:37:1d:2f:ca:e0:
                    99:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:44:DA:0A:38:DC:CE:92:90:89:41:69:41:44:70:5F:C6:01:A4:E0
            X509v3 Authority Key Identifier:
                keyid:4C:35:DA:7E:84:3E:37:C7:DB:A4:FC:A7:18:F4:38:65:FD:7C:98:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDXafoQ-N8fbpPynGPQ4Zf18mNw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/876166-f057-46e1-be08-a65e5e33dcc0/1/TDXafoQ-N8fbpPynGPQ4Zf18mNw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/876166-f057-46e1-be08-a65e5e33dcc0/1/TDXafoQ-N8fbpPynGPQ4Zf18mNw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:2d:ad:ed:13:c2:c2:9d:44:4a:00:45:e1:67:fd:aa:80:d7:
         23:9e:de:ee:83:7b:95:c9:7c:da:eb:2a:4a:d0:38:44:c0:41:
         26:66:0e:60:7a:80:b1:9c:88:b0:82:19:4f:b0:39:29:f5:1b:
         b9:69:01:28:5b:74:71:55:1d:1a:f8:ec:ee:53:32:df:1d:b8:
         25:f4:3a:d7:f5:7a:bc:cb:d4:0e:4a:ed:d8:51:4a:c1:b5:64:
         d2:a4:5e:e2:5a:9d:90:95:42:75:0f:b3:51:ea:f2:bc:ff:52:
         23:46:98:f7:e2:20:2d:41:25:e5:61:74:d4:24:28:63:24:d0:
         18:77:dc:5e:76:97:2c:81:e6:4b:68:23:e5:f6:79:f5:90:66:
         a9:45:08:31:95:bd:6d:98:28:f6:16:5a:f5:9e:2d:5d:46:33:
         fc:14:ff:d0:f4:ae:40:59:a7:0c:93:24:5c:98:d5:1d:74:87:
         12:cc:f3:66:01:fd:84:28:77:9f:54:3e:bd:54:46:72:dd:08:
         9f:23:6c:fc:96:17:67:06:0a:24:45:6b:8d:38:3b:77:4e:c0:
         6f:97:9b:57:67:7e:a9:a7:21:f8:3e:99:ed:61:cc:90:84:c4:
         fd:63:4b:9c:3f:bb:aa:86:81:9d:c1:36:7f:09:37:fe:5d:e7:
         8d:78:cc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----