Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
File:                     TeLcLByThHv5efmwEO3EzahJ9Pg.mft (raw, json)
Hash identifier:          tBAFDwZ+uUE7UEif06NBXoTgWhQGio5cZ8ypAebrWYw=
Subject key identifier:   65:DF:11:FF:EA:8D:00:05:68:BB:BA:B8:1D:F8:45:67:13:B4:AA:7F
Authority key identifier: 4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
Certificate issuer:       /CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Certificate serial:       01962F744E165EE67CF5A0819A09878CDC43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 14:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:13 +0000
Files and hashes:         1: 8JnpLlF6ouYCq_pQniNXbCodhsg.roa (hash: 3w9gQ6ISRWOwFH7sOq0mD8XYTAeUJvnIkcQX2VgiAHE=)
                          2: TeLcLByThHv5efmwEO3EzahJ9Pg.crl (hash: XqVzizhVv9tEMpziwHvb2Oq5uMD3q+b8hy3S9aE/9CI=)
                          3: UrlGR9v18F5T4YYElfr8yqGscS0.roa (hash: fj1TXr5g11+IfyDk1z4S0+oWVp/JX8PPHR9S29gA7PE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:4e:16:5e:e6:7c:f5:a0:81:9a:09:87:8c:dc:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
        Validity
            Not Before: Apr 13 14:01:13 2025 GMT
            Not After : Apr 14 14:01:13 2025 GMT
        Subject: CN=65df11ffea8d000568bbbab81df8456713b4aa7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:06:2a:62:3f:6f:9a:3b:50:97:5a:0e:b4:
                    04:1a:82:fb:11:3c:88:11:24:61:39:37:03:35:d2:
                    be:f3:22:46:1f:29:a6:51:22:99:7c:c8:12:6b:6d:
                    29:0d:2c:6b:0d:4d:65:14:19:92:5d:9b:77:87:a3:
                    49:64:b3:66:24:42:6b:3e:b1:7e:40:9a:5f:62:7d:
                    a0:ff:71:6a:43:e6:ae:d7:f2:7c:96:02:1d:81:ae:
                    95:ac:90:78:c2:df:7d:c8:19:6f:ca:54:0b:bd:47:
                    6e:68:f9:9a:d1:6f:97:c2:51:d5:d4:53:f5:90:61:
                    c4:68:00:de:ed:26:b3:02:88:bb:dd:60:ca:83:ca:
                    4e:6b:b9:e8:c3:0e:74:e3:2f:e0:b7:26:e0:90:81:
                    20:36:b1:50:6e:60:3f:3d:19:98:07:4c:01:fe:b2:
                    04:90:16:d4:9e:01:51:3d:fa:bf:b1:ff:6e:d3:bb:
                    cb:b2:bf:fa:4e:1e:2b:29:37:6d:f2:65:0f:c2:a4:
                    6f:37:c3:7e:24:77:f7:ef:db:a8:e5:f6:16:b2:d8:
                    46:19:29:df:40:8e:15:5b:0c:d7:da:0a:6b:b4:39:
                    41:48:4d:0f:ed:3d:f9:eb:de:37:4b:6e:c3:18:10:
                    07:c6:59:80:99:7a:c0:ab:62:fe:45:34:a1:3c:dd:
                    21:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:DF:11:FF:EA:8D:00:05:68:BB:BA:B8:1D:F8:45:67:13:B4:AA:7F
            X509v3 Authority Key Identifier:
                keyid:4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:78:a7:e0:4e:9f:86:40:69:f5:f7:ba:59:f3:76:8d:22:3d:
         06:b2:c2:e2:2f:88:b1:5d:6b:fa:02:29:1b:29:16:61:d2:36:
         5d:f0:16:c0:01:8a:4d:34:7b:eb:e9:bc:4c:46:43:1c:83:26:
         a9:09:0b:3f:ce:05:8b:a4:a9:1a:56:20:15:14:7b:65:e0:37:
         53:6c:c2:94:e9:d1:40:c3:66:00:a2:50:ee:0d:c5:83:14:89:
         a2:75:32:5e:52:24:6b:b4:24:fd:81:1b:dc:ec:cd:2e:c8:82:
         d2:21:fc:26:b9:7f:0b:1f:4d:8d:24:70:c4:69:0f:2d:cb:a9:
         02:c4:b1:1a:57:b4:fb:23:a1:99:39:cf:94:aa:cd:e4:e7:b4:
         29:e9:d0:75:b7:2e:5f:57:7a:b4:4e:02:3f:69:df:d7:0b:42:
         f0:79:03:64:e0:94:2c:f0:f1:26:37:9e:6f:51:68:16:89:6f:
         ca:c0:56:5d:01:ef:0a:87:65:fd:06:4c:64:14:c9:b9:c8:97:
         4a:39:9e:c5:18:90:18:7b:eb:8d:38:69:49:2e:f7:d3:cf:39:
         00:3c:da:ed:6b:1d:c6:72:21:f1:1c:8e:19:82:5a:6c:57:07:
         93:75:12:4d:f2:00:8e:48:4d:6b:e7:4c:fb:0e:22:5d:75:b3:
         1b:b2:be:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvdE4WXuZ89aCBmgmHjNxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZTJkYzJjMWM5Mzg0N2JmOTc5ZjliMDEwZWRjNGNkYTg0
OWY0ZjgwHhcNMjUwNDEzMTQwMTEzWhcNMjUwNDE0MTQwMTEzWjAzMTEwLwYDVQQD
Eyg2NWRmMTFmZmVhOGQwMDA1NjhiYmJhYjgxZGY4NDU2NzEzYjRhYTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcsGKmI/b5o7UJdaDrQEGoL7ETyI
ESRhOTcDNdK+8yJGHymmUSKZfMgSa20pDSxrDU1lFBmSXZt3h6NJZLNmJEJrPrF+
QJpfYn2g/3FqQ+au1/J8lgIdga6VrJB4wt99yBlvylQLvUduaPma0W+XwlHV1FP1
kGHEaADe7SazAoi73WDKg8pOa7noww504y/gtybgkIEgNrFQbmA/PRmYB0wB/rIE
kBbUngFRPfq/sf9u07vLsr/6Th4rKTdt8mUPwqRvN8N+JHf379uo5fYWsthGGSnf
QI4VWwzX2gprtDlBSE0P7T356943S27DGBAHxlmAmXrAq2L+RTShPN0hYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXfEf/qjQAFaLu6uB34RWcTtKp/MB8GA1UdIwQY
MBaAFE3i3Cwck4R7+Xn5sBDtxM2oSfT4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGVMY0xCeVRoSHY1ZWZtd0VPM0V6YWhKOVBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yN2UxY2EtZTYxZi00ZThjLWFkOWMt
MTQ1YzM2ZTM4Mjc2LzEvVGVMY0xCeVRoSHY1ZWZtd0VPM0V6YWhKOVBnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yN2UxY2EtZTYxZi00ZThjLWFkOWMtMTQ1YzM2ZTM4Mjc2
LzEvVGVMY0xCeVRoSHY1ZWZtd0VPM0V6YWhKOVBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhXin4E6f
hkBp9fe6WfN2jSI9BrLC4i+IsV1r+gIpGykWYdI2XfAWwAGKTTR76+m8TEZDHIMm
qQkLP84Fi6SpGlYgFRR7ZeA3U2zClOnRQMNmAKJQ7g3FgxSJonUyXlIka7Qk/YEb
3OzNLsiC0iH8Jrl/Cx9NjSRwxGkPLcupAsSxGle0+yOhmTnPlKrN5Oe0KenQdbcu
X1d6tE4CP2nf1wtC8HkDZOCULPDxJjeeb1FoFolvysBWXQHvCodl/QZMZBTJuciX
SjmexRiQGHvrjThpSS730885ADza7WsdxnIh8RyOGYJabFcHk3USTfIAjkhNa+dM
+w4iXXWzG7K+gw==
-----END CERTIFICATE-----