Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
File:                     T0Es0mmU-vYJva1ONdV2wsrkZVU.mft (raw, json)
Hash identifier:          tfton3eOpnj0gFJiUFqhkljD5rHPbmKjhMjsqD4tFE0=
Subject key identifier:   18:26:BB:78:EB:20:2E:72:C1:86:CF:DD:28:A2:DB:3B:47:CF:F2:B4
Authority key identifier: 4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55
Certificate issuer:       /CN=4f412cd26994faf609bdad4e35d576c2cae46555
Certificate serial:       01962E6194C492B652630C1F03DDED5CDB86
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: T0Es0mmU-vYJva1ONdV2wsrkZVU.crl (hash: xukW7UwqsAjfyyralD/ipNbrftJ5UjgaYgU8r0w/wrk=)
                          2: aNuMhZPoB5D8geUtVgUfLtn3hcA.roa (hash: kR0Yb3G1j8U1LWYfw43kMYf1t4xNNQqgRVkQzHfelvk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:94:c4:92:b6:52:63:0c:1f:03:dd:ed:5c:db:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f412cd26994faf609bdad4e35d576c2cae46555
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=1826bb78eb202e72c186cfdd28a2db3b47cff2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:28:8e:49:8d:08:c1:a0:97:92:fa:7f:dc:0d:
                    e9:80:5b:ec:0d:4f:1f:d4:5b:a2:39:7d:8b:7f:98:
                    c1:6b:0d:a3:c0:e4:79:8b:b3:da:43:cd:6d:46:71:
                    ce:33:06:68:ef:0c:ee:da:40:84:3b:de:1e:49:1c:
                    96:07:59:f3:64:f0:8c:1c:11:68:51:81:d3:3a:53:
                    c7:73:c7:f7:e7:ee:45:a4:5c:7b:eb:19:c2:a0:9b:
                    d7:76:77:6b:fc:4d:e2:15:bf:19:f3:bf:cb:5f:52:
                    76:ee:ef:c3:69:49:f4:82:11:d8:cd:ce:67:de:2d:
                    66:0e:79:be:84:2c:e3:21:08:85:ca:f7:aa:bd:ef:
                    72:a9:9b:7e:2f:07:20:57:4b:72:23:af:41:47:76:
                    fa:b5:5f:92:9e:d4:25:a5:65:0f:37:d9:20:eb:11:
                    a8:73:bb:f2:4c:f0:d2:85:57:43:77:f0:a1:fc:fa:
                    b1:39:23:b0:7d:79:7f:62:3d:fb:cb:8c:24:16:cc:
                    ff:9b:a4:92:fb:bd:f5:ce:96:ac:79:6e:cb:0b:cb:
                    77:e3:2a:a8:f7:c1:64:1b:f3:52:04:3b:82:40:2f:
                    1a:1b:45:09:f4:55:29:67:82:52:7d:39:b3:5b:46:
                    28:f7:3b:e2:73:66:d1:11:8b:90:a4:f2:da:d2:87:
                    c9:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:26:BB:78:EB:20:2E:72:C1:86:CF:DD:28:A2:DB:3B:47:CF:F2:B4
            X509v3 Authority Key Identifier:
                keyid:4F:41:2C:D2:69:94:FA:F6:09:BD:AD:4E:35:D5:76:C2:CA:E4:65:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T0Es0mmU-vYJva1ONdV2wsrkZVU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4591a9-56c6-40de-a124-45f61f871427/1/T0Es0mmU-vYJva1ONdV2wsrkZVU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:f1:5f:60:ef:52:5a:fd:a7:99:d3:84:72:41:9d:75:5d:2a:
         95:b1:04:e1:7b:03:1d:98:29:05:11:43:af:67:68:5d:da:95:
         4c:1f:35:fc:37:48:aa:f2:8d:6a:35:9d:48:6e:bb:2b:e9:e0:
         29:25:58:cc:95:95:02:c9:b2:08:72:8f:05:a8:8d:38:7a:79:
         f2:f5:a6:cc:fa:3c:87:c7:f0:5e:3c:73:ec:97:ff:9d:23:1a:
         57:f6:04:76:58:06:05:2d:18:11:e7:3c:86:0a:89:89:ab:9e:
         1a:b3:d0:67:d6:ef:dd:38:4b:72:c9:47:de:22:94:0e:f8:32:
         dc:fa:bd:50:0e:eb:8a:8c:5c:7b:e7:f5:27:9c:29:e5:16:58:
         57:f9:e1:4d:6e:38:78:37:2a:85:39:d4:a4:ae:64:de:f5:3b:
         e6:ed:a0:6b:09:23:7d:74:25:3f:93:a6:17:d1:0f:de:d8:82:
         33:a1:e8:9a:8d:5e:06:2d:f8:ea:ba:f9:c3:a3:3f:ed:fd:19:
         af:65:69:b1:0e:d0:06:5d:9d:b8:a9:e0:92:09:9d:00:e0:9e:
         15:78:d2:bf:68:58:f0:66:6f:01:61:ef:e6:26:34:1a:4c:94:
         a7:f1:eb:9b:cf:5b:8a:1a:a6:e2:eb:aa:81:3a:8a:32:fb:e4:
         76:0c:ed:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----