Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
File:                     Tw532cb_aNymjwXfj0Z17nvcsLw.mft (raw, json)
Hash identifier:          H/40m7vr0dewP3OwkMUDvZr7+upg3YzRiXquAHhADVE=
Subject key identifier:   BB:EE:A5:30:DF:83:C9:09:AF:DE:D7:01:84:E1:66:FC:22:51:F8:67
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Certificate issuer:       /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial:       01962F3D54E8142A8874026A8040CCC9BE3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
Manifest number:          14F2
Signing time:             Sun 13 Apr 2025 13:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:10 +0000
Files and hashes:         1: Pca7kXTlNjwuWN_AB5LtxE2ZDeM.roa (hash: Akg6x/rEJSguP5W8rh7uM4jAx65nBcfWuXfFgKDQBlY=)
                          2: Tw532cb_aNymjwXfj0Z17nvcsLw.crl (hash: TIfTWCa0WF1a3VZc4Cm9+Ee8AbBEE4R1BtVPXFxQiX4=)
                          3: o6HBbNZybM1pciBKfo5UVkJuRLw.roa (hash: rmfHjVx3VwSeRbFJh3vlHLLWzQKd4J8HNXED4xlCmoE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:54:e8:14:2a:88:74:02:6a:80:40:cc:c9:be:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
        Validity
            Not Before: Apr 13 13:01:10 2025 GMT
            Not After : Apr 14 13:01:10 2025 GMT
        Subject: CN=bbeea530df83c909afded70184e166fc2251f867
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2a:f6:a0:17:35:79:f0:0e:c6:18:cb:7c:a9:
                    99:da:63:5f:16:d3:ea:6d:55:32:c6:4d:75:7c:92:
                    e0:cb:36:c2:ba:32:15:13:35:f8:60:11:5c:a8:ec:
                    49:79:90:9c:ec:99:cb:25:0a:71:30:e8:b2:fd:38:
                    e3:67:f2:8b:b6:46:70:e9:5c:2d:13:df:18:ee:3e:
                    94:93:f9:a8:f5:7f:a6:63:89:d8:3a:a7:74:0b:a4:
                    d9:93:2e:84:e6:7e:a2:2f:a7:ad:af:08:4e:3e:71:
                    79:be:20:50:8c:82:58:af:81:54:05:70:0c:8f:60:
                    a5:28:35:38:e0:a7:53:b1:cd:44:ac:7e:18:02:8b:
                    95:53:fc:bf:8e:51:32:7a:52:95:d9:4f:39:7c:11:
                    2b:48:e4:c8:9e:d3:e2:1a:e6:1c:bb:79:5d:6f:a3:
                    4b:9a:0a:e3:38:57:2c:1a:b5:6c:24:37:ab:f9:40:
                    16:96:2c:c4:11:f2:d1:58:e5:8f:e4:7d:ef:47:75:
                    15:9e:b2:a6:2b:44:99:e6:cf:09:68:f1:a8:f7:57:
                    5b:7b:fa:66:84:78:80:81:27:3b:d4:6f:ff:61:6d:
                    88:bd:01:f2:f0:15:7e:eb:97:61:83:2e:2f:47:6c:
                    fa:42:29:f6:46:eb:aa:59:3a:d8:23:3d:d6:aa:7b:
                    64:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:EE:A5:30:DF:83:C9:09:AF:DE:D7:01:84:E1:66:FC:22:51:F8:67
            X509v3 Authority Key Identifier:
                keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:c5:29:15:9c:70:86:78:6e:c5:af:32:73:a4:13:60:5d:fd:
         aa:c1:b6:20:cd:8f:19:ca:d3:ad:63:19:45:73:7e:f2:b3:a1:
         3f:f1:99:11:57:44:bf:ec:f3:81:2d:fb:07:ad:0b:88:7b:56:
         b2:af:38:e5:49:d9:6f:b6:eb:c7:85:c1:87:6d:d2:83:b7:1e:
         e7:47:4e:8a:81:68:57:0b:55:3f:81:68:a6:97:e4:71:e5:b3:
         40:2c:bb:f4:d4:79:a3:5c:ef:5a:86:66:ce:79:06:7d:69:0a:
         2b:84:4c:ef:cc:a3:10:03:fe:f7:3d:0b:01:37:e5:4d:0c:61:
         25:f7:bb:6c:89:60:41:31:ba:27:38:58:b1:c7:92:d9:2f:f4:
         d0:a8:fe:4f:b9:d2:22:a8:25:ba:28:8e:14:50:6e:2a:cf:c9:
         b7:d0:42:f6:e6:e7:2f:55:56:93:f5:59:62:59:19:aa:f3:98:
         b9:31:6c:18:d7:67:c6:ef:1e:38:d3:8f:d5:10:74:1a:9d:71:
         e5:6b:a6:57:13:89:af:91:38:23:3e:0d:3c:2d:28:00:a5:13:
         5b:ac:59:d9:a8:8d:c5:87:99:40:59:fb:73:90:d2:f1:d7:f0:
         6a:ad:f2:1a:3d:61:76:7d:ab:30:56:fe:84:ac:39:46:89:71:
         27:64:37:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----