Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File:                     TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier:          WNSJ3Ul3gjj7+LiVR/N5o1w7vr8ewdMmBNf3nk4mU3A=
Subject key identifier:   BB:53:2F:28:DD:72:5B:A5:94:B2:7C:DF:CD:6D:57:F9:4F:C2:57:4C
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer:       /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial:       01962DF4480F7D68F5D04425231675C957F7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 07:01:46 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:46 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:46 +0000
Files and hashes:         1: 7YKaewqyZbI9lVFIivFUL2FPVzU.roa (hash: wf42n7crwFg9XaXHUPxEE3NTHiwbzXO1xRDVNEMLG6A=)
                          2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: fxHDbAXQksybv6goNpchN6xArpk+YihNEFLhudKOnMY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:48:0f:7d:68:f5:d0:44:25:23:16:75:c9:57:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
        Validity
            Not Before: Apr 13 07:01:46 2025 GMT
            Not After : Apr 14 07:01:46 2025 GMT
        Subject: CN=bb532f28dd725ba594b27cdfcd6d57f94fc2574c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:19:8f:c7:77:df:38:54:cb:ec:19:2b:dc:7f:
                    62:d3:5d:90:f5:be:6a:01:66:af:77:f7:20:7a:8b:
                    ab:25:b6:3e:21:ad:1c:d5:74:ff:64:fd:e1:85:cf:
                    f3:92:d7:17:5b:6e:e1:d7:22:38:35:76:02:aa:06:
                    a0:87:da:c8:22:fd:d0:97:e4:a4:a6:c7:8b:77:64:
                    02:ef:62:85:7a:33:ac:8d:4c:03:5c:91:3e:f6:43:
                    3c:e0:bc:33:d5:df:71:55:be:fa:e4:56:d1:75:7c:
                    92:e9:8e:40:f8:e8:49:8e:00:a8:92:10:f6:bc:5a:
                    5b:59:c8:60:66:f7:aa:84:2c:87:02:c5:66:29:bf:
                    a9:f3:57:d3:1c:ca:53:c2:d5:9c:68:fe:fd:81:2c:
                    5d:e3:11:d5:9b:58:6b:e1:f5:c6:99:2a:99:5e:85:
                    ed:82:ed:05:30:1d:97:7b:b9:32:e0:a6:18:f8:24:
                    b1:ae:81:14:dc:10:dd:fa:ba:91:8f:91:50:1e:22:
                    41:e0:d1:7c:6a:65:b6:1f:0b:6b:08:e2:4d:5e:8e:
                    82:07:90:f3:aa:50:64:86:2e:de:90:89:a8:96:c3:
                    ad:f9:0f:6b:c6:d3:af:68:26:7d:1a:3f:ce:e1:88:
                    dd:e5:3c:72:7a:f5:ce:39:d9:e8:d8:6a:0d:17:b9:
                    82:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:53:2F:28:DD:72:5B:A5:94:B2:7C:DF:CD:6D:57:F9:4F:C2:57:4C
            X509v3 Authority Key Identifier:
                keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:37:ec:2b:c6:26:d2:41:22:5b:6f:53:d1:6f:5a:68:de:c6:
         30:e3:78:58:3f:b1:ef:b9:a4:73:0e:d1:67:79:47:11:dd:2c:
         4b:ba:33:ef:01:af:b9:42:7a:23:c9:b7:89:da:52:27:64:64:
         ad:cc:7a:dd:7a:cd:25:e7:9f:dd:8f:b6:19:9a:f9:92:9d:fa:
         1e:2a:ae:46:25:41:cb:26:ee:9a:a2:20:7f:0c:93:17:27:65:
         e9:6b:fd:cd:42:0d:3c:d4:eb:d4:08:95:ce:75:9c:92:da:5e:
         de:cd:fe:a2:9e:a6:df:e8:ea:e4:f5:cd:80:db:21:34:ff:f5:
         52:2f:dc:51:67:70:ff:3e:48:b1:2c:11:41:6c:12:19:6a:e3:
         d5:45:0f:25:1a:16:fe:a6:a8:52:e0:2a:3e:09:cf:a0:0b:55:
         3a:8c:be:5c:5c:ea:fb:35:e7:33:43:97:59:13:be:23:7a:f5:
         b4:77:5a:11:79:8c:7c:bb:53:fd:08:c0:f4:ad:77:af:8f:4c:
         13:20:38:0f:25:72:d7:15:a4:dd:bb:ef:8f:9a:1c:5c:10:1e:
         00:13:ad:14:67:81:1c:bc:e2:b0:f6:62:58:2e:8d:c7:6a:82:
         2c:f3:a2:9f:61:89:c1:a6:54:9a:e1:71:d4:da:8d:89:e7:6a:
         35:2a:d3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----