Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File:                     TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier:          KNdXy6EojiMD0CLdlYcWQ+Ry8pMLUkphy7MI9gU7y/w=
Subject key identifier:   6D:F7:25:13:3E:CB:28:EE:D4:D9:57:D1:89:B1:1E:E8:0D:46:EF:B3
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer:       /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial:       01962F06CC7403826DC53909289A72F09816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 12:01:36 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:36 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:36 +0000
Files and hashes:         1: 2-8ODfbSISRCVrFLypE1beop4mI.roa (hash: CTu3Z/KQAufmJs+pAxP0V5GvviRUTQPwl9gEk4hUm6E=)
                          2: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: rRnCeomUKB4irxEvVBoMu2YEsVO/aXaXzIPQx9g4ML4=)
                          3: xOYkGw3SqmDNjUBUXBvZW0U-4J4.roa (hash: CMrEVMiwQAaT7qSr6cVaZ45q/VR6zzPcJBOroZoc7n8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:cc:74:03:82:6d:c5:39:09:28:9a:72:f0:98:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
        Validity
            Not Before: Apr 13 12:01:36 2025 GMT
            Not After : Apr 14 12:01:36 2025 GMT
        Subject: CN=6df725133ecb28eed4d957d189b11ee80d46efb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:85:3e:e3:02:93:ae:01:2d:84:1d:17:46:72:
                    b7:33:51:7a:2c:fb:db:14:94:92:14:48:41:9a:00:
                    a0:56:1c:7a:cd:f4:82:59:a6:d7:2b:3e:29:ce:3e:
                    1e:95:eb:89:06:b0:7a:4f:e4:c7:d3:18:ca:cc:ed:
                    aa:01:84:13:ff:e2:d3:06:65:7c:da:2c:85:63:f5:
                    96:cc:04:02:ff:69:61:9b:6b:b1:39:cb:97:7d:22:
                    c4:da:b9:ee:f3:90:28:f8:b8:54:f0:a2:f1:95:7a:
                    2b:eb:99:28:b0:49:66:91:9f:15:5f:25:d0:4d:96:
                    fd:97:ac:3c:2f:2e:62:d0:1e:af:b0:58:fe:09:80:
                    99:69:75:b9:07:a3:15:76:0d:2e:9b:ae:16:7c:ec:
                    e2:17:64:55:1c:63:47:b8:f8:f2:01:52:83:a6:e6:
                    8f:be:b8:ce:d8:2c:ab:d2:56:eb:d0:2b:15:85:3d:
                    3d:18:4c:a6:92:b6:ee:fa:a0:e4:98:94:94:de:51:
                    21:c4:c2:d1:b4:f8:d6:7f:ec:a2:55:11:0a:65:2c:
                    69:14:b0:59:05:20:fb:d3:65:cc:64:e2:05:67:ef:
                    01:5c:a0:1a:05:d3:35:27:40:bd:86:90:97:b5:59:
                    b3:9e:82:7d:48:30:da:1d:52:2b:b9:9b:0a:65:20:
                    8b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F7:25:13:3E:CB:28:EE:D4:D9:57:D1:89:B1:1E:E8:0D:46:EF:B3
            X509v3 Authority Key Identifier:
                keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:93:56:c7:41:23:7c:3a:a3:bd:15:ac:da:c7:55:d3:df:d0:
         7d:49:d2:c5:c7:d8:cf:4f:0d:8f:87:fc:67:3e:55:c8:07:49:
         2d:b2:06:e6:69:56:03:04:8f:2c:84:c1:c0:3a:a6:ee:ce:dd:
         3a:8e:a6:eb:4b:81:d9:af:5a:da:18:84:e5:f7:f9:16:98:27:
         79:ea:26:8f:b6:4c:1f:cc:2f:3a:37:03:57:c9:5d:23:e5:2d:
         1f:fb:9c:58:60:b5:57:ed:0d:e0:3b:4b:7c:ff:43:b2:10:28:
         a9:12:e3:fd:5e:79:38:05:3a:64:f7:07:da:23:ea:4b:4e:da:
         d1:24:58:34:6f:68:b5:3e:65:18:17:f6:f8:3f:51:a1:1c:ca:
         b2:cd:d0:e8:f5:73:1e:af:dd:04:3d:1c:d5:61:f8:02:e5:79:
         e5:7f:48:c6:04:5c:ba:57:02:5a:d6:40:f8:23:86:da:88:be:
         31:29:4e:ca:59:d9:8e:8c:7a:89:53:03:6b:e2:b8:c8:99:52:
         90:57:b1:19:f9:84:3a:c0:7e:e1:1e:ea:61:8f:76:ae:7c:8f:
         14:87:3b:37:c1:96:79:9a:2e:54:ac:92:34:5b:cc:9c:f3:e5:
         2d:7a:f1:7f:a7:eb:53:fa:24:97:9d:d2:05:b8:80:16:cd:6e:
         a9:90:b8:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----