Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File:                     TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier:          NMgqYIMyt7+XLB9hplK+CZeD1PaAXYpAbebUmMq1EU4=
Subject key identifier:   7E:71:C4:A9:5B:17:C5:57:7B:32:D7:8E:2F:7E:CA:B3:08:7E:FC:64
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer:       /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial:       01962E988515EFD763B9C67C76F209FF42E2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number:          14F8
Signing time:             Sun 13 Apr 2025 10:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:09 +0000
Files and hashes:         1: FAOYdRa4uoJSdoI3e8-q11iXfiE.roa (hash: FqMdw256VpvhGAmP1nnLAhKDEQ1LXuBv38BkFocmRoU=)
                          2: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: Qu1LHBa7P+j/lxlsYDumZd7JWWfKVxjOoZgwulsuUdo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:85:15:ef:d7:63:b9:c6:7c:76:f2:09:ff:42:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
        Validity
            Not Before: Apr 13 10:01:09 2025 GMT
            Not After : Apr 14 10:01:09 2025 GMT
        Subject: CN=7e71c4a95b17c5577b32d78e2f7ecab3087efc64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a1:d4:8b:25:51:96:bd:47:2b:87:26:b1:4a:
                    14:df:9e:8f:57:bc:76:fe:bc:a9:f6:de:57:27:e2:
                    c4:9c:e6:2d:20:d2:6c:e6:c6:eb:36:44:67:f6:0d:
                    28:90:b6:a2:9b:a0:8a:1f:80:20:a8:b9:55:f1:84:
                    08:29:a3:0d:6d:2f:3d:68:79:a4:78:c4:cb:26:4b:
                    19:f1:76:8e:a5:be:d1:4e:8f:8e:43:fa:28:ef:7d:
                    95:11:0f:04:7e:ac:b0:30:4e:50:6c:3a:66:35:21:
                    68:bf:c0:60:ba:fe:60:cb:95:b5:ba:0f:67:41:f1:
                    f0:84:d5:73:e6:d2:14:42:96:26:f1:16:05:5a:4d:
                    2f:cd:33:79:35:9b:b7:5c:7c:ab:d7:d7:b9:9b:55:
                    44:6e:92:ab:00:06:55:9e:a6:6c:f9:64:75:12:9d:
                    bc:04:f3:dd:fc:17:0b:7b:49:3d:e4:c8:06:70:c3:
                    8c:47:ad:81:db:ba:fe:d3:2b:69:35:a5:42:f3:c1:
                    a6:46:dc:09:8d:ba:ea:d1:8b:59:f6:c7:6d:2b:31:
                    42:1d:d4:eb:f3:e2:ce:68:5d:f6:5e:a6:e8:42:6c:
                    18:b3:22:32:4e:0f:40:d1:71:51:ca:15:31:19:c6:
                    c9:96:97:18:6f:f0:48:af:50:01:a1:44:b7:5a:e7:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:71:C4:A9:5B:17:C5:57:7B:32:D7:8E:2F:7E:CA:B3:08:7E:FC:64
            X509v3 Authority Key Identifier:
                keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:0b:cc:89:66:a5:ad:a9:1d:01:d0:d9:90:38:de:6a:86:1e:
         e7:52:20:62:3b:80:87:78:48:bf:71:d1:52:19:55:c2:56:a5:
         44:ab:22:83:a7:9f:e3:ea:31:6b:74:6f:cb:5c:30:8c:12:cc:
         59:1a:3d:2a:7a:80:0c:a4:3e:77:57:89:4c:f0:a0:d9:81:d9:
         cc:4c:09:63:70:0f:4c:7b:1f:60:df:0d:6c:75:68:55:b7:59:
         42:d0:82:76:d2:32:89:34:b9:68:95:d6:33:dd:bc:1b:5c:1b:
         be:fa:46:f3:76:3e:27:62:a4:4b:ac:e9:ce:3b:66:95:a5:66:
         e2:df:7e:da:70:b4:be:fa:31:e2:6c:4c:6a:c7:fe:98:d0:7f:
         04:ab:c5:96:5a:f2:1c:f1:e7:01:9b:ce:b4:ab:ce:8d:f6:a9:
         df:97:39:52:10:f0:98:fa:52:e6:3e:d5:8f:04:f7:fc:16:76:
         cb:cf:7e:bf:54:fd:91:81:bf:09:9c:33:57:23:e0:41:f3:b8:
         10:9f:78:c4:79:b3:40:dc:b3:09:dd:cf:f3:49:30:5d:3f:98:
         25:92:f0:39:d0:83:96:5a:f2:be:8e:f8:77:03:42:10:cd:ec:
         3f:5c:f5:bf:ce:c8:83:30:8c:0b:34:38:6f:47:79:c1:50:6c:
         4c:ef:6f:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----