Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
File:                     Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json)
Hash identifier:          +yRnFIq3OjPyykis5b4kqqAIfDZXZEV1IGcwkSjANQE=
Subject key identifier:   E2:13:12:57:AB:CF:DB:DD:F7:D3:92:CF:D8:AB:9F:71:96:94:00:79
Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
Certificate issuer:       /CN=029f93002d78e8e40da560c4291fb830d92dff66
Certificate serial:       01962F06B04BE257C1274C6CEABD532DBF45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
Manifest number:          1479
Signing time:             Sun 13 Apr 2025 12:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:29 +0000
Files and hashes:         1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: rjQ3ebUH3DYVTQuMWmA0upkgXlYu89+Nk//Tl2Mk310=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b0:4b:e2:57:c1:27:4c:6c:ea:bd:53:2d:bf:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66
        Validity
            Not Before: Apr 13 12:01:29 2025 GMT
            Not After : Apr 14 12:01:29 2025 GMT
        Subject: CN=e2131257abcfdbddf7d392cfd8ab9f7196940079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d7:df:e9:2e:2c:c7:be:e9:42:9e:d3:33:1a:
                    74:a5:1a:d7:28:d8:3d:ee:3d:a8:91:9a:ee:62:63:
                    f1:d3:20:53:8b:75:20:3c:2b:85:3d:5e:5b:44:b2:
                    23:2f:92:84:55:1e:01:db:97:95:b2:8b:6d:e3:e1:
                    89:ad:0c:58:91:0f:9d:1a:b8:4f:58:d2:6f:aa:1c:
                    ce:0d:70:e7:f1:f6:5f:5c:11:ab:f6:2b:5a:d0:52:
                    44:d7:ac:f6:77:ee:64:f3:37:11:fe:5e:42:9d:a5:
                    42:59:13:d7:a8:7c:ce:5e:0f:d1:34:71:d3:95:33:
                    db:da:13:13:f1:b9:6b:0a:95:bb:19:ed:d6:fa:ab:
                    84:05:24:99:ad:b1:d8:c0:92:67:fb:42:0c:8a:40:
                    16:69:f8:17:5b:b4:33:9e:1c:01:84:4e:cf:fd:9c:
                    3f:4f:5f:9c:42:8d:2e:bc:4b:ce:c4:a2:68:69:ac:
                    b9:9a:e3:0e:08:f8:0f:0f:1a:3f:59:8d:b9:02:ac:
                    3d:b3:03:32:a3:1b:ca:e4:8e:9c:e7:db:08:8d:41:
                    f5:67:ee:ad:96:43:9c:32:86:9b:e9:bb:9f:a7:a5:
                    bf:7b:9e:26:06:d1:6f:80:d4:58:ab:57:ac:fc:0c:
                    96:6d:12:29:80:f6:58:f0:e5:3c:65:ae:5d:29:c7:
                    7a:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:13:12:57:AB:CF:DB:DD:F7:D3:92:CF:D8:AB:9F:71:96:94:00:79
            X509v3 Authority Key Identifier:
                keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:07:b3:f2:08:b9:b4:84:b5:32:7f:e3:1b:0b:7c:a2:80:dd:
         55:36:b0:c6:5b:91:01:c9:83:0e:03:5c:66:4c:e9:21:dd:49:
         15:01:f6:23:d6:ba:98:9f:f6:de:55:41:8c:0f:96:5c:64:26:
         c8:42:70:31:7a:89:25:3d:a2:f9:00:1e:d6:01:48:2c:56:f9:
         db:71:3f:6c:74:90:e2:fd:37:1d:0d:36:a9:39:26:81:3e:90:
         27:4f:46:e4:65:85:d0:24:c2:53:94:5e:6e:ec:99:60:fc:cb:
         04:49:b2:cd:7c:3d:8b:4a:50:45:0d:c7:9a:ea:1e:52:91:f9:
         8b:b6:53:52:5f:f1:84:ae:e2:f5:7f:33:04:48:61:7a:35:d4:
         d8:fa:67:46:20:63:f8:ea:3c:d9:5d:4e:49:e9:b9:31:8e:b2:
         b1:ac:98:65:d4:e3:a7:aa:6d:a0:50:d2:f7:f8:0d:48:55:ea:
         b4:db:ea:fd:ca:e0:b6:bf:9d:d6:32:80:2a:61:80:fe:c5:cd:
         31:68:43:3b:85:70:bc:26:0a:ab:99:f7:cc:d7:27:00:7b:06:
         05:30:e3:86:b0:b4:ca:90:46:0e:06:01:14:f0:40:f6:b4:e9:
         05:7e:b6:85:7d:1c:5a:5d:06:7f:8b:00:32:fd:5a:63:e0:a9:
         78:60:0f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----