Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
File:                     v1Tb8A10WQyJE97Isc8ITY_PaTw.mft (raw, json)
Hash identifier:          K2kBMy7OjQ/lf+6spo7RPKrE6BikERkrfRZGU+3eBiM=
Subject key identifier:   B7:90:FE:91:31:48:AB:02:0A:9C:D7:A6:B9:FF:77:93:BB:BD:3F:8D
Authority key identifier: BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C
Certificate issuer:       /CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
Certificate serial:       01962F74941996CF0AEE1EF04A907DFD1341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft
Manifest number:          0323
Signing time:             Sun 13 Apr 2025 14:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:31 +0000
Files and hashes:         1: v1Tb8A10WQyJE97Isc8ITY_PaTw.crl (hash: b11xTKHukW2kcb8B4sIkLMKs4rvig67nawla9PEMtdw=)
                          2: wvpX23IN2w8d2-KXP6RepnCHP3g.roa (hash: hX6rM9w+qzbC1N6GJKikByFvvKJf6X+cuAHLvYTMLZU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:94:19:96:cf:0a:ee:1e:f0:4a:90:7d:fd:13:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf54dbf00d74590c8913dec8b1cf084d8fcf693c
        Validity
            Not Before: Apr 13 14:01:31 2025 GMT
            Not After : Apr 14 14:01:31 2025 GMT
        Subject: CN=b790fe913148ab020a9cd7a6b9ff7793bbbd3f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:9d:5f:42:92:ef:b3:69:17:51:29:a5:d8:33:
                    03:cc:df:ec:f6:90:b0:3a:b7:fa:4b:2c:3d:0d:d6:
                    33:24:39:85:97:2e:77:fa:87:dc:a5:1c:69:ec:0a:
                    9a:16:2d:1a:34:67:37:b8:2c:63:cb:95:78:8e:97:
                    5c:d8:8d:1b:9e:38:44:95:14:56:16:8d:f3:f9:1d:
                    5d:1d:e8:7e:36:36:4a:43:e3:3d:48:00:9d:76:b7:
                    4b:b6:bf:ce:0d:82:bb:df:62:a6:87:39:dd:8b:18:
                    7b:63:fe:f3:a3:50:9e:0e:cf:8c:d1:81:e6:2a:23:
                    6a:17:d9:46:44:b4:4a:9d:60:0e:6f:1f:5c:d4:f6:
                    78:df:bb:61:2a:6e:b5:75:5d:7e:9f:26:a4:46:5a:
                    c8:f0:77:2f:19:ce:32:c5:12:5a:74:63:f0:2d:2f:
                    4e:be:dd:04:29:dc:04:55:39:c4:ed:ee:03:f8:8e:
                    00:66:9c:cb:fe:f4:01:10:09:92:e7:59:9d:ef:92:
                    48:e4:b0:5c:d5:6c:6a:41:ac:b4:3e:aa:de:cb:68:
                    2c:f2:70:9e:8b:f4:06:ad:87:d5:ce:5d:92:9b:d8:
                    5c:b2:3c:a8:cd:8c:ee:a2:f7:87:5c:a5:a5:f3:0f:
                    5f:24:f4:fc:f6:b6:0f:34:ee:2a:ff:aa:83:9d:de:
                    7e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:90:FE:91:31:48:AB:02:0A:9C:D7:A6:B9:FF:77:93:BB:BD:3F:8D
            X509v3 Authority Key Identifier:
                keyid:BF:54:DB:F0:0D:74:59:0C:89:13:DE:C8:B1:CF:08:4D:8F:CF:69:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1Tb8A10WQyJE97Isc8ITY_PaTw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/529b28-3a39-49bf-8ef2-a47fb9a94ffd/1/v1Tb8A10WQyJE97Isc8ITY_PaTw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:8b:16:72:ce:1c:05:3f:cb:ec:86:c8:36:6f:30:99:a7:a8:
         01:63:ee:fd:dd:e0:25:f1:60:a3:da:8f:48:fa:ad:06:0f:b7:
         0e:1e:ed:10:fb:cb:0d:93:b1:41:5b:27:de:cd:72:07:df:9b:
         75:67:78:1e:64:18:84:1b:e1:2b:36:80:db:f3:69:97:8a:69:
         1b:66:fb:10:05:49:0b:c1:92:80:9f:07:4b:a8:7a:ee:05:b7:
         9e:a2:13:54:0e:8b:f0:19:d3:81:d2:92:d8:55:04:71:05:28:
         c4:54:65:2a:5a:bc:3c:c2:83:4d:64:66:56:49:2a:d8:0d:ec:
         f5:da:20:6e:83:35:09:6a:16:ea:6a:9b:9c:dd:9f:b2:ed:4f:
         c0:bd:8b:0e:aa:be:79:59:fb:42:d5:ea:d7:89:b8:40:be:1e:
         54:fa:69:05:c8:60:b2:76:56:10:4a:80:22:7d:cf:86:09:8c:
         59:47:2b:6d:dd:f7:1d:85:65:f9:1f:f0:93:1e:21:72:e7:a1:
         08:77:1d:f5:71:44:17:40:1c:d4:db:e4:98:ea:5b:34:6c:8f:
         37:95:d2:25:64:0f:cf:4b:97:29:c6:df:2f:33:37:50:f1:c5:
         9c:d9:2c:13:e6:5c:c8:4c:54:20:10:0e:40:7b:e9:24:bf:e2:
         9a:ee:93:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----