Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
File:                     tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft (raw, json)
Hash identifier:          /TFWTA5KsSgHYk2nbfmhBFiQy3nu1aFBI3oxeQGtJgY=
Subject key identifier:   45:98:19:4F:10:CF:6B:BD:C0:78:66:6A:14:01:D0:CE:89:9F:D1:8D
Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
Certificate issuer:       /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Certificate serial:       01962F06E3EDC646448E45FA88B49C27743C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 12:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:42 +0000
Files and hashes:         1: HeDUncvNrC9DXvqHmX3LCuEEQFk.roa (hash: pkL8awVC+vif3Sv8BEo/gQroGPTBLCBBOJrEXIA/gLU=)
                          2: tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl (hash: cmwkQFOlhRJoUi7pn8GjvzuKAwPClZy+ZyxhroUrQaM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e3:ed:c6:46:44:8e:45:fa:88:b4:9c:27:74:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
        Validity
            Not Before: Apr 13 12:01:42 2025 GMT
            Not After : Apr 14 12:01:42 2025 GMT
        Subject: CN=4598194f10cf6bbdc078666a1401d0ce899fd18d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f0:ac:ab:56:9f:74:9f:11:7d:a0:30:7c:cb:
                    fa:6d:60:87:d5:12:76:08:c4:2e:93:c1:ed:3a:32:
                    f1:55:8f:11:8b:67:f4:28:8b:c9:3a:10:36:b6:98:
                    ef:d1:fd:d6:a4:cf:aa:10:a2:7d:cc:35:56:13:ba:
                    01:3a:d9:96:c6:f1:7c:6c:16:82:d5:85:4c:0e:dd:
                    8c:a5:20:0e:a8:8d:e9:f0:6a:b5:52:87:8e:3b:b7:
                    e6:1e:48:cf:b3:a3:2b:ab:e5:08:8b:f0:e8:77:a0:
                    26:f1:8f:37:67:01:04:fc:33:85:f9:30:ec:be:bc:
                    41:92:a7:59:ba:47:00:13:e5:2a:fe:b5:c2:9c:5f:
                    f0:81:25:a9:67:d2:8e:d0:5f:eb:27:f1:dd:53:f1:
                    64:5f:e5:9e:d0:16:5d:31:a4:b4:3b:71:91:94:b4:
                    fd:7f:15:6a:be:72:4d:e9:d0:df:ef:e3:5c:48:d9:
                    79:1c:9a:b7:67:8d:4e:54:28:7d:e9:86:69:d9:fd:
                    e3:74:69:60:b5:15:61:c0:7d:f2:bd:e8:18:01:ff:
                    8f:24:5a:6a:01:47:43:ed:41:57:59:b8:6a:83:87:
                    39:c4:61:3d:86:8c:d2:86:74:29:a1:e5:f3:8d:79:
                    3f:82:91:0c:5d:92:1c:3d:1c:12:88:24:04:3b:86:
                    0a:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:98:19:4F:10:CF:6B:BD:C0:78:66:6A:14:01:D0:CE:89:9F:D1:8D
            X509v3 Authority Key Identifier:
                keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:29:1a:c5:48:d1:cc:a6:f7:f9:dd:b6:9d:85:4f:33:fb:59:
         f7:1b:2e:c3:6e:b3:ab:36:af:27:83:5b:5d:df:fb:6d:83:ee:
         16:da:17:a3:a2:1b:a8:78:63:53:b6:09:0d:ff:06:47:53:c8:
         6f:df:9c:a6:b7:da:6c:ff:64:12:ce:b2:21:3d:c4:c4:3b:4b:
         c5:21:f1:25:4b:ba:51:4c:28:03:a1:3b:23:39:b9:51:8d:66:
         55:a4:ab:8f:72:7b:e2:0a:97:39:e0:6b:c0:cb:e8:8a:ac:a8:
         13:d4:da:58:46:91:f9:55:34:63:e8:5a:5e:f3:42:83:85:76:
         76:25:32:bf:79:7b:81:5a:28:d0:ca:95:3c:c5:ad:a2:78:d3:
         ae:ca:23:51:55:ab:2b:c3:1b:24:35:3c:6e:e4:8a:50:a9:d0:
         97:fd:88:7a:3b:50:ef:66:78:bd:f3:e8:0a:e0:87:80:9f:41:
         70:93:14:a3:53:38:8d:62:b1:dd:7b:8a:ba:3f:28:fc:1a:a8:
         b9:95:36:82:74:e5:b1:4e:74:6b:ca:de:19:6e:1a:26:53:a8:
         94:1b:30:91:72:44:fc:9b:f8:2d:2a:25:e9:7e:37:59:03:33:
         72:0f:a4:99:dd:c1:7a:62:48:b9:0c:30:b4:cd:81:87:ad:ae:
         54:79:4b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----