Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File:                     TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier:          c7LEPNLw4BS60U6Swpkmx30JTLP4/H7rmFfav8PuVvo=
Subject key identifier:   D3:CB:CC:97:A6:A9:92:65:35:68:AA:53:FE:DC:75:9B:95:40:35:A1
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer:       /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial:       01962E99613A9F31F1814675787D4E817CBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number:          11D8
Signing time:             Sun 13 Apr 2025 10:02:05 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:05 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:05 +0000
Files and hashes:         1: H36xXwuB9FJ3ESjpo_XmH_KZ2R4.roa (hash: CUtTMRPtfP9rNsMoQeZ2J44Z+jwTnsWRsKW5k/0LKug=)
                          2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: +pzq8pNrsQIlcBL84w1jVUPGTekXtN2t1sZ6TNltTME=)
                          3: tpqvdlW8wuSttlFQd80uk4F5YQY.roa (hash: yDvp+gGPiyhARcManoLZEVb02KcZ7k4JkC3clhGu75w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:61:3a:9f:31:f1:81:46:75:78:7d:4e:81:7c:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
        Validity
            Not Before: Apr 13 10:02:05 2025 GMT
            Not After : Apr 14 10:02:05 2025 GMT
        Subject: CN=d3cbcc97a6a992653568aa53fedc759b954035a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e7:ae:12:b7:b2:1d:0a:f9:f3:73:f8:19:70:
                    27:db:85:11:b6:ec:fc:44:17:0c:04:0a:18:01:2d:
                    80:a3:04:06:d4:5b:49:9c:33:43:12:8f:06:1f:51:
                    3e:ab:95:41:15:86:dc:13:02:5a:8b:78:41:1a:2c:
                    a6:1e:d3:51:4f:78:71:df:1d:07:76:6b:eb:d6:c8:
                    7d:fd:a8:ce:1c:eb:27:fb:fe:71:ba:48:58:e3:7d:
                    0b:67:8f:a9:ff:53:14:1a:12:96:5c:6e:7a:50:2d:
                    cc:16:06:5b:84:36:dc:86:d4:60:5b:6b:66:20:27:
                    82:41:de:51:2a:27:81:9b:a2:53:20:6e:51:ee:9a:
                    2c:2a:e4:1c:87:26:8c:93:81:be:4c:5c:7e:56:fe:
                    cb:98:17:6e:a4:3c:32:ae:43:25:6b:99:f9:b2:ce:
                    38:0c:8b:e9:38:9c:df:84:e2:2a:3b:ab:33:7c:fc:
                    9b:0b:75:ff:57:3d:8e:4a:be:dc:e2:c0:c6:1f:c3:
                    af:c3:96:bd:db:20:26:76:8b:ee:39:16:c3:80:c7:
                    5e:cc:5a:50:27:94:99:6a:4b:8b:31:60:6a:48:e2:
                    54:f6:4a:2c:13:06:a0:c6:bb:c2:76:1d:7e:69:3e:
                    07:71:80:6b:26:00:a3:ed:bf:67:b6:f5:b0:04:ec:
                    e3:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CB:CC:97:A6:A9:92:65:35:68:AA:53:FE:DC:75:9B:95:40:35:A1
            X509v3 Authority Key Identifier:
                keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:b9:bc:b5:fb:16:e0:b6:32:48:40:68:16:9c:17:7e:f0:96:
         bf:a9:9a:82:4d:ec:79:36:87:bd:73:e5:b5:b6:5c:c1:e5:1b:
         da:fa:53:b1:e9:1c:31:47:7a:15:52:5f:f6:d7:fc:b3:f5:5c:
         cc:47:fc:90:28:92:79:ea:35:bf:84:11:bb:5c:cf:e3:b9:ed:
         4b:c7:4a:b2:f1:4f:b5:a8:d8:b0:3f:98:01:b8:b9:f8:27:66:
         0a:aa:b0:1c:e9:40:90:2d:fb:d2:5f:85:a2:bc:54:fe:75:87:
         a1:d9:50:93:a1:17:69:cd:a1:73:71:2c:c0:17:58:f7:b7:88:
         67:f0:18:4f:8a:f4:86:fb:42:65:4c:43:8c:d9:8f:1d:3f:6c:
         a2:36:6e:d7:9e:82:fa:bb:f6:3d:f5:5c:8c:c7:41:9d:ec:fe:
         f7:37:89:55:88:e1:26:11:2c:82:b6:25:0f:56:d5:12:23:2d:
         ec:d3:2f:86:6b:fc:3a:72:f5:fb:94:79:ac:c9:18:da:10:80:
         13:34:28:b6:75:55:f6:67:c5:0d:4a:10:b6:f0:04:b7:ae:1f:
         5e:f0:1b:c4:fc:6f:02:20:ba:4d:28:1f:5a:6f:4f:ba:6a:97:
         37:aa:5d:be:95:76:f7:92:af:4c:2b:c5:d3:bd:0f:2c:74:17:
         c2:94:24:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----