Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
File:                     TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft (raw, json)
Hash identifier:          kKWQpRonYjeZkA8+4i020lkPZNNLXVOJsX6itKKiNNQ=
Subject key identifier:   B7:22:8C:F3:8D:B2:C7:50:A4:20:F4:35:DC:E5:D8:9D:A4:F1:D9:A1
Authority key identifier: 4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21
Certificate issuer:       /CN=4c101ff51b67eefe0d67800e76d3606df4c94721
Certificate serial:       01962F06E6D7ADA5288451A36BFE5AC58D16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft
Manifest number:          045B
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl (hash: ldAACMY35b9UTN/3q2634GgCI7gxwlUBulPLxcUqEXw=)
                          2: cri3ULh6Rj8r6ZDUmdSIkYBmP1o.roa (hash: Lisc7jMorS/4tIMBDxqrdkl7lwX530FUMpT0ozDszqE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e6:d7:ad:a5:28:84:51:a3:6b:fe:5a:c5:8d:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c101ff51b67eefe0d67800e76d3606df4c94721
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=b7228cf38db2c750a420f435dce5d89da4f1d9a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c6:35:12:1e:31:6e:18:2d:e0:27:e9:e8:e9:
                    5e:28:c5:ff:77:56:c5:99:00:55:c9:9f:cc:74:12:
                    fc:a2:8d:6b:ee:d2:d7:79:6d:ed:e7:5a:9e:be:21:
                    71:93:82:9d:1b:e4:f9:ed:bb:ef:5f:ce:58:ea:da:
                    14:0b:00:90:2a:f1:a9:09:64:bc:42:3a:c0:b6:4c:
                    21:87:58:21:b3:36:7a:d2:91:6c:5a:25:ce:0e:4e:
                    d2:b8:4e:73:77:a4:f6:4b:4e:9e:d9:2f:78:b2:c0:
                    cb:1c:33:d9:05:93:ff:37:ef:d4:82:ce:49:6f:f3:
                    63:83:67:ab:a2:bb:23:41:59:44:bf:9b:83:1e:e2:
                    c5:18:c4:85:b1:d1:a4:d0:a1:f3:fb:8d:60:ab:08:
                    16:e2:80:79:2f:cd:c1:15:d6:5a:da:a3:59:57:cf:
                    e7:d9:f4:6a:98:7e:25:10:c6:e1:0a:4a:f9:96:97:
                    e5:e7:f8:48:36:7e:9f:a0:f3:fa:e8:6f:95:54:cf:
                    37:4e:e5:91:f4:0c:19:ec:46:50:80:e2:de:67:ad:
                    5d:c0:0b:e3:da:44:ec:6e:c0:44:14:61:9d:2b:a6:
                    7f:1f:9f:3b:9a:8a:9c:7a:e7:93:ea:c4:8b:57:3a:
                    82:ef:08:0b:0c:23:4d:60:ea:d9:2b:99:67:34:1e:
                    94:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:22:8C:F3:8D:B2:C7:50:A4:20:F4:35:DC:E5:D8:9D:A4:F1:D9:A1
            X509v3 Authority Key Identifier:
                keyid:4C:10:1F:F5:1B:67:EE:FE:0D:67:80:0E:76:D3:60:6D:F4:C9:47:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/59dcbd-78bf-48ed-954d-ccaa6eb3c513/1/TBAf9Rtn7v4NZ4AOdtNgbfTJRyE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:25:4f:b8:d2:13:e3:9d:4e:99:b1:7a:b9:b0:ca:0c:eb:1c:
         0b:7e:90:58:dc:44:37:fa:fb:4f:7a:27:d1:79:fb:7c:d7:62:
         9a:7f:d8:64:65:74:59:13:f6:35:cc:e9:6f:1b:f3:9d:c4:5d:
         b4:55:61:04:f1:eb:ba:6a:e3:85:d3:8f:97:b8:f1:bb:7b:9e:
         86:8c:9b:d6:7f:33:c1:bb:0c:5b:0f:68:28:85:11:f9:0b:3a:
         19:04:31:14:bd:eb:20:4e:d5:de:76:ce:ce:80:a5:82:da:f8:
         7a:0e:c4:01:04:ba:67:06:2f:3a:39:f6:53:60:7b:95:84:d4:
         fd:aa:76:c1:73:af:5a:0b:54:12:c9:ef:79:44:11:77:d3:5d:
         77:17:df:6c:9c:a6:59:fc:c8:e6:3f:59:7d:7f:83:94:4e:c7:
         39:2e:f7:b8:47:a5:98:37:87:cc:4b:ec:ad:06:52:c7:be:c3:
         51:ac:79:3d:c6:35:e7:3b:dc:61:77:6f:c1:f6:b8:77:cb:f5:
         50:9a:38:3b:81:6b:d8:b0:77:59:8a:a7:e5:c1:6d:44:92:95:
         84:19:b8:be:52:2f:3b:b8:1c:90:ff:2a:3b:33:57:09:e1:f9:
         c5:d0:5e:f5:43:f4:40:b4:b1:5d:5a:13:a0:fb:b7:8f:aa:bf:
         c6:06:a5:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----