Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File:                     TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier:          T95V3utKOKzJNiJZ6UBDNP/EJa1/OH71XAsivDiVrNM=
Subject key identifier:   86:1F:E9:58:E3:88:73:15:9C:64:BA:D3:CA:E0:80:7C:B5:2D:52:F5
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer:       /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial:       01962F3D90A9E993A1250FEF2430986B4330
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 13:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:25 +0000
Files and hashes:         1: LHdFFtkhND-G29Bb5TNwX3ZX6HI.roa (hash: 5JCuzcczihsYGo60q4ytQ60HO2vUMA1Wb8XrWH6WiqE=)
                          2: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: Vx837r9BrltBDR7dxwrIZQeyYJX6AJh5agh34M5muIY=)
                          3: VYrJyKdSTfJ9aOSPJMCRhItn6O0.roa (hash: EVl6QPoQm24Wnsg0W0HBnWjfCtTCiCv6xfCekdHCwzI=)
                          4: XGm_swis7gPqLxLCw4_WpqKe8Ac.roa (hash: HuoRGpzlvzmJtj6Rn/56OaSHzb/3wfWOGTlv62srzB8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:90:a9:e9:93:a1:25:0f:ef:24:30:98:6b:43:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
        Validity
            Not Before: Apr 13 13:01:25 2025 GMT
            Not After : Apr 14 13:01:25 2025 GMT
        Subject: CN=861fe958e38873159c64bad3cae0807cb52d52f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ba:4a:5c:ad:d4:ca:f5:07:47:3c:af:59:56:
                    ba:0f:6b:f4:53:d9:2c:d8:49:df:8d:88:fb:82:34:
                    d3:2f:ac:b1:a1:ec:28:8a:c7:36:a6:c9:18:7b:40:
                    72:04:8f:45:f8:49:45:93:53:e7:22:51:b1:3b:33:
                    db:97:8a:04:e2:91:41:76:3f:b4:03:6b:8a:4f:47:
                    c7:b2:2f:5f:68:4a:81:54:38:cb:5b:07:37:bc:97:
                    ce:b9:e7:f2:88:bb:0d:e0:69:45:d5:89:f7:1a:a5:
                    50:11:de:0d:38:7c:cb:71:2a:76:fe:d7:70:58:23:
                    9b:0f:cb:9c:83:fc:9a:52:41:75:85:58:b7:7d:33:
                    7c:b4:56:6d:03:04:25:05:38:e2:64:40:33:2a:f5:
                    ae:39:60:21:7d:b7:6c:1d:4b:46:d4:25:1a:04:b0:
                    cb:d6:3a:23:9a:7a:97:1f:51:f7:e8:c3:24:76:1e:
                    88:3d:a0:2e:b7:9b:5f:20:08:a8:ef:e2:ef:0a:50:
                    83:5c:35:9c:86:89:6b:2a:7f:dc:57:87:13:00:a3:
                    ec:b4:23:93:1f:65:e6:64:76:8b:8b:50:55:39:dd:
                    6b:b2:2e:48:4c:05:48:75:a7:39:8e:3b:0a:ea:cb:
                    25:3e:56:15:75:bd:e6:84:d5:64:1b:cd:40:35:17:
                    6a:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:1F:E9:58:E3:88:73:15:9C:64:BA:D3:CA:E0:80:7C:B5:2D:52:F5
            X509v3 Authority Key Identifier:
                keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e8:2d:13:d2:58:ef:bc:3d:6b:fb:73:37:b2:d8:18:99:17:
         2f:c9:c1:c5:54:b8:7f:e7:3d:81:d5:29:e6:54:8c:29:58:a2:
         fd:db:c5:bd:67:e2:4d:00:f8:b0:60:63:f4:4d:d3:c5:8d:4b:
         bc:a3:68:cb:47:f2:17:38:26:28:32:04:d4:26:36:85:6b:81:
         ef:d8:8e:c0:a7:07:d9:8e:89:ef:76:54:03:c3:72:bd:6b:e3:
         69:ff:9f:2d:76:dd:0e:93:3f:53:3e:24:10:9b:1f:dd:5c:87:
         c4:f6:1a:40:44:31:35:1b:36:2f:34:96:e2:df:4b:16:ad:1c:
         a1:e3:50:ba:df:0c:0f:a3:a4:90:ab:b9:2e:58:a5:44:ea:d1:
         53:8f:ad:1a:51:86:e6:20:e1:7f:7d:ae:d9:fb:96:43:ba:b4:
         ed:90:7e:23:f2:e8:4c:4b:5d:78:3c:38:94:cb:e2:96:94:0b:
         6e:f0:8b:d2:10:0b:06:9a:a6:57:11:01:84:80:0f:00:31:7a:
         a7:62:3d:74:d9:3a:08:db:0f:41:d2:c8:f3:a0:8d:09:25:51:
         54:62:c1:f5:0f:23:5c:43:f3:0c:5a:97:d6:f0:27:3e:15:82:
         ab:81:f2:df:b5:c8:8d:13:b6:67:11:48:fa:19:51:44:1b:02:
         02:00:e3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----