Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
File:                     TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft (raw, json)
Hash identifier:          //0J3gRRw0A8jSv30JP/ms/JIKLBY33vFum4KJ6UN7Q=
Subject key identifier:   0D:63:2F:09:2E:12:6D:8A:09:4D:FD:0A:3B:55:87:03:A4:3E:16:1C
Authority key identifier: 4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9
Certificate issuer:       /CN=4c39055a6990b82408cf1abf29313780e249a4c9
Certificate serial:       01962ECF8F4701D56CA8AB2DC5C04B716DA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft
Manifest number:          1053
Signing time:             Sun 13 Apr 2025 11:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:16 +0000
Files and hashes:         1: 0Y15xTEGHWqAVJeDnj84hoOI0tg.roa (hash: x9AqfYccJqcsHyWL4/sbLsYAD4D5JWU2OTOL9ya8Qzo=)
                          2: IYab2KOA6Rs-FvpcDRNq2DIlRwA.roa (hash: IVe8cPHTrjQPMjYgTeQH7fMCvrM38QVBDNRacJOqgtc=)
                          3: TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl (hash: vJ4LA0iGtIFpAyC4+zR+zZwXsWhQ3U3hkq13hM4xshM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:8f:47:01:d5:6c:a8:ab:2d:c5:c0:4b:71:6d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c39055a6990b82408cf1abf29313780e249a4c9
        Validity
            Not Before: Apr 13 11:01:16 2025 GMT
            Not After : Apr 14 11:01:16 2025 GMT
        Subject: CN=0d632f092e126d8a094dfd0a3b558703a43e161c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3f:d1:57:10:84:28:05:4c:52:d8:f7:e3:0d:
                    33:54:29:74:4e:e6:b9:d5:71:ce:6c:8f:95:a7:cd:
                    79:0f:81:59:52:f4:af:f9:74:37:23:26:08:20:b2:
                    b2:8e:ee:a0:ad:44:08:2a:22:6b:8d:47:93:19:31:
                    89:d9:00:70:2c:f8:7b:c6:3c:fe:8f:a5:82:76:e7:
                    8f:c7:3d:c8:d7:08:43:7b:89:4b:21:da:d4:76:cd:
                    a0:92:23:b8:e5:a3:06:ec:d1:dd:f7:2a:5d:be:b5:
                    17:e8:14:66:2b:77:0a:0d:37:eb:b0:01:ea:14:8e:
                    87:19:4d:a6:99:62:4b:09:8c:2f:25:f9:c4:6c:a1:
                    b7:3e:e3:21:9d:53:aa:0d:91:17:77:7f:74:28:e9:
                    8e:77:ce:eb:09:74:68:0f:0b:85:8b:37:78:2e:88:
                    97:f5:c8:0f:86:39:a9:d9:43:7c:5f:f6:23:c1:d4:
                    ae:ed:a9:31:e3:fc:cc:67:73:17:c1:f7:c4:16:de:
                    a6:05:bd:fb:35:f8:b9:2d:52:ae:4e:5c:a5:35:c8:
                    9d:58:69:77:c6:72:7b:7f:14:1b:fa:63:cc:bd:c5:
                    dd:c6:1b:7b:c5:55:0d:c0:25:e4:db:02:f6:20:a6:
                    0d:1c:d8:b3:63:60:f0:bc:ab:31:6b:8d:80:99:09:
                    b6:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:63:2F:09:2E:12:6D:8A:09:4D:FD:0A:3B:55:87:03:A4:3E:16:1C
            X509v3 Authority Key Identifier:
                keyid:4C:39:05:5A:69:90:B8:24:08:CF:1A:BF:29:31:37:80:E2:49:A4:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDkFWmmQuCQIzxq_KTE3gOJJpMk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/df6e25-923c-4838-864f-d4b37e44ab7c/1/TDkFWmmQuCQIzxq_KTE3gOJJpMk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:f7:36:b1:90:20:6a:7b:e0:66:a7:40:19:66:c3:88:eb:e6:
         ea:15:ab:4b:f2:e6:6d:16:35:13:c6:e7:30:97:11:92:9b:79:
         22:8c:7d:3d:df:19:ea:60:62:86:bd:fc:45:a0:1e:88:91:7e:
         23:ed:3d:47:be:58:ba:7c:e1:b4:23:6b:2f:66:52:45:1b:bf:
         51:dd:fc:03:7a:49:3d:ad:a6:f4:06:fe:29:0b:70:6c:fb:ce:
         36:c8:de:a3:bf:6b:77:06:89:30:08:d9:60:f2:fc:62:5c:df:
         e5:59:43:36:9d:15:f3:bb:0c:26:b6:f5:d3:2a:f3:4b:d2:5f:
         fe:d8:58:5f:33:4e:4a:6f:08:ae:16:0c:70:12:ac:ae:e0:9c:
         b0:32:63:bd:a1:95:82:13:6f:8f:b5:0b:b6:86:69:6f:d2:19:
         c5:90:19:14:da:ae:ef:35:72:89:75:29:82:ea:c0:51:87:a6:
         1e:4f:40:84:d3:7d:b3:4e:50:dc:ea:77:66:58:d4:b8:95:82:
         8c:a6:a9:89:39:d2:eb:c7:59:3b:db:f9:63:b4:67:57:c4:bb:
         87:69:57:40:dd:d5:8d:b7:cc:14:75:e9:5e:0b:ab:7c:d5:8a:
         db:45:55:f0:56:8a:5f:df:cc:29:a1:65:0c:87:49:75:89:8a:
         1d:f4:ef:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----