Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
File:                     tPM_b9KbrwPMTUha9fa3DaawCZ8.mft (raw, json)
Hash identifier:          St3YRerHrUjcsFdhskhbk7pSAkg7TTmJvIqWBNfzd+I=
Subject key identifier:   09:A6:89:6B:07:A6:C0:61:F4:F8:2F:D5:A6:2B:D9:DA:13:2C:65:49
Authority key identifier: B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F
Certificate issuer:       /CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
Certificate serial:       01962F3DC23CFE18314961A61DA00F207C20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft
Manifest number:          0DC3
Signing time:             Sun 13 Apr 2025 13:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:38 +0000
Files and hashes:         1: tPM_b9KbrwPMTUha9fa3DaawCZ8.crl (hash: H7TJF115/zJ9jhn4F+WYyMUEUXwC9hTjdJQ/eAyAu0k=)
                          2: tYPVw8LB8i24cvigRIjHBmA1vkA.roa (hash: PLxJfAKIcmuKybJlU2Vop9ZELJyvcamyBgkEBw419jw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c2:3c:fe:18:31:49:61:a6:1d:a0:0f:20:7c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4f33f6fd29baf03cc4d485af5f6b70da6b0099f
        Validity
            Not Before: Apr 13 13:01:38 2025 GMT
            Not After : Apr 14 13:01:38 2025 GMT
        Subject: CN=09a6896b07a6c061f4f82fd5a62bd9da132c6549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:cb:58:1d:ea:17:15:4a:8b:33:3c:98:81:
                    13:e1:97:ce:a5:bb:a4:a4:8e:b6:d4:69:aa:2d:7a:
                    f0:80:82:5e:43:83:fb:94:69:68:41:68:2b:48:ef:
                    0b:40:0b:92:d8:ae:8f:6c:0e:03:25:63:5d:34:55:
                    ed:7c:3e:9e:41:4a:4d:b3:4e:8a:5e:2e:96:d2:cf:
                    64:fc:0d:d8:67:c7:a4:f7:b2:a7:24:6c:93:f5:77:
                    52:3e:3f:20:23:4c:62:ff:63:99:97:c8:2a:0d:4f:
                    57:86:2b:93:ec:82:ad:3f:4b:5b:63:a0:0a:75:53:
                    77:25:1c:df:a0:ee:69:16:e4:20:b8:8f:c5:64:37:
                    27:ca:77:c3:7d:62:f2:f9:17:28:79:be:9e:23:44:
                    47:9d:f8:9b:69:b7:fd:49:fa:02:11:d5:1a:a3:63:
                    d2:f3:d5:e5:3d:fe:42:19:4f:4b:c9:95:35:62:a6:
                    43:39:fa:c2:42:3b:da:69:c9:2f:e7:16:27:ba:c1:
                    26:0e:8c:54:aa:d6:c9:72:61:14:ad:e2:82:c7:10:
                    a5:eb:3d:fb:2d:1e:b2:d0:bb:81:e7:b8:67:d1:7a:
                    32:81:d2:3a:98:4e:35:25:70:a8:65:ab:2a:0e:d7:
                    1b:05:fc:c9:18:d2:60:9c:d5:73:7b:03:28:11:24:
                    80:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A6:89:6B:07:A6:C0:61:F4:F8:2F:D5:A6:2B:D9:DA:13:2C:65:49
            X509v3 Authority Key Identifier:
                keyid:B4:F3:3F:6F:D2:9B:AF:03:CC:4D:48:5A:F5:F6:B7:0D:A6:B0:09:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPM_b9KbrwPMTUha9fa3DaawCZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/90a5cf-e484-4bb2-a285-6a49b5a31294/1/tPM_b9KbrwPMTUha9fa3DaawCZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:f8:f3:81:2b:3a:ce:82:c4:87:df:31:50:4d:22:29:66:33:
         3f:33:a7:74:dc:3e:a4:2a:68:e6:c6:fd:46:3a:88:63:0c:1c:
         62:fd:bc:fd:d0:43:6b:e4:cc:16:0e:a7:56:71:77:26:3d:d8:
         8a:f4:7e:f7:4c:26:a2:ad:01:a2:28:73:e5:28:69:d3:e0:49:
         62:2b:1b:99:d3:f3:5b:ff:b5:16:5a:bc:37:11:0e:6a:0a:6e:
         c2:24:78:52:9f:0b:92:8a:48:62:47:e3:66:ef:5d:83:42:c0:
         ac:97:3a:71:10:3c:b3:d2:4a:4b:3c:d5:c8:4a:4e:70:19:00:
         72:2d:a5:a6:76:e1:ce:22:1d:d1:1f:0b:72:d4:0b:67:8c:19:
         a0:10:44:95:35:a0:43:21:0c:c2:b0:cb:c3:05:8b:95:c6:ac:
         e3:05:d4:c2:a5:ff:80:fb:f9:0c:aa:fc:f1:fc:72:b1:0d:cc:
         c3:4c:91:90:81:07:85:30:2d:71:2d:8f:c3:4f:d5:0d:38:e0:
         55:1d:17:e1:6e:1c:d0:a1:dd:a9:d8:2a:60:a2:1b:8f:25:9b:
         81:b2:5b:45:da:02:f5:eb:64:3a:e5:28:b4:cc:f9:06:81:3d:
         c4:e1:e6:05:e1:1c:1d:41:5c:49:b8:23:fe:6e:7e:7d:ee:65:
         e3:77:c6:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----