Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
File:                     TfkmWGAQlO1kmFxkxpUr40FjAc4.mft (raw, json)
Hash identifier:          jWHkwgdvblfCMqFSnc5w0DUVEb2A3vZVAQUq+DNDo1g=
Subject key identifier:   50:35:31:06:10:2D:3D:DE:C0:25:5E:57:65:66:1E:3F:1B:DB:72:B4
Authority key identifier: 4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE
Certificate issuer:       /CN=4df92658601094ed64985c64c6952be3416301ce
Certificate serial:       01962E98E78D79E24B0EC73C6C851A08B3B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft
Manifest number:          0755
Signing time:             Sun 13 Apr 2025 10:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:34 +0000
Files and hashes:         1: 42VDtF9LMj3RUZlBTr5Tpxb7XhY.roa (hash: 06Fp4iuAbTOsazThfCr6hEmyN81BPyfi3nXeyKKT6d0=)
                          2: TfkmWGAQlO1kmFxkxpUr40FjAc4.crl (hash: B4ZP6BbEERCfNWdVqUDbWy3H3jltONTed3AZMHvwlEM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e7:8d:79:e2:4b:0e:c7:3c:6c:85:1a:08:b3:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4df92658601094ed64985c64c6952be3416301ce
        Validity
            Not Before: Apr 13 10:01:34 2025 GMT
            Not After : Apr 14 10:01:34 2025 GMT
        Subject: CN=50353106102d3ddec0255e5765661e3f1bdb72b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:94:b6:72:ff:10:83:d2:84:4b:47:4a:df:9c:
                    0f:f8:7f:ff:da:43:5e:24:0d:41:be:0d:ed:58:9e:
                    50:02:6c:65:45:bf:32:0e:48:c3:ab:bf:68:e5:1d:
                    33:ab:08:5e:fc:eb:d2:34:88:3e:57:36:ed:87:31:
                    6a:74:9d:35:a9:43:7a:b8:fd:63:1d:3b:b6:41:da:
                    41:4d:22:d4:e9:47:97:be:78:98:5e:62:f1:ea:7c:
                    55:1a:9d:55:5a:cb:72:75:81:d4:29:e3:b4:a0:a9:
                    c5:be:38:72:6c:1d:1c:fd:94:b2:2b:ea:8e:68:3b:
                    02:18:06:d0:da:29:6f:bd:c6:5b:61:79:19:50:11:
                    bc:60:63:05:44:35:fe:17:93:99:0d:8d:0d:e5:d6:
                    50:e0:79:0b:bd:e6:7c:d3:b5:21:b9:5c:f4:61:27:
                    83:4c:e6:f6:62:fa:1a:f4:f8:52:cc:19:8b:ff:63:
                    0a:a9:fc:24:ae:f1:99:1e:7e:9e:64:80:c9:85:e5:
                    76:cf:57:73:ea:e5:ee:68:3c:17:c9:d4:8e:52:c1:
                    44:ac:fb:2c:52:dd:0c:fb:04:aa:5a:2e:b0:36:5b:
                    97:b3:74:04:55:bb:4b:a4:5a:56:8c:c8:fe:c5:ed:
                    f3:cd:1b:93:57:f6:dc:01:00:ef:fe:4a:7c:0f:fd:
                    80:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:35:31:06:10:2D:3D:DE:C0:25:5E:57:65:66:1E:3F:1B:DB:72:B4
            X509v3 Authority Key Identifier:
                keyid:4D:F9:26:58:60:10:94:ED:64:98:5C:64:C6:95:2B:E3:41:63:01:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfkmWGAQlO1kmFxkxpUr40FjAc4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/a9e57e-2479-4576-b275-87433157a25b/1/TfkmWGAQlO1kmFxkxpUr40FjAc4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:ef:86:42:19:53:39:f7:87:04:e1:45:74:5a:c1:dd:ab:b3:
         fc:5a:73:af:04:05:64:c5:8a:47:f5:3b:8e:d4:bd:b5:bc:63:
         4a:b9:fa:2d:68:24:bd:e6:67:47:d1:d8:6a:51:98:83:49:ef:
         1a:5f:58:b5:a0:6c:32:58:c4:54:4b:70:7a:fb:54:b4:f6:b2:
         f1:56:0a:7f:75:bb:64:ee:fe:13:26:ba:e0:99:d9:4d:05:af:
         b8:b6:04:10:e8:1e:4a:ac:81:0f:c0:98:f4:3d:4b:05:ec:6d:
         c0:53:83:51:1d:31:2d:be:87:a9:6e:19:f2:cd:76:9c:ae:ae:
         01:81:ff:6f:f3:61:c2:16:a9:80:86:4f:42:74:29:89:0f:11:
         5d:6f:d8:a8:05:dc:3b:a5:7e:9d:34:bc:e9:80:b0:32:1c:40:
         73:3f:48:0e:31:02:e4:03:d4:84:a6:c8:60:fe:d5:72:c7:ff:
         2b:ac:a1:0f:89:e4:9e:27:d6:44:a9:eb:58:f6:9a:ae:13:23:
         a3:74:58:18:87:64:4e:61:43:b0:cc:3d:47:25:1c:93:4d:9a:
         aa:40:92:f1:5a:94:65:48:84:7d:e5:13:2f:ac:91:a2:2a:69:
         b4:5f:5e:5a:6f:da:f9:e8:f8:db:eb:97:a5:52:c5:3d:35:22:
         a0:fb:04:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----