Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
File:                     tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft (raw, json)
Hash identifier:          nHcBc1NgK+FcKFLjgZrSUFSet5vABuLs/vfyuv/VuCY=
Subject key identifier:   61:46:A0:AE:E7:37:AD:FB:CD:09:BD:22:0F:83:8B:4C:4C:07:75:1A
Authority key identifier: B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
Certificate issuer:       /CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Certificate serial:       01962F74275007243BDA97C73C849B3AF2BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: TDDnhsWgxkGdG7BfGlC4CIB8hXc.roa (hash: mAFWPEFNFtu12Nez2hG2dDFI+Ij+KVUdoJCzsE5w8Wg=)
                          2: tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl (hash: NSaYMi5+nDCQOwCgW6DesHX305Px61v9jCnTxruwl3M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:27:50:07:24:3b:da:97:c7:3c:84:9b:3a:f2:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=6146a0aee737adfbcd09bd220f838b4c4c07751a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:6b:96:82:63:f8:37:30:36:3a:43:4c:56:
                    10:20:fd:aa:45:3c:b3:6c:04:ba:cf:f3:6d:37:12:
                    57:01:87:d9:8e:a1:a8:0b:f2:0f:3e:a4:68:28:bd:
                    13:9d:00:fb:6a:09:4f:7d:a5:ab:12:08:97:2a:aa:
                    26:7c:46:12:75:49:33:35:c5:c8:c1:33:86:e7:7e:
                    12:53:7c:a2:2d:67:13:49:98:84:28:5e:26:8e:0e:
                    92:9d:f2:64:17:97:22:d7:3c:52:cd:5b:fa:8f:09:
                    b5:ea:e8:8f:ae:b4:d1:1f:9e:3a:2a:93:44:70:db:
                    92:aa:cb:34:a2:1d:e5:61:14:10:28:75:00:20:e2:
                    c8:61:11:9b:b0:ae:75:6b:db:13:3d:e9:be:98:25:
                    e5:82:a3:71:aa:23:38:13:d2:9c:65:bc:d4:ed:fc:
                    66:53:e1:60:0d:cb:66:21:36:c6:19:7b:d2:2d:29:
                    51:ae:c7:0e:da:b7:0b:bc:d5:53:b1:31:ee:b4:d6:
                    37:26:d4:1d:45:0c:bc:97:ec:99:42:32:cb:c2:d9:
                    3c:0c:6f:fe:5f:1c:48:b6:d6:3d:75:6d:ec:af:e7:
                    52:d6:71:6b:f4:bb:b1:9e:7a:28:a0:24:9b:ff:7d:
                    2f:fb:89:8b:e8:1b:1e:31:5a:d0:0a:57:18:8c:a0:
                    b3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:46:A0:AE:E7:37:AD:FB:CD:09:BD:22:0F:83:8B:4C:4C:07:75:1A
            X509v3 Authority Key Identifier:
                keyid:B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:4e:b1:43:73:a3:b5:a3:6d:db:47:4c:e8:05:9a:6c:5a:a6:
         83:21:ab:bc:01:f2:2c:7d:3a:51:ad:1f:9b:5c:b6:6b:22:d9:
         b8:79:ae:0f:c7:52:1e:aa:a6:11:8c:58:66:4c:57:1b:d3:de:
         0d:9c:f3:18:a4:18:89:00:38:50:03:50:35:9f:09:4d:d5:9a:
         2b:dc:7e:95:08:69:33:c6:c6:d8:ff:39:4e:81:76:a0:d4:03:
         9e:25:be:9d:ac:b4:36:d4:f4:0a:64:21:2c:fe:a2:57:d4:8d:
         1f:50:e6:86:72:9c:c6:5c:45:57:d3:dc:38:bc:9b:4c:3c:20:
         88:1f:48:70:ee:61:b3:68:b2:31:5b:97:43:ae:ab:7f:de:f2:
         6d:1a:e6:89:db:82:b4:c2:bd:fc:22:de:1d:67:a5:85:bb:4f:
         fe:1a:4e:f4:3f:78:4f:77:ab:0b:c4:b4:2c:cf:09:cb:2b:93:
         4c:c5:78:d0:84:66:2f:04:da:8b:92:85:ee:11:69:9a:25:40:
         fb:9a:ba:ac:21:cf:ff:81:d1:8b:b1:95:db:ab:db:4b:25:c2:
         29:f9:65:a2:1c:bb:aa:ce:f3:ee:43:b0:68:a4:99:c3:2e:5e:
         6e:08:4e:64:e5:1d:21:0e:d8:4f:c4:62:bd:64:95:57:76:d4:
         2f:a9:1c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----