Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
File:                     tjowlEOcrA9VVwEobNVDc7zmy1A.mft (raw, json)
Hash identifier:          hZGhb8ZQha63zT0RenFjRgi3SnPw32h/LFoayr1Dnwc=
Subject key identifier:   9D:6C:BB:6C:8D:BF:73:50:E7:9A:DD:1B:C4:00:03:96:4A:41:72:69
Authority key identifier: B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50
Certificate issuer:       /CN=b63a3094439cac0f555701286cd54373bce6cb50
Certificate serial:       01962FAB8DC1165A76C51C68419BB176161A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft
Manifest number:          028C
Signing time:             Sun 13 Apr 2025 15:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:34 +0000
Files and hashes:         1: lCtCcNNufTLwFJhkrWabEjjBy0k.roa (hash: mf7pg/6iwjdXTSMTSKNkIUvc6nvXHprTVxoK02WKi+Y=)
                          2: tjowlEOcrA9VVwEobNVDc7zmy1A.crl (hash: qEAecHiUqidTJAc6U2b16MK/O+aTJ5t3PEdNs9lJ2WI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:8d:c1:16:5a:76:c5:1c:68:41:9b:b1:76:16:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b63a3094439cac0f555701286cd54373bce6cb50
        Validity
            Not Before: Apr 13 15:01:34 2025 GMT
            Not After : Apr 14 15:01:34 2025 GMT
        Subject: CN=9d6cbb6c8dbf7350e79add1bc40003964a417269
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:db:a8:1b:30:a8:a3:31:60:bd:f0:a0:11:7a:
                    f7:fd:42:23:79:cb:01:d1:42:c7:5c:37:95:75:f5:
                    ca:e6:15:6a:33:67:7a:e2:70:71:0b:d5:05:24:02:
                    19:48:21:2f:4a:fc:d6:ec:1b:1a:a6:14:f5:81:e8:
                    85:50:95:90:c7:3b:c6:89:57:25:89:6d:ee:17:b6:
                    0a:ec:67:f3:b7:11:51:fc:92:fb:ca:54:80:fd:2f:
                    8e:c5:9d:78:95:13:3a:24:05:e1:ab:66:e9:18:b8:
                    81:0f:c8:6f:be:c4:f5:f8:8a:2f:d5:8e:9f:0c:84:
                    c2:d6:ad:31:48:e9:d8:11:e8:ff:c5:a0:3f:7a:1e:
                    9a:d0:25:27:8d:dd:2a:53:f1:45:40:34:60:25:c2:
                    55:bc:67:25:87:2c:0e:8c:c3:51:dc:e0:64:41:c9:
                    4c:40:24:a4:25:e8:c2:b7:e5:7e:27:96:99:6a:b2:
                    29:64:b4:7c:3a:6a:85:0b:72:9a:94:91:8e:82:a4:
                    7b:fd:85:23:cd:35:91:02:c1:6b:92:74:da:cc:e8:
                    dd:7e:14:80:9d:21:2d:7c:26:b5:e2:f8:09:3b:02:
                    81:a9:bb:e6:f6:ae:35:cd:d0:95:22:72:39:81:1d:
                    cd:d6:95:5c:47:d3:5e:ce:fc:0d:c3:4a:2d:cd:21:
                    e5:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6C:BB:6C:8D:BF:73:50:E7:9A:DD:1B:C4:00:03:96:4A:41:72:69
            X509v3 Authority Key Identifier:
                keyid:B6:3A:30:94:43:9C:AC:0F:55:57:01:28:6C:D5:43:73:BC:E6:CB:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjowlEOcrA9VVwEobNVDc7zmy1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/e4d20f-6dc8-497d-a8d6-9dddd6802088/1/tjowlEOcrA9VVwEobNVDc7zmy1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:d6:e4:bc:2e:30:1f:cf:29:aa:31:7c:49:29:2b:bd:0c:fb:
         e1:8f:92:bf:59:6c:42:14:b3:06:f5:4a:2d:f1:75:ed:01:a9:
         f8:92:46:55:54:14:64:84:a2:2a:1b:c3:f5:f1:95:6d:2f:a0:
         e1:c3:c6:9c:a9:ca:06:a7:dd:fe:8b:6b:00:ea:9d:10:77:d9:
         f8:3e:28:1e:41:52:bd:60:70:1c:9e:fb:0f:da:cc:11:cf:e5:
         30:42:0c:94:1a:08:21:a5:a5:b6:61:05:e4:2f:da:0c:ec:c2:
         b2:18:73:f1:fe:12:a8:5e:6e:17:e7:2d:10:79:79:e1:3a:bf:
         82:6d:af:08:c3:32:d3:d7:35:56:26:8d:8b:e1:5f:a0:f3:98:
         75:52:a1:48:56:23:26:91:71:a7:c5:93:25:1a:57:84:87:cf:
         3c:f9:e4:3d:65:d8:52:d9:46:f0:d3:19:a8:f5:0d:d2:56:8f:
         cf:00:a5:42:6d:99:3f:37:f2:47:86:f3:03:b3:b3:33:5e:5e:
         85:c7:b2:9f:b2:02:56:0f:16:24:65:1b:21:2b:38:2f:f0:1a:
         46:7d:16:3c:c6:c1:14:84:41:76:ba:6c:f5:74:02:27:ce:22:
         fd:c8:b3:8a:26:bf:2c:2d:11:c2:e7:04:62:4e:27:b1:b3:a8:
         a8:6b:87:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----