Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
File:                     tTVrOmd4voxhFK2H2q_NB8pV2AA.mft (raw, json)
Hash identifier:          x+dCAj9vw2x1fXd1Pq+BNMeGZ6xq5r0yVEEmF3S4zIk=
Subject key identifier:   AD:AD:88:CF:66:BB:31:E4:9A:A0:B5:DE:81:F7:4C:65:C7:49:7E:00
Authority key identifier: B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
Certificate issuer:       /CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Certificate serial:       01962F74D5F6AAE56C1D0DF0E29617E40FF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 14:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:48 +0000
Files and hashes:         1: NQNYc6fmHLA_NSQLy1429x1Q7Rs.roa (hash: 9fkXQ4KSWlEupj10JS2rCXdqinSmRcwnxokumXbhroc=)
                          2: tTVrOmd4voxhFK2H2q_NB8pV2AA.crl (hash: Cxb01InpLYtGnRKl2lWYYMoEbQlf3QoGQWZbbRqR+wM=)
                          3: vIkAtPh5Tl2_hiya1eEEhTQV1PM.roa (hash: Z8ir9Gg8yuo48v4Oy7SXMnM5WXoZ5P1PfUr/9PmcanU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d5:f6:aa:e5:6c:1d:0d:f0:e2:96:17:e4:0f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
        Validity
            Not Before: Apr 13 14:01:48 2025 GMT
            Not After : Apr 14 14:01:48 2025 GMT
        Subject: CN=adad88cf66bb31e49aa0b5de81f74c65c7497e00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:dc:c3:32:76:9e:46:f1:9e:81:57:93:20:49:
                    17:71:3d:85:15:a4:8d:6a:00:d1:b9:01:08:fd:ae:
                    af:55:12:75:28:c5:1c:f1:d5:a9:e3:c3:70:01:19:
                    dd:b5:2e:65:3e:9a:06:4b:9a:fd:c4:bb:c8:ae:64:
                    91:d6:ef:96:8e:cc:07:7e:c7:10:f5:2f:ef:30:89:
                    8f:97:d8:54:cb:8f:0a:ac:03:03:cc:08:28:fd:31:
                    2e:aa:3f:63:43:b4:26:9a:04:31:66:c9:72:87:4b:
                    c0:9a:9e:66:49:cd:4e:8f:7e:4d:ca:d7:25:29:78:
                    6d:ff:7b:8f:fd:81:df:f1:cc:1e:3b:91:c7:ff:d6:
                    ff:7c:06:9a:12:dd:19:f8:c2:7d:c5:fb:04:9a:ff:
                    60:87:32:2a:12:dc:3c:43:00:fd:54:4a:c0:61:3e:
                    8b:35:c5:94:e5:2a:02:d7:8f:2b:fd:e6:03:78:cc:
                    18:c2:f4:d7:16:94:58:a8:ce:98:3a:51:80:7e:14:
                    3f:41:0f:fd:4b:94:aa:f3:28:a3:50:31:0e:c0:6b:
                    b9:ee:4f:b5:42:6a:ea:9f:1e:de:3e:c9:ef:cc:0e:
                    85:55:09:ac:1c:f1:cd:a3:e6:2b:4a:ac:68:ad:72:
                    b1:7c:94:39:19:10:f8:79:44:ea:43:35:df:b8:8b:
                    63:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:AD:88:CF:66:BB:31:E4:9A:A0:B5:DE:81:F7:4C:65:C7:49:7E:00
            X509v3 Authority Key Identifier:
                keyid:B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:ef:45:b5:f3:98:da:97:78:4b:37:4c:9e:97:77:48:62:9c:
         53:be:6d:10:9c:f1:57:fc:24:8c:92:86:a2:5e:5e:08:b9:86:
         f9:db:8c:fb:22:f0:52:90:73:a4:d5:88:2c:56:a9:9a:38:87:
         7a:0d:58:66:35:a9:8d:8d:65:a4:db:03:0e:2a:3d:bd:51:5e:
         dc:5a:02:fd:2f:5b:a9:e2:92:03:65:e0:2f:cf:7b:0a:fe:95:
         a2:24:42:ff:fd:86:3b:50:89:10:a0:9f:1a:2c:41:1c:8d:d6:
         86:48:95:9b:05:39:c3:d6:44:19:0e:61:52:9c:9b:c9:a2:29:
         81:e0:09:0e:ef:67:f1:a3:52:11:61:04:33:a1:6b:16:0f:50:
         ce:17:96:31:df:96:5b:0f:42:ce:cd:fc:c2:99:ab:0a:0f:11:
         f8:e3:4f:23:b3:81:5f:ae:d5:8c:47:2f:88:9e:69:03:29:09:
         da:5a:49:4e:fd:36:c9:32:e3:90:ab:9b:8b:20:0f:dd:b5:d7:
         61:90:c8:20:96:68:d6:42:b2:8c:9e:28:25:c4:06:9e:e2:e2:
         64:0a:3b:4f:c2:8f:95:98:55:4b:f8:2c:26:0e:e8:88:90:f4:
         57:77:28:10:a1:69:c0:e5:76:6e:6c:71:10:f6:cd:0b:23:66:
         3d:d6:67:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----