Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
File:                     TweIqtIqxDcNUYy3-53-cktB-Vc.mft (raw, json)
Hash identifier:          PH5PxZ7I7sBaAkQt1rdrcVUzVNsYyjcfu+ELQsJjDQQ=
Subject key identifier:   CB:97:BC:D6:7B:FB:0D:18:92:45:7C:9D:22:B9:13:B2:0B:E2:46:F4
Authority key identifier: 4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
Certificate issuer:       /CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Certificate serial:       01962E2B4E8086A8A0A6F5A5471C88C11D1A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
Manifest number:          10FF
Signing time:             Sun 13 Apr 2025 08:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:52 +0000
Files and hashes:         1: TweIqtIqxDcNUYy3-53-cktB-Vc.crl (hash: /a5ldtLbu+/FqA3E3FXYv31mibJl4ob/khd9vmqGyo4=)
                          2: VcLRSmks30Rrzb_V-4cS_8CDrdU.roa (hash: ARDeLfHH2zFG0qHV/LfjEyCOKnPBbv+U4ABprvSu0Wc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:4e:80:86:a8:a0:a6:f5:a5:47:1c:88:c1:1d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
        Validity
            Not Before: Apr 13 08:01:52 2025 GMT
            Not After : Apr 14 08:01:52 2025 GMT
        Subject: CN=cb97bcd67bfb0d1892457c9d22b913b20be246f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:04:9d:8a:47:c8:d6:37:f1:e2:0f:e0:3f:01:
                    ed:4f:0f:e2:7c:28:6f:26:73:b8:74:6f:78:b6:0e:
                    f2:9a:84:84:3b:74:9c:ac:38:6a:71:7a:ad:ca:fc:
                    59:b8:2d:3c:21:2f:bf:6e:18:eb:53:c1:c0:4c:d9:
                    11:74:e1:3c:8c:37:e3:50:3d:a6:dc:55:02:9b:47:
                    80:38:f7:c9:82:02:c0:d5:31:7e:9d:a5:67:f0:53:
                    bc:69:37:1a:a4:0b:74:1e:23:c4:e1:2f:30:a6:75:
                    b7:32:ed:c4:32:93:d7:9a:36:79:7a:f7:0c:aa:18:
                    c3:af:27:99:7f:3c:99:e8:45:16:7a:1b:47:8b:5e:
                    cb:1e:37:01:1c:f3:6f:2c:a5:69:df:66:b1:b0:b2:
                    b4:e5:22:2a:a4:38:02:3d:f1:75:b6:86:fb:26:c8:
                    75:d0:07:93:70:e9:7d:42:26:62:4e:73:4d:c1:66:
                    ca:be:16:ca:8c:e1:47:cf:0c:7a:ef:9f:29:01:de:
                    0d:77:c0:32:93:d6:cd:30:78:f5:36:40:a2:0c:34:
                    90:11:e7:f1:77:3e:44:b7:ab:a6:e6:1b:09:78:d1:
                    5a:d3:90:a4:d8:7e:38:3e:d7:21:e8:8a:a3:4d:c1:
                    4e:4b:f0:21:28:c6:b2:c2:f9:27:4c:1d:e9:68:18:
                    07:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:97:BC:D6:7B:FB:0D:18:92:45:7C:9D:22:B9:13:B2:0B:E2:46:F4
            X509v3 Authority Key Identifier:
                keyid:4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:6c:73:d5:15:17:a0:77:c3:4c:d2:8e:7e:7f:e3:7e:bf:e8:
         8e:47:63:21:bc:94:85:c3:f3:f4:d3:08:d9:c9:b4:69:81:26:
         a8:3d:e0:cc:7d:6f:c0:c0:8c:f8:3b:19:30:5b:f7:59:f4:a3:
         7b:38:80:6c:cb:3b:fb:7b:a5:12:d7:14:a1:c7:b7:22:78:f5:
         84:29:9f:3c:0d:47:c4:05:89:a5:c4:e7:87:5e:cb:da:23:dd:
         4c:b5:ae:36:c6:f9:c8:d8:4c:db:de:7c:1f:64:41:75:66:aa:
         f6:b9:25:44:ec:cf:67:9d:15:82:8b:0b:7f:46:78:91:06:86:
         2a:6a:9b:a0:f7:e5:dc:00:ba:ea:7b:39:c4:86:8e:91:46:16:
         c3:45:30:fc:cd:e0:d2:97:d9:5e:52:b4:a0:d7:0a:ab:c4:61:
         03:a7:c2:5d:de:0e:57:a0:95:f6:14:8a:db:53:02:ec:f5:a3:
         bf:0a:f7:85:0a:3a:e9:70:7e:5e:7a:f6:61:b7:f0:6c:91:8a:
         10:2d:ab:88:d9:67:ab:4b:43:f8:be:e3:a1:11:a9:ac:ed:22:
         59:2a:8d:63:c2:43:11:af:ac:db:fb:ee:ac:c3:a5:cd:0a:19:
         23:0e:f8:4d:79:a5:3c:e4:91:73:d6:78:25:17:74:a6:af:53:
         93:5d:23:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----