Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft
File:                     tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft (raw, json)
Hash identifier:          Bbuu1fMPGEUzdYj+P6t5fVs5esUZ0HuTGwnhz0Inxs0=
Subject key identifier:   42:85:62:8B:17:35:B2:87:6C:48:BD:76:A5:79:2B:3B:80:6F:72:FB
Authority key identifier: B5:94:EB:B6:74:8F:DC:12:12:7C:3F:92:7E:7F:B9:B1:AF:89:26:2C
Certificate issuer:       /CN=b594ebb6748fdc12127c3f927e7fb9b1af89262c
Certificate serial:       01962E998AA966CE120CBCDA464AD5C7A941
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tZTrtnSP3BISfD-Sfn-5sa-JJiw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 10:02:16 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:16 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:16 +0000
Files and hashes:         1: tZTrtnSP3BISfD-Sfn-5sa-JJiw.crl (hash: xHDBmvvClVhMi4DuvXc0bV/5KsWQAWuBcYWK25bIOVc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8a:a9:66:ce:12:0c:bc:da:46:4a:d5:c7:a9:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b594ebb6748fdc12127c3f927e7fb9b1af89262c
        Validity
            Not Before: Apr 13 10:02:16 2025 GMT
            Not After : Apr 14 10:02:16 2025 GMT
        Subject: CN=4285628b1735b2876c48bd76a5792b3b806f72fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bb:0a:61:0c:f1:cb:21:db:b7:06:dd:28:ce:
                    52:98:f1:b3:e9:13:24:e6:9c:96:c3:f6:32:50:ae:
                    98:03:01:0f:70:a9:dc:3b:aa:92:bc:4b:e4:cc:38:
                    17:d1:7b:15:4a:03:8e:7f:12:7f:31:66:56:74:f0:
                    b5:55:ee:cd:30:22:5b:68:e5:56:fa:13:92:71:c2:
                    18:e7:cd:38:15:08:5a:18:90:d1:6b:5d:fd:97:f3:
                    ff:92:9e:39:69:83:92:96:58:d0:b9:be:de:d6:15:
                    85:60:4f:f2:44:3c:b9:59:dd:fa:db:20:4d:1d:08:
                    41:69:12:3f:28:a7:fa:68:95:88:70:34:3a:8b:fe:
                    98:e0:bb:bd:4e:d8:f9:1c:1b:87:2f:0d:a1:26:55:
                    04:f9:e2:4c:9f:15:49:33:9a:fe:77:56:1f:f1:d2:
                    13:15:36:88:e6:e2:81:9d:24:30:c5:a8:58:d6:f5:
                    c0:84:2d:33:5d:ae:32:44:e3:80:81:17:ce:46:8c:
                    43:b6:a2:06:f0:40:ec:1f:24:7f:65:95:7a:36:ec:
                    57:df:ea:9c:2e:cd:a8:83:5e:6f:50:6a:1c:32:f5:
                    0e:48:5e:88:e9:f4:6c:d9:e6:a9:63:84:5d:50:8f:
                    42:e9:8e:59:b2:fd:b0:a6:39:8c:37:2e:ec:82:7b:
                    d5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:85:62:8B:17:35:B2:87:6C:48:BD:76:A5:79:2B:3B:80:6F:72:FB
            X509v3 Authority Key Identifier:
                keyid:B5:94:EB:B6:74:8F:DC:12:12:7C:3F:92:7E:7F:B9:B1:AF:89:26:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZTrtnSP3BISfD-Sfn-5sa-JJiw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/8aa081-3969-432c-98d0-821936b31518/1/tZTrtnSP3BISfD-Sfn-5sa-JJiw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:66:d3:99:c3:33:48:a6:4d:0f:df:53:35:f0:9b:f6:17:00:
         32:fe:1c:49:dc:e8:22:06:65:f8:b7:b6:aa:d8:e0:10:54:bb:
         87:e6:2e:56:08:d3:ea:2e:38:1f:f8:fd:38:be:28:24:59:84:
         35:e9:72:78:13:b5:1f:46:27:a2:24:91:dc:8d:8a:f0:d4:aa:
         4a:65:63:5b:4b:5e:ac:aa:cb:9b:03:2b:a8:34:6f:fe:cb:1e:
         7f:75:dc:d4:30:13:93:c6:c0:d6:38:6e:0d:10:c2:cc:9e:9a:
         7d:69:0c:05:66:80:11:bf:09:4f:b5:80:e2:f8:b2:9a:8a:cf:
         e8:d5:15:e2:fc:da:98:f0:31:1c:80:6a:11:bc:76:11:32:d3:
         32:34:cc:8f:69:06:8b:eb:16:48:ff:d0:12:ac:e6:ab:87:48:
         08:45:f0:7e:0f:1b:29:ff:d4:24:db:38:08:c8:29:6d:9e:71:
         36:d7:f2:4c:4e:53:d0:ca:2b:5d:8a:1f:29:73:51:25:1a:a6:
         79:19:e7:42:a5:a1:26:6e:cc:41:57:53:97:86:5f:98:63:fc:
         d4:4d:59:10:3d:6b:ea:07:5b:83:d9:d5:66:84:a5:f8:56:c6:
         cc:16:c7:5c:a8:87:d8:24:99:53:5e:9d:fe:d7:b4:db:44:7c:
         2f:2c:5e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----