Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
File:                     i-tlpxrwKVknKswA1cTBlYOF3pQ.mft (raw, json)
Hash identifier:          7zoWtf40XrktzbK2Q2epT3TCrl2oFOGV2ZvwHC77uOg=
Subject key identifier:   2B:0A:49:A7:86:E6:6B:D8:2C:EE:5B:50:38:23:F3:51:8E:9E:69:05
Authority key identifier: 8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94
Certificate issuer:       /CN=8beb65a71af02959272acc00d5c4c1958385de94
Certificate serial:       01962ECFC46F4C333EE130EDAD956192038E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 11:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:30 +0000
Files and hashes:         1: 8U8kKdz2fVZxTqZwqIjaA_g2nWA.roa (hash: VPZpp0pYKoi2I1Ak52XiESxXc7FZdh4MhOiiuF6UR+U=)
                          2: i-tlpxrwKVknKswA1cTBlYOF3pQ.crl (hash: D8msX7PNCdhvk624CZBievECVbQLR6Eq4NH+nSUAUzA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:c4:6f:4c:33:3e:e1:30:ed:ad:95:61:92:03:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8beb65a71af02959272acc00d5c4c1958385de94
        Validity
            Not Before: Apr 13 11:01:30 2025 GMT
            Not After : Apr 14 11:01:30 2025 GMT
        Subject: CN=2b0a49a786e66bd82cee5b503823f3518e9e6905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:7d:f7:3a:84:21:4d:6d:6c:a5:d8:a8:38:
                    86:b7:fe:5f:f1:ff:61:7e:1e:c1:1f:b7:fd:11:b3:
                    08:24:f5:98:db:56:58:c5:d7:eb:d4:c1:3d:1f:09:
                    2e:42:e4:d6:d1:51:4a:cd:a1:c1:2b:76:72:1b:e6:
                    14:5e:4f:e2:58:90:2b:1d:6d:6c:93:4f:b0:0b:d7:
                    30:6a:23:e1:bf:59:43:80:5f:7a:8e:ad:d0:a6:a7:
                    7f:9e:19:6a:20:d2:5a:90:0b:3c:a0:31:27:0e:ef:
                    4a:3f:bf:21:a1:9d:5c:33:e1:19:4b:15:49:e2:88:
                    f5:27:e4:2b:29:0d:e9:f5:21:50:68:f2:da:5a:9e:
                    b2:5a:5a:8a:d4:3c:d2:31:96:09:0a:f9:f3:50:97:
                    71:4e:41:c1:1c:b6:6e:6e:69:f9:22:fb:86:ed:b8:
                    4f:31:b5:8e:7f:a6:05:2d:c7:73:8a:67:ed:f1:ec:
                    00:40:4d:85:3b:c7:20:ea:fe:80:18:9d:98:e2:f5:
                    1a:29:3d:ad:19:69:c6:cf:f1:df:2a:8b:00:f4:3f:
                    90:13:8f:f5:9d:f2:5e:ed:92:92:e0:b7:10:f5:70:
                    57:69:de:b5:1d:9f:b4:25:a0:47:ce:d1:ad:ed:cd:
                    5e:bb:88:19:af:a7:dd:ec:a9:54:e3:e0:e7:c7:1d:
                    21:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0A:49:A7:86:E6:6B:D8:2C:EE:5B:50:38:23:F3:51:8E:9E:69:05
            X509v3 Authority Key Identifier:
                keyid:8B:EB:65:A7:1A:F0:29:59:27:2A:CC:00:D5:C4:C1:95:83:85:DE:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i-tlpxrwKVknKswA1cTBlYOF3pQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/de9957-c7cc-4997-a22b-165a846d481d/1/i-tlpxrwKVknKswA1cTBlYOF3pQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b3:0f:86:e4:ec:2c:98:84:ee:db:88:ca:18:52:bb:1d:83:
         04:0c:ba:82:b0:c1:80:b9:b2:56:d8:3c:97:7c:de:51:e5:eb:
         77:59:e4:c0:d2:72:33:07:a7:0d:bc:e2:26:ce:4f:71:a4:1c:
         96:d4:81:c0:ab:78:46:c3:74:12:89:2d:58:79:cb:bc:85:48:
         23:d1:46:37:f8:b8:0a:50:5b:b2:93:3a:07:0a:78:ec:d7:38:
         05:cf:06:9f:96:19:a2:58:bb:34:e5:d1:7f:71:13:77:2e:84:
         e0:65:4b:9c:3c:bc:28:be:e5:33:09:c1:46:d7:d0:63:60:3c:
         1c:02:65:8a:82:5b:3b:46:ac:a7:9e:6c:24:f1:b9:cc:61:b7:
         00:84:c1:4e:ee:3e:59:9c:8b:aa:fe:e7:4b:e6:7d:fd:1c:6f:
         75:04:83:aa:ed:7e:b0:4a:1f:5e:5a:b2:46:b7:16:b4:3c:26:
         7f:f2:8a:15:1d:c8:25:ac:e0:93:6c:cc:b7:0c:7f:90:c1:1e:
         e8:e4:68:f5:ea:a5:2c:f6:9a:f0:f5:16:21:d5:bc:33:a1:2d:
         5a:36:69:75:ea:a2:32:43:93:e1:d6:62:b6:6a:90:29:53:fd:
         3e:f8:b5:fc:92:cb:22:b6:d6:42:69:3c:1c:09:11:c6:5f:9b:
         af:4a:8b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----