Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
File:                     TmROKYPFxQTYAPLQWCsYLrq_JIc.mft (raw, json)
Hash identifier:          KIzpW8KZBNTFRDW4AACgCQvFh2qig2GN8HbO3w/gL/I=
Subject key identifier:   3C:14:70:C0:EB:7E:F1:48:E1:AA:DE:2B:F3:22:A9:71:E4:92:97:E0
Authority key identifier: 4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87
Certificate issuer:       /CN=4e644e2983c5c504d800f2d0582b182ebabf2487
Certificate serial:       01962E989462DF1125547E833FA8D6100F2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft
Manifest number:          07AC
Signing time:             Sun 13 Apr 2025 10:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:13 +0000
Files and hashes:         1: TmROKYPFxQTYAPLQWCsYLrq_JIc.crl (hash: VZh1M2MLjtd2QN2zjmEdjaWy17oAx4QrbddxWMZc23g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:94:62:df:11:25:54:7e:83:3f:a8:d6:10:0f:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e644e2983c5c504d800f2d0582b182ebabf2487
        Validity
            Not Before: Apr 13 10:01:13 2025 GMT
            Not After : Apr 14 10:01:13 2025 GMT
        Subject: CN=3c1470c0eb7ef148e1aade2bf322a971e49297e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:2b:44:26:08:25:75:23:94:f1:8d:36:1d:0c:
                    10:f2:0f:dc:a6:82:15:4b:9d:c5:44:e1:c5:0c:63:
                    50:e0:d4:86:e9:0c:05:c0:f9:3f:c3:50:f4:1e:59:
                    36:97:b0:3a:b0:26:be:e8:1c:0c:39:4d:1b:1f:24:
                    0b:55:a1:bb:c8:eb:78:5d:ec:55:ee:2d:a3:a6:02:
                    ba:6f:f4:0d:d0:00:45:6d:2b:dd:d3:0a:0a:d6:d0:
                    92:09:ad:56:d0:d9:4f:9b:bf:f7:b7:ba:82:12:e9:
                    07:c3:68:b5:c6:c5:13:93:10:64:85:7b:7b:01:e1:
                    3f:a4:e2:ac:4a:dd:65:4f:6d:b0:c5:74:7d:c5:16:
                    0f:02:07:92:32:2b:2f:e2:fd:42:f0:ef:56:b8:a3:
                    8e:78:30:4c:11:70:d2:a5:e3:11:d6:44:84:69:fc:
                    f8:ce:29:28:37:f7:bf:5e:21:58:98:20:73:50:9c:
                    b3:76:f1:8a:df:8c:0e:03:a1:51:93:e9:33:39:f3:
                    48:5a:f9:b0:64:a2:d8:80:b9:e3:68:3c:90:c1:c3:
                    ca:ab:eb:da:cf:68:9c:cd:a9:f6:03:b5:af:44:39:
                    8f:30:76:05:c6:5f:46:c3:5f:2e:c3:19:2c:fa:9a:
                    b1:86:e0:4c:94:a8:88:cc:b8:d2:b2:e0:13:b7:ea:
                    ee:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:14:70:C0:EB:7E:F1:48:E1:AA:DE:2B:F3:22:A9:71:E4:92:97:E0
            X509v3 Authority Key Identifier:
                keyid:4E:64:4E:29:83:C5:C5:04:D8:00:F2:D0:58:2B:18:2E:BA:BF:24:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TmROKYPFxQTYAPLQWCsYLrq_JIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c0e6a2-8b20-4480-a8ab-b388c5770e04/1/TmROKYPFxQTYAPLQWCsYLrq_JIc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:ae:f7:fe:b4:45:02:0c:e2:da:01:0e:10:5f:96:93:09:53:
         e2:a7:3a:67:d3:13:63:5c:e4:cd:59:49:9c:6d:1e:41:ba:1b:
         31:89:fe:ac:ec:56:de:17:19:86:4a:0b:04:cd:04:ae:b4:0a:
         e5:78:f8:ff:c0:47:1a:93:f9:e3:ba:ee:0d:03:68:42:ec:43:
         9b:9b:db:06:c6:33:7e:54:3c:bb:ee:c0:b5:5d:68:5c:c7:8d:
         09:2f:20:8c:79:97:fa:3b:43:1d:52:65:3b:3a:f4:9e:b7:e0:
         ac:0b:4e:42:d2:4a:1d:ae:c8:75:b4:83:65:fc:fc:0a:d2:38:
         84:f3:ec:b6:1a:f9:ce:13:e7:df:d2:a1:93:16:a2:41:2e:dc:
         ad:7f:12:65:ef:eb:d2:29:10:da:db:74:50:9e:80:3b:82:58:
         15:1c:d0:12:ac:5e:63:f4:b7:f6:21:50:35:66:5a:f7:f7:0c:
         21:2f:90:36:f7:9d:d4:4f:9a:fb:bf:e4:2c:f9:2e:3f:6b:96:
         eb:58:b3:9c:29:95:09:de:80:cf:eb:fd:8a:c8:37:4f:12:58:
         7b:1c:25:5d:b9:f1:88:11:a2:e6:0a:5a:01:4e:c5:85:4d:e5:
         ba:5e:e6:87:4b:43:2a:85:d4:22:97:09:f1:d9:5a:75:03:f1:
         c2:2f:8f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----