Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
File:                     TdL8TSP9nCQgxASRhxgI7FQkpnA.mft (raw, json)
Hash identifier:          KR+7pmf0yFOyTVhipifRqnPWza5gl6cLHA37kwXSJX8=
Subject key identifier:   0D:72:62:FE:19:81:35:A4:78:AB:18:75:91:DF:A0:CB:19:7E:17:61
Authority key identifier: 4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70
Certificate issuer:       /CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
Certificate serial:       01962F74976A24E5070AE05D97D8AC268BD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 14:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:32 +0000
Files and hashes:         1: 6PYHTPLOKPA_a6iVYvGQByWG7yU.roa (hash: w5WzWtoII8U9oezorMTaJGrRrTvsQaItUP16lTCSY7s=)
                          2: TdL8TSP9nCQgxASRhxgI7FQkpnA.crl (hash: uGP2NMw7TVnTRXVWwzgfcmI7zkoX8QfNCZFgglfarmk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:97:6a:24:e5:07:0a:e0:5d:97:d8:ac:26:8b:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4dd2fc4d23fd9c2420c40491871808ec5424a670
        Validity
            Not Before: Apr 13 14:01:32 2025 GMT
            Not After : Apr 14 14:01:32 2025 GMT
        Subject: CN=0d7262fe198135a478ab187591dfa0cb197e1761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:54:28:a2:27:d3:6d:5e:1f:b0:0f:7c:5a:f7:
                    a6:5d:1a:0a:0d:d9:b2:62:2e:2b:19:85:f8:18:2f:
                    91:74:c6:6e:30:1c:72:71:44:a0:b0:72:cc:a2:dc:
                    ca:4b:bc:5a:40:b0:b1:a5:8c:28:95:6e:fb:91:1a:
                    8f:0e:1d:61:06:d3:51:73:73:61:fc:39:9a:10:21:
                    83:c2:8a:87:49:6f:4d:dc:16:f0:ee:46:82:97:a7:
                    e0:72:bc:62:83:32:35:bb:5c:e9:d9:2d:b4:31:81:
                    a8:e7:5c:4f:ba:07:b3:df:2b:f5:8e:68:ec:64:f6:
                    2c:51:c2:b2:74:e8:3c:a0:72:d0:71:94:ae:a6:b9:
                    0a:72:5f:34:f3:2d:ec:8c:0a:5b:cb:2e:cc:1f:84:
                    54:86:d2:ea:ad:29:f5:9c:3d:73:77:91:55:8a:f7:
                    ed:90:bb:9a:2b:57:36:b5:92:07:83:2c:44:5b:5f:
                    75:9f:b5:ec:ee:7c:fb:de:a7:80:49:0e:e8:76:f9:
                    a6:0a:77:32:08:7d:a9:b2:3f:d2:1e:09:71:4a:4c:
                    e4:5a:05:4c:f3:73:80:70:fc:0d:f3:aa:67:95:31:
                    9f:cc:a0:7b:49:4a:22:12:b8:06:12:84:1c:4b:f6:
                    a9:ce:16:50:e7:db:df:2b:02:7f:39:62:c1:c0:69:
                    6f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:72:62:FE:19:81:35:A4:78:AB:18:75:91:DF:A0:CB:19:7E:17:61
            X509v3 Authority Key Identifier:
                keyid:4D:D2:FC:4D:23:FD:9C:24:20:C4:04:91:87:18:08:EC:54:24:A6:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdL8TSP9nCQgxASRhxgI7FQkpnA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/3e8e42-dffb-435d-bd2b-eb8b1ecc4741/1/TdL8TSP9nCQgxASRhxgI7FQkpnA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:ed:fe:41:21:a7:e7:54:29:7d:e5:ea:e9:df:49:5d:8c:e6:
         66:49:dc:5d:4d:15:9a:a4:b9:0b:9e:d1:ab:17:9c:48:d3:cc:
         1f:b9:4d:f9:f6:65:14:c8:07:f3:44:1e:d3:26:4c:5a:ef:dc:
         eb:ec:69:aa:2c:c8:db:93:f6:f9:33:c9:e6:d0:3d:c8:25:a6:
         be:b2:22:1c:2f:9b:b4:4a:95:14:50:d9:10:56:6d:bf:20:d4:
         80:e4:2f:11:92:3b:d9:9f:fc:c2:7b:27:96:6e:03:ba:48:97:
         a8:74:1b:65:b6:ff:c2:ef:c7:9c:db:eb:ef:f2:22:e5:6f:8a:
         09:64:48:a1:0d:5e:20:3a:52:49:b1:ef:aa:83:86:34:d9:84:
         a8:43:f5:51:ae:fd:bd:d6:23:33:f1:2c:e7:a9:fb:a7:78:38:
         b6:d3:8b:7c:84:77:6c:f5:c3:86:8c:b9:de:cf:07:1c:b3:6c:
         ae:9a:ea:74:5d:47:f0:6a:a1:c0:f0:f3:89:8a:d1:d3:44:20:
         58:45:7f:06:ec:45:0c:cb:f4:ec:a0:6f:0c:b7:67:05:5b:67:
         58:3d:5c:22:43:5e:a2:89:b8:20:8d:c6:60:7a:e0:22:a5:85:
         e4:12:58:88:88:8b:a0:90:c4:45:5d:d3:30:c2:51:88:35:ae:
         49:18:0e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----