Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft
File:                     TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft (raw, json)
Hash identifier:          ArZschkND/AZdlx670L+mzARxqbiZzXz/R3ZmTvVkXw=
Subject key identifier:   36:EC:F7:85:C0:C8:45:1F:36:E0:68:6A:26:85:35:A0:FD:BD:C6:9F
Authority key identifier: 4D:E4:3A:56:CB:F6:AF:E4:35:68:96:E0:DF:F5:29:C1:79:69:44:B4
Certificate issuer:       /CN=4de43a56cbf6afe4356896e0dff529c1796944b4
Certificate serial:       01962E2B17E6892BDBC3388A15FDC3BCCEAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft
Manifest number:          06D6
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.crl (hash: /1S/UMz5WV2d1LayXPZeDvRPQSxuJFuN6VC6+e6bPzA=)
                          2: ysLU-tIMB584lIEbHQSL8JGKsnE.roa (hash: Uif1kdpiVYKXIEf5r/9WzjR7N7gNIDgEDehCMCiuiNs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:17:e6:89:2b:db:c3:38:8a:15:fd:c3:bc:ce:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4de43a56cbf6afe4356896e0dff529c1796944b4
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=36ecf785c0c8451f36e0686a268535a0fdbdc69f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bd:16:82:35:e0:6b:d9:f2:52:cf:af:15:8f:
                    54:28:c9:3a:6d:15:9b:1f:d1:28:71:0d:de:4e:4a:
                    6b:fe:36:af:03:14:da:2d:ff:1d:45:91:aa:95:8f:
                    98:b9:2f:56:05:23:34:fd:0d:a8:f2:5f:57:43:dd:
                    20:93:0a:3d:04:b6:53:f6:ac:f4:e5:a8:8c:83:48:
                    35:aa:cc:a2:3a:46:d1:e0:09:3d:b9:08:e4:9f:ef:
                    de:b8:3a:c0:07:80:60:fd:d0:99:96:39:5f:22:e0:
                    a8:72:6e:a7:2f:8f:a5:26:da:02:b7:41:69:27:3a:
                    bc:7e:bc:94:26:ef:65:de:80:b2:4e:7d:a5:54:17:
                    ea:6d:c3:73:4b:7a:a1:2e:4c:0f:6d:8f:d7:68:4f:
                    4e:b2:c2:55:f0:8d:a6:ec:a5:55:46:e1:3f:73:bf:
                    b5:a6:69:ba:21:d4:fe:aa:84:ac:b6:01:ac:2b:34:
                    c8:0b:87:92:d2:bf:aa:7a:e2:70:f2:fc:53:c9:32:
                    1c:d6:fc:99:c8:d0:7b:cb:74:de:46:77:8c:d3:46:
                    6a:9e:1d:45:ae:2a:73:da:83:02:f8:05:53:3b:59:
                    ba:03:11:60:10:3b:ef:24:9b:e2:e3:38:29:7a:58:
                    35:5f:62:77:47:94:2b:ab:7b:7a:29:6e:9f:8d:35:
                    56:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:EC:F7:85:C0:C8:45:1F:36:E0:68:6A:26:85:35:A0:FD:BD:C6:9F
            X509v3 Authority Key Identifier:
                keyid:4D:E4:3A:56:CB:F6:AF:E4:35:68:96:E0:DF:F5:29:C1:79:69:44:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/12d07e-57a1-4530-bb02-2fe29782d47d/1/TeQ6Vsv2r-Q1aJbg3_UpwXlpRLQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:df:2f:fe:be:64:c4:a8:b6:97:29:c5:d7:aa:ec:47:6a:90:
         25:af:f0:5a:13:ef:f6:60:08:3f:d6:fa:d6:ed:51:e6:7b:b5:
         86:c3:f5:6d:0f:7d:49:6a:2d:3b:8d:26:22:81:c8:b9:81:95:
         09:28:a4:91:df:8d:fa:9b:63:20:96:c3:f2:f9:5b:85:30:c5:
         22:02:92:18:b8:85:36:cd:24:dd:9a:81:66:da:b6:a0:39:04:
         a6:8c:26:75:f5:69:0a:f2:36:b7:18:f0:db:5e:fc:a5:29:c3:
         7a:7f:83:87:6c:44:68:d3:b9:e2:ad:96:b3:38:b7:15:08:4d:
         b7:fc:9f:12:a8:56:49:4c:e0:41:03:26:aa:e1:57:5c:a7:74:
         c2:59:74:f0:0c:76:a7:c3:1b:a1:29:3b:e1:c8:65:5f:c7:0b:
         d2:9d:f9:40:20:bb:25:4f:07:1e:0d:df:5e:41:63:f5:f9:e6:
         92:cc:5a:4f:3f:79:41:4d:34:79:d3:1f:0a:d0:4f:66:43:83:
         0e:e9:37:ea:3d:57:6f:fc:53:d0:93:55:83:5c:aa:a7:89:5a:
         93:20:8d:5e:38:48:50:7d:52:fb:50:6c:41:55:e9:79:8f:ee:
         d8:e1:4f:d2:7a:7f:ac:ea:ef:56:77:85:14:ed:d4:72:3f:4a:
         67:21:45:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----