Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
File:                     TKvzOws4CIj-HjuA7aSLF4G7dwk.mft (raw, json)
Hash identifier:          JSo/80uCl2UfH/kh9yRu4pWfY+vWHpTPEh0eJx2WPmA=
Subject key identifier:   14:88:ED:41:DF:F8:AD:5C:65:F5:93:36:D1:3F:B6:8A:5F:E4:EA:A0
Authority key identifier: 4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
Certificate issuer:       /CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Certificate serial:       01962E61ABC211544A889909EC5CD4E81E40
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: Ej6AGqgrDcCEmdxGQ51_3en2bK0.roa (hash: iJ7FETE7qwjnaLdIl0yVteeRiSysQ9U3gczbrqrkwXU=)
                          2: TKvzOws4CIj-HjuA7aSLF4G7dwk.crl (hash: KAvFWdEacneMr+k1sRSpxfl8u/8MubtuJeYdEHuQN2Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:ab:c2:11:54:4a:88:99:09:ec:5c:d4:e8:1e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=1488ed41dff8ad5c65f59336d13fb68a5fe4eaa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a1:85:97:f5:7e:d4:cf:f0:a0:40:7a:18:63:
                    49:df:a2:86:12:9e:2c:4c:14:3c:dc:65:6f:27:46:
                    41:ed:22:71:2c:2b:79:4c:03:79:1d:30:cf:41:d8:
                    88:f7:3b:5d:09:9d:5e:52:b5:86:8f:d3:fb:bb:ec:
                    d2:a2:bf:88:8d:ce:b5:eb:d6:30:74:0a:00:34:19:
                    05:c3:db:4f:0a:e4:f7:d5:22:1a:f7:0a:73:cd:28:
                    c0:c0:c8:43:e5:d6:8d:1b:34:05:b1:52:bb:f2:98:
                    ac:ad:13:72:5b:6d:5a:c0:bb:af:8c:32:37:2e:fc:
                    ef:c6:37:75:b4:ac:01:e2:f5:69:6e:69:00:52:df:
                    91:72:11:64:40:2f:b8:8d:8b:c6:73:c9:81:13:25:
                    23:bc:6b:26:7e:6b:29:44:93:bd:c8:09:83:79:88:
                    45:ad:0c:06:43:2d:ae:99:c6:8b:4f:5d:a0:bc:b4:
                    1b:8a:b1:5c:2a:ae:50:c6:14:41:cd:6c:7e:ed:ba:
                    9b:8e:b6:cf:20:12:9d:cd:a9:2f:98:56:8f:55:92:
                    c8:f1:1a:b0:bf:31:da:e9:7f:ff:e0:fd:52:43:80:
                    1d:1e:d2:48:2d:74:5c:8c:1c:86:9f:a0:ed:f0:37:
                    1c:c7:cc:8d:21:0a:fa:60:59:78:34:5a:ac:27:53:
                    75:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:88:ED:41:DF:F8:AD:5C:65:F5:93:36:D1:3F:B6:8A:5F:E4:EA:A0
            X509v3 Authority Key Identifier:
                keyid:4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:33:fc:a8:60:b5:34:02:f7:8a:19:93:5c:fc:af:6c:73:d4:
         38:d0:ef:54:e1:dc:2a:1c:dd:38:80:8a:4d:fe:ac:ab:93:78:
         c0:5f:58:34:cf:4b:55:64:7c:8e:c1:d9:6a:2b:d8:70:a2:6f:
         fb:0f:3c:dc:40:0e:4b:0f:b8:a2:18:18:ab:be:1b:e8:ea:59:
         7e:91:30:d3:ee:a2:c9:7f:ba:35:93:4a:65:2e:2d:f4:04:a6:
         cd:df:4c:67:89:73:02:d9:68:85:05:eb:c3:28:af:b9:15:c3:
         f9:bb:33:28:9e:39:f8:e2:75:14:5f:cc:15:d8:fb:c0:20:37:
         34:6e:12:1f:fd:9b:be:cd:56:94:98:65:dc:71:3f:5a:29:7c:
         34:4c:26:ae:53:f5:71:cc:73:f4:7d:53:a1:1a:3c:ec:ff:3a:
         f9:d6:67:67:41:c5:06:77:f2:db:7b:34:c4:84:d5:b8:a2:35:
         6e:43:3a:ab:77:e3:aa:b6:ce:2c:e6:1e:8b:5e:98:5f:69:a1:
         60:12:68:e2:a7:c4:4c:c1:3d:74:69:8a:91:f8:e1:42:86:89:
         70:1a:92:91:8d:95:b7:b0:92:1f:89:ab:81:7e:ea:e1:d8:8b:
         d5:aa:35:5f:b7:cb:ca:44:1f:b8:9f:42:a1:b7:c9:0d:ba:8d:
         fd:f5:47:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuYavCEVRKiJkJ7FzU6B5AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYWJmMzNiMGIzODA4ODhmZTFlM2I4MGVkYTQ4YjE3ODFi
Yjc3MDkwHhcNMjUwNDEzMDkwMTE0WhcNMjUwNDE0MDkwMTE0WjAzMTEwLwYDVQQD
EygxNDg4ZWQ0MWRmZjhhZDVjNjVmNTkzMzZkMTNmYjY4YTVmZTRlYWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaGFl/V+1M/woEB6GGNJ36KGEp4s
TBQ83GVvJ0ZB7SJxLCt5TAN5HTDPQdiI9ztdCZ1eUrWGj9P7u+zSor+Ijc6169Yw
dAoANBkFw9tPCuT31SIa9wpzzSjAwMhD5daNGzQFsVK78pisrRNyW21awLuvjDI3
Lvzvxjd1tKwB4vVpbmkAUt+RchFkQC+4jYvGc8mBEyUjvGsmfmspRJO9yAmDeYhF
rQwGQy2umcaLT12gvLQbirFcKq5QxhRBzWx+7bqbjrbPIBKdzakvmFaPVZLI8Rqw
vzHa6X//4P1SQ4AdHtJILXRcjByGn6Dt8Dccx8yNIQr6YFl4NFqsJ1N1XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSI7UHf+K1cZfWTNtE/topf5OqgMB8GA1UdIwQY
MBaAFEyr8zsLOAiI/h47gO2kixeBu3cJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEt2ek93czRDSWotSGp1QTdhU0xGNEc3ZHdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xODVhNDItY2I3Zi00MDU4LTg2ZjUt
NDFhZTVmNGE1MDU1LzEvVEt2ek93czRDSWotSGp1QTdhU0xGNEc3ZHdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8xODVhNDItY2I3Zi00MDU4LTg2ZjUtNDFhZTVmNGE1MDU1
LzEvVEt2ek93czRDSWotSGp1QTdhU0xGNEc3ZHdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjTP8qGC1
NAL3ihmTXPyvbHPUONDvVOHcKhzdOICKTf6sq5N4wF9YNM9LVWR8jsHZaivYcKJv
+w883EAOSw+4ohgYq74b6OpZfpEw0+6iyX+6NZNKZS4t9ASmzd9MZ4lzAtlohQXr
wyivuRXD+bszKJ45+OJ1FF/MFdj7wCA3NG4SH/2bvs1WlJhl3HE/Wil8NEwmrlP1
ccxz9H1ToRo87P86+dZnZ0HFBnfy23s0xITVuKI1bkM6q3fjqrbOLOYei16YX2mh
YBJo4qfETME9dGmKkfjhQoaJcBqSkY2Vt7CSH4mrgX7q4diL1ao1X7fLykQfuJ9C
obfJDbqN/fVHSA==
-----END CERTIFICATE-----