Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
File:                     TDOTsqG9eRmFmAeDirHjsAN7i08.mft (raw, json)
Hash identifier:          Tq81SuJNljnrlUULWVt1SWQtc6rT7znskYAsbif6yD0=
Subject key identifier:   F4:D2:83:88:9B:09:30:D5:B2:36:40:AB:24:46:CD:E1:1D:9D:17:E9
Authority key identifier: 4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F
Certificate issuer:       /CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
Certificate serial:       01962F3DC66682C87A311B94F59241BECF4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft
Manifest number:          0BE6
Signing time:             Sun 13 Apr 2025 13:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:39 +0000
Files and hashes:         1: TDOTsqG9eRmFmAeDirHjsAN7i08.crl (hash: kfXm0HzdG/6pxWTszipNXSUCtCI5jbj9zI/r2rkKg0A=)
                          2: y6xk5yyaeCIuQcfJUMGsvyLuakI.roa (hash: 5cTQO7InxQ4ef2VY7Tlc4nQ2LkIPqai+B4whSvQRHdc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:c6:66:82:c8:7a:31:1b:94:f5:92:41:be:cf:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c3393b2a1bd7919859807838ab1e3b0037b8b4f
        Validity
            Not Before: Apr 13 13:01:39 2025 GMT
            Not After : Apr 14 13:01:39 2025 GMT
        Subject: CN=f4d283889b0930d5b23640ab2446cde11d9d17e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:90:52:c6:0d:c3:91:ca:02:bf:8c:58:f4:20:
                    3a:e0:f1:f1:86:96:d1:59:38:1f:9e:4f:c9:31:6e:
                    ac:53:9c:38:8f:6d:bf:e5:4b:7e:06:2c:64:a5:a0:
                    4a:9e:30:56:a2:40:8b:1e:96:d8:76:f4:fc:72:e4:
                    49:ab:ec:f7:9e:47:a9:75:57:8c:16:4e:2e:a0:2f:
                    47:61:e3:f6:af:78:62:1e:72:e3:26:f4:93:8a:59:
                    cc:c1:36:dd:d7:10:74:79:e3:c0:4c:31:61:b6:4c:
                    33:a4:fe:22:76:62:79:04:ed:d1:6f:c6:31:18:10:
                    4f:02:2b:ca:e6:32:9c:4e:4a:26:a8:74:6a:8f:5f:
                    33:b6:0d:87:41:c9:2f:69:0f:e6:61:fa:53:6e:96:
                    87:32:31:8a:8a:51:65:f9:ef:51:1c:5b:15:7d:b5:
                    cf:b9:61:54:f6:79:6a:c8:ab:b1:34:4e:35:17:b2:
                    8e:42:76:01:40:73:8b:8c:47:4b:6a:86:dc:6f:a1:
                    06:31:5f:ce:2b:6e:72:e2:86:7b:dc:88:8f:94:4b:
                    24:80:7c:21:aa:c6:91:60:f3:78:ea:95:31:30:e3:
                    7f:d1:eb:4c:12:1a:2f:b8:df:f0:37:c6:9d:75:5a:
                    c9:33:14:26:b6:52:52:f2:60:cd:68:da:e6:a2:71:
                    bd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:D2:83:88:9B:09:30:D5:B2:36:40:AB:24:46:CD:E1:1D:9D:17:E9
            X509v3 Authority Key Identifier:
                keyid:4C:33:93:B2:A1:BD:79:19:85:98:07:83:8A:B1:E3:B0:03:7B:8B:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDOTsqG9eRmFmAeDirHjsAN7i08.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6094af-72c5-4eb5-98ea-0e2ea6a02182/1/TDOTsqG9eRmFmAeDirHjsAN7i08.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:72:9e:4c:f9:74:39:21:95:97:67:b8:1d:7e:41:b7:89:57:
         79:31:43:ec:5a:1e:0b:97:d8:af:bd:79:65:3b:d1:9f:ae:36:
         da:73:27:86:5d:16:c7:27:22:f8:64:75:e5:a3:c1:aa:14:42:
         02:c7:d0:1d:d4:a7:0c:4c:8a:d1:06:17:2b:ef:a7:d5:33:a0:
         4c:12:c5:40:1f:b7:c2:a7:d4:23:7f:25:df:cb:98:b5:2c:8b:
         0d:2d:90:63:d9:b4:18:0e:67:a7:41:1b:d3:cd:8e:a6:44:23:
         69:de:84:b2:85:66:67:fc:31:f7:47:e3:ea:b2:14:a7:13:ba:
         2b:cb:d2:d5:19:77:bf:dc:5f:2c:5a:2c:e9:45:1d:99:ca:70:
         7e:bc:d1:f8:d9:b5:8a:bb:98:a1:83:54:04:b5:ae:96:41:e8:
         e5:44:b3:19:4d:4e:e8:f2:cb:4a:a6:2f:04:8b:5e:e9:6e:25:
         cd:f5:dd:d7:c2:a0:5f:4a:20:51:13:ac:10:9a:fa:45:a5:2d:
         9a:b5:d6:a4:c1:4a:1f:4b:99:11:f0:cb:14:b0:82:01:20:e6:
         2e:89:e3:81:7d:bf:6f:a2:57:23:26:da:4d:ef:72:fd:27:cc:
         a2:9e:a3:9e:ab:92:5c:00:90:ff:90:c8:3b:51:3a:69:94:4f:
         2b:de:2a:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYvPcZmgsh6MRuU9ZJBvs9OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMzM5M2IyYTFiZDc5MTk4NTk4MDc4MzhhYjFlM2IwMDM3
YjhiNGYwHhcNMjUwNDEzMTMwMTM5WhcNMjUwNDE0MTMwMTM5WjAzMTEwLwYDVQQD
EyhmNGQyODM4ODliMDkzMGQ1YjIzNjQwYWIyNDQ2Y2RlMTFkOWQxN2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pBSxg3DkcoCv4xY9CA64PHxhpbR
WTgfnk/JMW6sU5w4j22/5Ut+BixkpaBKnjBWokCLHpbYdvT8cuRJq+z3nkepdVeM
Fk4uoC9HYeP2r3hiHnLjJvSTilnMwTbd1xB0eePATDFhtkwzpP4idmJ5BO3Rb8Yx
GBBPAivK5jKcTkomqHRqj18ztg2HQckvaQ/mYfpTbpaHMjGKilFl+e9RHFsVfbXP
uWFU9nlqyKuxNE41F7KOQnYBQHOLjEdLaobcb6EGMV/OK25y4oZ73IiPlEskgHwh
qsaRYPN46pUxMON/0etMEhovuN/wN8addVrJMxQmtlJS8mDNaNrmonG97wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTSg4ibCTDVsjZAqyRGzeEdnRfpMB8GA1UdIwQY
MBaAFEwzk7KhvXkZhZgHg4qx47ADe4tPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi82MDk0YWYtNzJjNS00ZWI1LTk4ZWEt
MGUyZWE2YTAyMTgyLzEvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi82MDk0YWYtNzJjNS00ZWI1LTk4ZWEtMGUyZWE2YTAyMTgy
LzEvVERPVHNxRzllUm1GbUFlRGlySGpzQU43aTA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfHKeTPl0
OSGVl2e4HX5Bt4lXeTFD7FoeC5fYr715ZTvRn6422nMnhl0Wxyci+GR15aPBqhRC
AsfQHdSnDEyK0QYXK++n1TOgTBLFQB+3wqfUI38l38uYtSyLDS2QY9m0GA5np0Eb
082OpkQjad6EsoVmZ/wx90fj6rIUpxO6K8vS1Rl3v9xfLFos6UUdmcpwfrzR+Nm1
iruYoYNUBLWulkHo5USzGU1O6PLLSqYvBIte6W4lzfXd18KgX0ogUROsEJr6RaUt
mrXWpMFKH0uZEfDLFLCCASDmLonjgX2/b6JXIybaTe9y/SfMop6jnquSXACQ/5DI
O1E6aZRPK94qtw==
-----END CERTIFICATE-----