Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/60e507-a861-444d-a692-b524bed95146/1/TJAOOmrqRimXwckHFagM9CP-CEk.mft
File:                     TJAOOmrqRimXwckHFagM9CP-CEk.mft (raw, json)
Hash identifier:          BdjtqfVSUJv61f1K3T/gcp6GyWg2Tx/mibXyzi/YRTY=
Subject key identifier:   4F:48:04:C5:E6:C1:4A:BC:59:ED:43:F6:39:4D:01:47:D0:BC:BF:A0
Authority key identifier: 4C:90:0E:3A:6A:EA:46:29:97:C1:C9:07:15:A8:0C:F4:23:FE:08:49
Certificate issuer:       /CN=4c900e3a6aea462997c1c90715a80cf423fe0849
Certificate serial:       019347167AA5AA923C19C5C8DF45E66E1DE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TJAOOmrqRimXwckHFagM9CP-CEk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/25/60e507-a861-444d-a692-b524bed95146/1/TJAOOmrqRimXwckHFagM9CP-CEk.mft
Manifest number:          0A49
Signing time:             Wed 20 Nov 2024 01:01:15 +0000
Manifest this update:     Wed 20 Nov 2024 01:01:15 +0000
Manifest next update:     Thu 21 Nov 2024 01:01:15 +0000
Files and hashes:         1: TJAOOmrqRimXwckHFagM9CP-CEk.crl (hash: ItyfLET6ndEiIH6wrTAyLH8wThLc5dIquwARaitrBBY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:47:16:7a:a5:aa:92:3c:19:c5:c8:df:45:e6:6e:1d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c900e3a6aea462997c1c90715a80cf423fe0849
        Validity
            Not Before: Nov 20 01:01:15 2024 GMT
            Not After : Nov 21 01:01:15 2024 GMT
        Subject: CN=4f4804c5e6c14abc59ed43f6394d0147d0bcbfa0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ab:ef:ee:55:f9:76:2f:34:5f:61:1d:5d:e6:
                    a6:d9:e3:8f:09:68:5e:a2:34:62:35:11:0d:14:c5:
                    f5:e1:22:47:b5:d4:62:c1:a7:a9:9b:0e:8f:f6:c9:
                    aa:1b:ab:d3:d2:fc:0b:c2:93:c2:e3:09:ac:66:07:
                    26:22:c3:9f:db:18:e5:36:61:b0:cc:8d:48:c5:66:
                    5d:0b:f1:64:cd:3f:e0:fe:25:8d:6e:cf:87:36:61:
                    64:73:77:cb:43:1a:e5:03:06:5c:f0:7c:08:a1:00:
                    71:2e:65:38:5b:3c:ba:eb:a0:61:8e:fd:41:dd:67:
                    a8:68:52:95:31:ab:7a:d0:00:8e:03:ac:4d:9a:98:
                    f5:a3:18:39:34:b0:4d:a1:ec:de:59:e6:86:73:25:
                    15:9d:ba:d1:40:fc:2d:5f:5d:dc:c1:3b:30:23:24:
                    55:dc:ec:b1:ac:51:b5:c8:6a:a2:cd:2d:81:47:72:
                    5a:ce:2c:d4:0c:a4:2e:f0:dc:51:9c:0e:46:02:7d:
                    94:cb:06:9e:b6:3a:a6:7b:62:ef:20:20:30:3c:a5:
                    ce:5d:77:44:b8:01:91:86:43:2a:66:46:66:47:51:
                    07:ba:de:f1:a5:e5:31:d8:c7:16:ba:19:4c:57:ce:
                    2b:23:ea:b3:dd:9a:58:30:ba:fc:8e:47:4d:ef:fd:
                    d7:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:48:04:C5:E6:C1:4A:BC:59:ED:43:F6:39:4D:01:47:D0:BC:BF:A0
            X509v3 Authority Key Identifier:
                keyid:4C:90:0E:3A:6A:EA:46:29:97:C1:C9:07:15:A8:0C:F4:23:FE:08:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJAOOmrqRimXwckHFagM9CP-CEk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/60e507-a861-444d-a692-b524bed95146/1/TJAOOmrqRimXwckHFagM9CP-CEk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/25/60e507-a861-444d-a692-b524bed95146/1/TJAOOmrqRimXwckHFagM9CP-CEk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:eb:00:76:bc:6a:ba:57:d7:90:41:7b:b0:de:bd:b2:53:2b:
         ff:cc:a8:25:ee:5e:c9:06:af:d2:7f:c9:de:47:ad:64:b3:cb:
         0f:22:14:3b:1e:f2:a2:9d:93:dd:6a:e1:f9:dd:db:11:e6:9f:
         bf:32:e8:d5:89:fa:1f:cb:f3:cd:28:80:bf:34:0a:11:25:83:
         7d:a9:a9:df:72:a8:0c:fc:5c:a1:a9:ed:da:6b:7a:3f:ad:1a:
         1a:f0:ae:63:06:4e:5e:a9:d7:64:9e:c0:39:fe:7b:b1:35:b1:
         2e:31:5f:d6:bf:a3:0a:5c:64:86:10:25:b4:f6:04:8a:7c:71:
         98:5f:d2:3c:95:db:4a:25:03:34:81:72:c1:c1:56:15:db:6a:
         9d:4c:4f:ac:d6:3c:a4:72:7d:cb:7b:a4:da:33:7e:bf:cc:08:
         d1:d2:63:7f:55:0a:75:52:60:30:ad:0a:42:91:c5:67:ad:f1:
         33:0c:73:28:7c:10:2c:3e:26:86:1f:00:f9:b1:74:4d:ea:47:
         b5:26:c5:ce:e5:e9:90:9e:b1:ea:71:fe:07:d3:dc:a6:5f:73:
         7a:ec:0a:0f:62:96:ce:7a:b0:f1:bc:1f:b3:0a:62:9c:50:2e:
         21:7b:c2:68:94:d3:ea:de:d1:ed:a6:32:4e:e1:21:d5:e9:e0:
         9e:0b:4c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----