Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
File:                     IwqhYKbohsED2tvkSyPCd3YFc5E.mft (raw, json)
Hash identifier:          L4YsXB6lfxUwceSomSj+5DaBRldtEf/yVPW2+L8DTNs=
Subject key identifier:   79:2C:C8:95:DE:57:69:1D:FE:3C:9D:12:6A:80:C3:7B:26:11:E3:CA
Authority key identifier: 23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91
Certificate issuer:       /CN=230aa160a6e886c103dadbe44b23c27776057391
Certificate serial:       01962E2B1472380EB4381BE08D95D0294B8B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft
Manifest number:          0C89
Signing time:             Sun 13 Apr 2025 08:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:37 +0000
Files and hashes:         1: 1H3wr9EMEu_9kf6Zl38WrkoAkBU.roa (hash: FprWo0wu1rkhWTeCTL4oYKvIo6iA1oIZ1p0P+xAQYGs=)
                          2: IwqhYKbohsED2tvkSyPCd3YFc5E.crl (hash: DwK7Ej8WNGKoOfvGlPzlqfdJs3xRcZGYCBeyPbpgzrs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:14:72:38:0e:b4:38:1b:e0:8d:95:d0:29:4b:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230aa160a6e886c103dadbe44b23c27776057391
        Validity
            Not Before: Apr 13 08:01:37 2025 GMT
            Not After : Apr 14 08:01:37 2025 GMT
        Subject: CN=792cc895de57691dfe3c9d126a80c37b2611e3ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:dd:c0:19:bc:f4:b0:77:43:2f:52:de:bc:3d:
                    a5:c8:a5:0b:16:db:3b:3a:a1:68:c1:08:c9:86:7d:
                    f0:0b:0c:73:48:5d:3b:25:82:63:08:16:14:be:69:
                    68:3f:ae:6c:ee:26:0c:e8:81:80:95:c6:7f:be:37:
                    c9:d9:cb:f1:3a:b2:f5:67:7d:a0:84:e3:35:1c:c9:
                    6d:bd:a2:ef:7b:41:f1:76:dc:b9:7c:e6:f9:57:30:
                    f4:fb:87:21:f5:49:b8:b9:a0:c8:75:de:3c:69:ef:
                    68:e0:7c:38:7e:13:2b:65:e9:88:50:00:0f:db:58:
                    bc:88:d8:d5:d7:68:33:7c:4b:93:08:97:14:00:50:
                    cf:94:79:1f:a5:3e:8b:24:41:f3:6b:b5:1f:11:e9:
                    26:f4:65:65:2b:ad:0a:99:29:28:39:b0:ea:16:17:
                    ea:13:5d:68:26:ca:75:2e:16:0f:c9:c2:c4:c7:d8:
                    6a:4b:34:a0:96:e7:a8:3d:b5:de:a3:19:c4:e0:0b:
                    19:d4:92:3c:0a:22:dd:23:42:73:0f:b5:d6:94:a9:
                    d0:c4:fa:16:63:9d:a8:cf:8c:5c:e6:08:b7:41:f6:
                    2e:7f:0a:b8:f8:70:d0:25:a8:26:aa:1a:2c:eb:a1:
                    b2:3a:62:28:09:ca:5a:7e:f6:35:80:41:9d:ff:3e:
                    8f:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2C:C8:95:DE:57:69:1D:FE:3C:9D:12:6A:80:C3:7B:26:11:E3:CA
            X509v3 Authority Key Identifier:
                keyid:23:0A:A1:60:A6:E8:86:C1:03:DA:DB:E4:4B:23:C2:77:76:05:73:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwqhYKbohsED2tvkSyPCd3YFc5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/6eb54e-e709-4b7a-ade9-a9aeb485d592/1/IwqhYKbohsED2tvkSyPCd3YFc5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:ad:7a:89:37:57:a7:66:21:89:45:e7:10:19:e8:77:be:79:
         f1:1f:6d:cd:e7:30:48:12:af:fe:87:e2:ac:3a:59:ec:d5:42:
         35:b5:1e:bb:ac:47:77:21:84:e9:ce:e2:ea:19:97:8b:57:1a:
         13:b4:07:1f:1f:9c:53:10:44:bd:11:88:cb:41:17:c1:f2:6c:
         4f:b9:17:60:a6:81:bb:9f:67:69:18:1b:c1:be:ec:83:b8:91:
         f5:19:f5:43:fe:bd:d5:0d:2f:3e:5b:16:a1:61:f4:f9:15:fa:
         ba:4f:18:b1:e0:be:c6:f7:df:5b:3f:6a:56:d6:fe:f0:15:a6:
         ac:1a:ef:ae:36:84:9b:01:75:02:00:8a:ea:08:88:fb:26:02:
         36:8c:ff:ac:ff:c2:2d:0a:70:11:23:c2:e3:c5:dd:0a:39:d1:
         22:bc:13:0a:c1:eb:58:64:0c:db:dd:6d:f1:f2:97:57:a7:3c:
         78:58:a3:c2:8f:2b:41:4e:4a:44:39:fa:17:92:82:fc:47:b6:
         af:1d:a3:46:ac:c2:03:29:e3:99:47:af:95:dd:1c:d4:a7:b3:
         0f:a4:5b:a3:f5:cb:87:d5:99:14:9a:45:f6:0a:5e:ad:9a:d0:
         46:7a:84:7b:30:da:5b:91:ed:4e:7a:57:5e:7c:3c:a5:fd:c7:
         a4:c8:ab:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----