Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
File:                     IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft (raw, json)
Hash identifier:          rHGJsnFKlWttFRcEZ5pjak4hHOrJ154Qx9RKD7MHi3M=
Subject key identifier:   E2:B3:0E:AF:8B:7F:2E:D5:97:C9:93:A2:07:D1:4A:EF:A2:3F:6F:A4
Authority key identifier: 21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7
Certificate issuer:       /CN=217b491dccb5632216d80b48f8d6286b1effd8d7
Certificate serial:       01962FAB33143BA3A275BF0B619EEF3D23AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft
Manifest number:          103E
Signing time:             Sun 13 Apr 2025 15:01:10 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:10 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:10 +0000
Files and hashes:         1: EJEuDnvuXiXSyssiuX3zmzznLmY.roa (hash: Oz6+eDgQ3iUmX8LJR3oXdjyr343hyansN3/KTvsHwJc=)
                          2: IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl (hash: 6l4/Re1AG1c6NKBeq9xCTtCYRbAELQzoPf2GgHRTTx4=)
                          3: nrEMql0zV0P3dpHmZH6RSxKuJFg.roa (hash: 1gVFTzoG8NuAbMx8im63wNse5kBK1gIOddqrPu/oX6A=)
                          4: oCdnapI8_jAqvSx-q8QqfeZBfpI.roa (hash: 4dP+f2erpGi6jIqWI+u+ltnYaQjR1Rx/ox+mHYa6aIY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:33:14:3b:a3:a2:75:bf:0b:61:9e:ef:3d:23:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=217b491dccb5632216d80b48f8d6286b1effd8d7
        Validity
            Not Before: Apr 13 15:01:10 2025 GMT
            Not After : Apr 14 15:01:10 2025 GMT
        Subject: CN=e2b30eaf8b7f2ed597c993a207d14aefa23f6fa4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3b:bf:26:1f:fa:e4:74:70:aa:90:46:83:f3:
                    eb:87:a9:e4:2b:05:b9:c6:28:5f:9b:38:d1:4d:b3:
                    ca:62:69:a5:65:3c:04:3e:ab:b4:62:28:d5:07:68:
                    ec:8f:e8:a6:1c:c7:ec:33:64:3f:ab:a6:99:a1:68:
                    e7:f1:62:99:30:3d:6b:59:f5:88:9d:c7:1e:10:93:
                    4b:d1:35:2b:db:f8:fc:db:b6:13:5a:da:0a:21:b3:
                    b3:47:1b:d8:f0:07:cc:43:0e:11:a1:5f:28:c2:e8:
                    bc:60:11:e4:8a:a4:08:14:22:90:86:26:27:e7:8b:
                    42:a9:08:89:aa:76:5c:90:fa:af:f0:b2:fb:cb:e5:
                    33:94:8c:2d:f4:a9:96:46:59:ba:4a:55:10:a4:84:
                    8b:46:37:8b:f7:c3:cb:cc:a3:3f:b3:81:3a:79:c2:
                    c4:f6:dd:78:43:7b:3c:4c:af:cd:23:ff:6a:b3:a0:
                    b9:d8:ad:31:42:d2:c2:96:f6:e9:24:7d:ec:b3:57:
                    f5:06:1e:8c:e9:c7:5b:8b:af:6c:0a:5f:2d:97:1f:
                    ab:57:91:4b:55:17:fd:b1:97:0a:29:28:a5:bd:3d:
                    f8:56:f9:73:d3:3d:fb:ef:f8:d3:6b:a1:5e:9c:01:
                    f7:0a:ac:7b:8a:09:cf:a9:c1:91:8f:b1:fa:8c:a2:
                    ba:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B3:0E:AF:8B:7F:2E:D5:97:C9:93:A2:07:D1:4A:EF:A2:3F:6F:A4
            X509v3 Authority Key Identifier:
                keyid:21:7B:49:1D:CC:B5:63:22:16:D8:0B:48:F8:D6:28:6B:1E:FF:D8:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IXtJHcy1YyIW2AtI-NYoax7_2Nc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e9f29c-9231-450d-adb0-6de05a316239/1/IXtJHcy1YyIW2AtI-NYoax7_2Nc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:64:b9:7c:ed:78:68:3e:9f:00:80:34:73:30:62:01:21:fc:
         79:88:92:03:6c:c4:e8:00:b8:66:83:6e:66:58:b2:3d:12:09:
         40:64:e3:f8:a0:0d:51:4e:08:9d:a1:fb:3e:42:c9:05:17:45:
         31:bb:cf:d8:d7:7e:74:81:24:b6:22:42:35:d6:6a:6c:1f:7b:
         bf:2b:3f:45:2f:0a:2a:13:01:c6:9d:70:dc:df:aa:7b:4c:dc:
         6a:20:3c:43:17:f0:98:35:05:9f:d1:5f:2d:76:29:48:b8:1e:
         0e:6e:eb:48:40:27:0b:a4:d9:a2:07:22:61:96:5e:75:2b:49:
         21:95:85:d5:dc:ff:94:33:a3:9d:ad:8c:bb:f6:10:ea:27:50:
         25:77:88:fc:6f:4b:e0:26:bd:c9:21:48:16:df:f6:76:d7:c1:
         ea:ba:f2:e5:7b:83:c5:2b:2e:ba:bc:a3:bf:02:e0:d9:7c:3d:
         e5:a2:30:b8:20:d6:ed:a4:5e:b0:c9:63:bc:88:a3:15:93:a6:
         6b:4e:4a:72:26:b9:37:a4:60:a6:3a:cc:c9:e2:18:b9:a9:23:
         28:13:36:45:7c:11:57:4c:1d:f5:fb:ef:c2:f4:7c:d9:59:37:
         6a:1b:8a:83:ff:55:ab:76:95:61:ef:e2:49:6e:b7:fd:2f:f9:
         45:00:e3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----