Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
File:                     ITyyohgafTb0DkF1jWJ_cBpgIEI.mft (raw, json)
Hash identifier:          5se6is7UnYMdJ4fLkQs5r8OgzIzxApgpEzSill6IdMA=
Subject key identifier:   6D:3D:2F:B8:34:41:77:FE:76:A6:7A:86:47:6E:BF:C5:AB:33:08:3E
Authority key identifier: 21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42
Certificate issuer:       /CN=213cb2a2181a7d36f40e41758d627f701a602042
Certificate serial:       01962F06DCD3ECA0FD9112A2E566BAB91E8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft
Manifest number:          03E8
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: ITyyohgafTb0DkF1jWJ_cBpgIEI.crl (hash: pPoujnAdqQiJqgE4tFukX/+N0v5LKQTwiTSarn6rSIc=)
                          2: fJqV7x77nRb2Myj4lG_sx_PNw-4.roa (hash: zCh70VSES25/KHwSsTgt0cx68+3r91QI55cbavDhYdA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:dc:d3:ec:a0:fd:91:12:a2:e5:66:ba:b9:1e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=213cb2a2181a7d36f40e41758d627f701a602042
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=6d3d2fb8344177fe76a67a86476ebfc5ab33083e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:29:a5:fd:82:c3:fc:db:65:58:36:b4:09:19:
                    7a:7d:99:e4:28:9c:75:3b:07:00:a9:b3:28:05:d4:
                    b9:65:c1:58:4a:b3:05:e2:29:06:b1:20:9c:f9:cb:
                    9a:06:9c:95:1c:5b:20:9b:c7:e2:2c:d0:5d:8a:3e:
                    8b:a2:1e:ea:02:67:df:11:74:b2:af:54:f5:ba:2e:
                    5a:6c:76:b9:4e:d8:e4:22:44:dc:e4:1f:29:12:65:
                    66:f2:72:8e:69:98:08:70:4f:7d:cf:8d:6a:f4:a7:
                    50:dd:f4:3e:52:d4:ee:56:7e:7e:32:63:4d:71:1a:
                    73:57:f4:9f:21:ce:b9:87:a1:7c:9b:d3:14:d9:b7:
                    b1:73:6e:72:2b:3a:e2:e0:a4:fb:a9:00:ae:ee:28:
                    2f:bf:5c:11:2c:ab:1d:b2:25:fd:6c:a7:60:c0:3c:
                    00:7b:ee:41:a1:7c:2a:2e:b2:35:64:f5:c9:40:43:
                    37:d0:dc:51:0f:9e:e8:ae:4d:b8:ef:b8:41:63:ea:
                    69:eb:c4:89:d0:30:a0:95:66:18:34:28:4c:3f:f2:
                    7e:46:13:c2:8b:34:41:92:18:23:c1:d7:9d:2b:8c:
                    cb:1c:92:8c:ff:d0:86:15:46:92:1a:de:c0:fe:7a:
                    87:84:db:9f:23:25:56:72:9d:72:71:f4:ab:8c:41:
                    cc:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:3D:2F:B8:34:41:77:FE:76:A6:7A:86:47:6E:BF:C5:AB:33:08:3E
            X509v3 Authority Key Identifier:
                keyid:21:3C:B2:A2:18:1A:7D:36:F4:0E:41:75:8D:62:7F:70:1A:60:20:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITyyohgafTb0DkF1jWJ_cBpgIEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/19/dc11d6-4c35-4daa-a7de-3e51bcd14736/1/ITyyohgafTb0DkF1jWJ_cBpgIEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:5c:a4:02:60:0b:58:f2:04:0c:08:6c:55:2e:f9:8c:6d:14:
         4a:2d:e7:1d:93:34:8a:46:c5:30:55:4e:c7:2c:06:02:d4:74:
         87:7d:cc:16:d8:83:fa:64:0d:68:f6:09:84:ba:84:71:57:62:
         93:5d:b9:76:c2:65:6f:04:a7:d9:4c:7c:20:c0:d8:31:c7:a4:
         6c:cd:2e:00:87:f1:98:02:de:8a:b6:a6:dd:13:64:6b:d8:5b:
         ea:0e:69:0b:66:94:fe:0d:a4:c7:2b:81:5b:b8:03:92:ee:1e:
         08:b4:87:9b:1d:dc:66:8d:57:3f:be:7b:e8:f9:fc:a1:4e:21:
         bb:4a:3d:95:31:f0:48:1b:1f:af:48:be:b9:eb:a4:f9:af:db:
         6f:7b:3f:92:44:e5:da:bf:4c:bd:2a:06:62:22:ca:ad:f6:ec:
         e4:5d:75:8c:5b:54:29:32:84:e3:98:4e:30:2e:3b:0f:b1:83:
         6d:27:f3:e9:fd:4a:ae:24:5f:7f:21:44:1a:e2:25:b2:f7:c7:
         73:a6:de:76:4a:ae:95:72:94:0a:a2:6c:53:4d:64:2f:35:74:
         e1:42:95:c3:67:1c:31:a0:a6:11:4e:47:e9:c9:26:dd:dc:b4:
         f1:6b:ef:f7:2d:26:6f:8c:84:df:39:e8:34:22:0b:7b:c1:dc:
         a9:63:18:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----