Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
File:                     I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft (raw, json)
Hash identifier:          lGNBLYswuKojFlUpbmD76+OaYIUIkOzS/o3G+/g1d4Y=
Subject key identifier:   23:B2:DB:BA:DD:59:43:F0:11:09:16:68:90:43:28:FF:72:3E:17:E2
Authority key identifier: 23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A
Certificate issuer:       /CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
Certificate serial:       01962F06A693A505A2DB7775D78015B3C274
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft
Manifest number:          01E3
Signing time:             Sun 13 Apr 2025 12:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:27 +0000
Files and hashes:         1: I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl (hash: jfbUu5pJp5mI5IKKhwsjXDjS3eQrqpr8vo2aooKVMfI=)
                          2: j4EIa7tKAt7zUJqXstTzU7rzvAM.roa (hash: KBhYqMx9SY3f4s8BMjZo/0KJeCGNnKyC4D8ert+K2y0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a6:93:a5:05:a2:db:77:75:d7:80:15:b3:c2:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a9867ea603fc8cf92bb5bac6f255710e3bf36a
        Validity
            Not Before: Apr 13 12:01:27 2025 GMT
            Not After : Apr 14 12:01:27 2025 GMT
        Subject: CN=23b2dbbadd5943f011091668904328ff723e17e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4c:6b:af:1d:43:3a:89:57:18:33:1e:e8:45:
                    97:5f:cf:e6:b8:a6:de:4c:e1:b4:e3:90:96:b1:0f:
                    03:53:b1:27:58:b6:e0:33:37:71:fa:c6:64:24:db:
                    ad:82:9f:f6:3e:c0:eb:bb:2b:aa:86:b5:23:f0:3d:
                    19:7b:f4:af:50:24:92:aa:64:37:66:0a:9b:94:40:
                    a5:13:ba:10:89:e8:11:6f:2e:73:37:76:c5:34:65:
                    01:00:01:6d:01:0b:e9:ab:3b:a8:8b:7e:76:49:3f:
                    ac:c5:2e:f1:40:70:a0:2f:8b:b1:a6:ca:6c:18:ae:
                    f9:41:ec:e1:16:30:43:5f:2f:74:4c:f8:52:7b:d2:
                    f2:ce:0a:59:80:0c:2b:fd:a2:15:6d:8f:cf:cb:e6:
                    5d:e6:5f:8c:74:89:db:f6:2e:ec:b8:46:86:e8:93:
                    9f:0d:ba:25:ba:0c:d3:2c:e3:5c:ab:3e:02:3b:cb:
                    07:80:0b:88:66:01:d0:e4:17:7d:8f:db:0f:48:b6:
                    44:d2:84:74:ee:24:fd:4f:52:33:af:c8:33:05:26:
                    d6:26:ba:5a:7c:cc:e0:96:93:a3:af:5f:11:b9:00:
                    cb:fa:33:96:c3:99:67:9a:de:4a:63:68:c0:6e:59:
                    9d:3d:52:3d:3e:0f:00:7b:f5:b3:90:9a:79:ff:2a:
                    6c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B2:DB:BA:DD:59:43:F0:11:09:16:68:90:43:28:FF:72:3E:17:E2
            X509v3 Authority Key Identifier:
                keyid:23:A9:86:7E:A6:03:FC:8C:F9:2B:B5:BA:C6:F2:55:71:0E:3B:F3:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6mGfqYD_Iz5K7W6xvJVcQ4782o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ece5b-360f-4be4-aa61-594a27db146b/1/I6mGfqYD_Iz5K7W6xvJVcQ4782o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:5d:29:60:b0:de:85:47:83:49:bb:39:49:79:a9:7e:a5:e6:
         d6:af:b1:0d:c8:e5:ab:a6:38:99:3a:be:d1:cb:58:b0:bd:bc:
         1c:6e:91:c4:4f:92:f2:d8:97:ab:b8:bd:ad:3c:4b:b8:0d:f5:
         f6:c1:12:6d:70:eb:07:b4:e9:16:e4:02:cc:ec:8f:5b:e2:4c:
         5b:92:24:b9:86:ca:c2:32:21:07:77:13:fa:62:b8:98:cf:57:
         83:82:d1:56:6c:1f:2d:58:ce:c2:e5:e2:38:59:6d:0c:0c:c1:
         f8:f3:6a:d5:33:25:e1:fe:d0:68:78:e6:66:1c:84:8d:c9:17:
         f8:b2:01:ad:6a:59:ba:53:d9:70:c3:b8:2c:cd:c8:ca:1d:fb:
         89:a5:42:19:1a:34:b5:11:31:09:95:77:74:2f:ce:5e:48:20:
         4c:d7:47:99:0b:f3:51:b8:eb:4f:0e:60:a0:ad:71:72:34:bc:
         34:86:a1:e3:8a:c9:1d:15:da:d8:30:1f:13:82:d4:81:30:10:
         4e:3d:33:c5:20:1b:29:3e:ad:1d:a1:1f:37:29:65:01:9f:29:
         62:88:07:02:3b:ae:50:3c:4e:67:bb:ca:e8:42:3c:fc:06:90:
         d3:a7:2d:51:94:1e:d4:bc:49:fa:04:d5:4a:56:92:9c:67:7f:
         35:f5:ab:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----