Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
File:                     IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft (raw, json)
Hash identifier:          dz871H5ncstrkguUpn79xHtRRPQwtfQ/t/s89ksbARk=
Subject key identifier:   3A:F1:4F:AC:1C:03:D7:73:1B:6C:58:2A:B9:79:B7:A5:42:84:BB:4F
Authority key identifier: 23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3
Certificate issuer:       /CN=23051215f6f1bd227db7f40df748d64c106f84a3
Certificate serial:       01962F74BA41CC92D539A0B7D029FBD8C678
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft
Manifest number:          0227
Signing time:             Sun 13 Apr 2025 14:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:41 +0000
Files and hashes:         1: EuYflw2vpOToo9K8lFetTYAhWyo.roa (hash: SUT2OfNUp9WFMOp/u/f5+vrQyr/WoDJgwv8+U/p5Afw=)
                          2: IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl (hash: cu2U/dHFA/yHCDKxB00q2OgEXlDmWKDiSnZV8VmEWH0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ba:41:cc:92:d5:39:a0:b7:d0:29:fb:d8:c6:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23051215f6f1bd227db7f40df748d64c106f84a3
        Validity
            Not Before: Apr 13 14:01:41 2025 GMT
            Not After : Apr 14 14:01:41 2025 GMT
        Subject: CN=3af14fac1c03d7731b6c582ab979b7a54284bb4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:df:10:99:e0:f7:5a:8d:f8:48:b0:60:d2:08:
                    d6:c5:92:89:07:68:d4:cf:99:14:32:8a:4d:8a:fd:
                    ec:47:f9:d2:4f:cf:0f:15:6a:4a:da:d2:1c:84:c9:
                    3b:fc:df:98:aa:93:de:ff:7c:72:b6:e3:3a:39:d2:
                    47:f2:57:6c:41:de:14:c6:e4:97:e3:98:29:c4:47:
                    5f:aa:ee:f2:fc:80:9b:7d:8b:24:22:72:34:8f:7d:
                    0d:9d:37:52:a7:f7:db:ff:a8:81:e7:e6:f8:0f:bd:
                    a8:cb:93:a2:bb:63:c8:a3:1d:32:ea:49:b5:8a:81:
                    43:24:13:e8:a2:1b:bf:74:16:c2:f6:4a:b4:76:0a:
                    cb:d7:7d:73:c6:a8:9e:7f:d1:58:34:11:db:47:0b:
                    7d:f8:fa:74:a7:4b:25:83:03:1b:15:92:56:9e:66:
                    f1:6a:fe:6c:dd:41:55:3a:06:1d:19:7b:ae:2b:a0:
                    27:2a:c7:94:90:dc:16:8c:85:ce:a2:a2:8d:91:af:
                    af:f3:bc:1d:b6:f5:d7:b5:a0:36:c5:e5:e1:5b:e6:
                    0e:45:ec:c5:2c:08:f0:e9:3e:f3:5e:13:2b:1b:5b:
                    7b:9f:a8:ef:a0:39:2a:3d:92:34:4b:3d:7e:72:44:
                    1d:a6:65:c2:12:fc:2c:2a:5c:33:d6:51:b4:1d:30:
                    08:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F1:4F:AC:1C:03:D7:73:1B:6C:58:2A:B9:79:B7:A5:42:84:BB:4F
            X509v3 Authority Key Identifier:
                keyid:23:05:12:15:F6:F1:BD:22:7D:B7:F4:0D:F7:48:D6:4C:10:6F:84:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwUSFfbxvSJ9t_QN90jWTBBvhKM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2fb486-79a0-4396-833b-6c6f0e319ca1/1/IwUSFfbxvSJ9t_QN90jWTBBvhKM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:38:40:11:86:a3:3a:1a:41:52:54:59:d1:fd:1a:c1:f8:7e:
         cd:21:9c:af:44:41:da:7e:6c:9d:0c:ec:9d:6c:0a:8f:a8:e0:
         8d:65:2e:8b:10:a6:db:73:6f:aa:b8:f8:ba:64:ab:01:c0:c7:
         7e:3f:ba:f1:53:18:4a:c0:01:a8:00:64:bc:a9:b8:4f:51:cc:
         eb:e8:68:4b:83:78:e8:52:bf:d9:19:cc:97:7c:f8:32:7f:f6:
         4a:7a:c5:76:65:d3:26:32:ca:69:4c:ef:a8:87:d8:4f:97:be:
         56:48:ad:89:83:86:e9:46:14:b3:37:a3:f5:16:bc:74:70:30:
         71:c7:1d:e7:cb:1e:10:98:69:cb:0d:cd:b6:86:80:1a:7c:2c:
         fa:3b:af:ed:1c:37:aa:fc:62:21:c2:1c:2f:4d:26:3d:d9:c4:
         f9:f7:5b:12:7d:67:92:2a:c3:c0:b7:6f:f6:ac:cc:db:05:78:
         1d:0c:ed:50:19:3b:ef:f9:b3:ff:76:14:2d:3d:49:f9:01:66:
         20:48:83:24:03:a0:a7:c4:f8:32:4a:f9:d1:a8:6a:75:c6:58:
         e9:66:45:ba:b4:a1:d6:b3:89:06:87:4d:f3:b9:ca:a9:85:65:
         d5:9d:7d:ec:82:c7:ce:2c:4a:af:66:12:50:6b:cd:7c:49:a1:
         5a:14:7b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----