Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft
File:                     ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft (raw, json)
Hash identifier:          BcXifvKBx/DCAlQ7adq1b0dfyomB2nWw+G4aquwnntY=
Subject key identifier:   79:07:E0:5F:61:BD:05:3E:E1:12:6A:B0:4D:63:FE:DA:0D:58:53:4D
Authority key identifier: 89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B
Certificate issuer:       /CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
Certificate serial:       01962F0731E847E2F405C539BB323D35ECCC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft
Manifest number:          0F75
Signing time:             Sun 13 Apr 2025 12:02:02 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:02 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:02 +0000
Files and hashes:         1: 50v4LzlHhYMKbD4_ZkEJUgTdzZ8.roa (hash: 1zEQgnD6BlkobEHrpf54y5TDCgcpHnLxK3nKztK1TZQ=)
                          2: ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl (hash: QITZa32Jx46XMmPKEpf6hZ0KEAEklsaRLiqEPC+HTQ8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:31:e8:47:e2:f4:05:c5:39:bb:32:3d:35:ec:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89e4bf59877a3b2ef14f5f120a6750dc14939c6b
        Validity
            Not Before: Apr 13 12:02:02 2025 GMT
            Not After : Apr 14 12:02:02 2025 GMT
        Subject: CN=7907e05f61bd053ee1126ab04d63feda0d58534d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:99:b2:f8:6c:83:2a:cf:30:7a:8e:35:d9:1e:
                    2f:19:7a:c2:bf:18:ea:96:12:10:b2:80:99:a3:ed:
                    91:d1:2d:de:ad:02:0f:81:00:36:aa:f7:44:81:4e:
                    57:15:03:fa:81:76:19:a2:a5:9c:a2:6a:77:a8:a4:
                    d4:97:b8:47:8d:50:33:49:89:ea:e2:68:91:5b:62:
                    37:19:e9:91:1d:e4:f0:a3:28:11:f7:be:78:2b:45:
                    23:dc:da:e2:ab:26:0b:62:f2:4a:2a:81:b6:a8:41:
                    f7:fc:44:3d:73:73:34:66:a9:72:83:48:12:06:68:
                    35:40:ea:e4:37:cc:09:a5:91:55:cb:bb:af:75:01:
                    12:93:a1:04:8e:ed:c1:18:d0:de:d4:bc:f5:9c:01:
                    06:ed:d3:ae:6e:a4:41:61:3d:41:0f:74:8b:e6:58:
                    bd:eb:9c:4c:df:8e:15:6b:bb:62:c5:6a:46:9e:fe:
                    2a:54:23:0a:f0:bc:c4:cc:c8:f2:17:61:54:c0:ed:
                    37:66:e0:27:b9:2a:88:e8:4b:b5:8f:8c:67:15:46:
                    12:7a:20:3c:3d:0d:32:ee:69:ca:69:7f:e6:03:fd:
                    75:99:47:1c:0a:ac:2f:37:9f:c9:3b:68:4b:44:0f:
                    a6:ed:11:61:87:32:07:37:f7:5f:aa:5d:1b:be:44:
                    da:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:07:E0:5F:61:BD:05:3E:E1:12:6A:B0:4D:63:FE:DA:0D:58:53:4D
            X509v3 Authority Key Identifier:
                keyid:89:E4:BF:59:87:7A:3B:2E:F1:4F:5F:12:0A:67:50:DC:14:93:9C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/075bc1-2b55-40b1-990e-23bb4203eb57/1/ieS_WYd6Oy7xT18SCmdQ3BSTnGs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:49:3c:7f:32:1b:4b:8c:ed:f5:44:5b:1c:44:ed:d0:ac:d1:
         1f:cc:b5:51:ad:00:e8:00:0c:1f:2d:1a:76:2c:93:12:73:1b:
         35:47:8e:3b:83:4e:4e:7a:ff:77:d7:95:fc:bb:b7:2f:d1:ec:
         cb:4f:c5:d9:96:45:b1:63:aa:81:f3:5a:7b:8d:91:b4:b6:e3:
         2f:b0:0f:5d:9f:de:ae:93:d5:b6:bc:d0:a4:9c:a1:36:a2:35:
         a1:12:63:d4:8b:c2:55:41:cc:65:fd:86:68:85:b9:a1:c5:d7:
         9a:5a:7c:cf:67:d7:8b:65:10:ce:b0:10:a8:8e:be:85:fd:01:
         4a:0e:4c:b8:49:76:e6:a2:52:ca:d0:2b:d6:4a:b5:1c:ee:fb:
         a2:f9:30:7b:87:3c:ac:c2:38:9f:dd:29:e1:5f:1c:25:38:0f:
         d4:b0:14:79:ff:bb:c0:bf:b4:22:22:89:5a:fc:e5:65:9a:f4:
         f9:2d:5e:48:1d:8e:c4:ec:f2:f2:56:20:ba:f1:f2:46:3e:50:
         10:36:4f:5f:80:7d:0e:11:0f:66:6f:18:0d:0f:db:ff:a6:6b:
         c0:94:69:1f:ef:ea:8c:cc:ed:e5:8d:9f:f3:c9:45:1b:c3:48:
         d6:b9:55:10:d2:67:d4:07:7e:ae:a8:45:aa:4c:a1:d3:7e:47:
         ae:a6:2a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----