Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
File:                     iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft (raw, json)
Hash identifier:          RPlGxzMWlW1Q2hpzkm05+sSD417dk461wdKhrg432SY=
Subject key identifier:   63:56:98:3C:A8:3C:39:3B:A5:FD:59:A3:6D:43:C1:74:89:3F:2A:23
Authority key identifier: 88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51
Certificate issuer:       /CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
Certificate serial:       01962E2AC8DB7D36C475E27ECA82CFCCC22A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft
Manifest number:          143D
Signing time:             Sun 13 Apr 2025 08:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:17 +0000
Files and hashes:         1: Qv6t4wP7j-uLsxcfTWHv2ZFQWD8.roa (hash: eR47NrGWjMdNEp9FBa07vBAWwdqKIDeSc8imYvJOwfI=)
                          2: iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl (hash: gVkyx0eVPsvtou/veztpQIlPPiz0Q+zYKE375EI93Ew=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c8:db:7d:36:c4:75:e2:7e:ca:82:cf:cc:c2:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8844fc4ae106499e0575ff3ca1556dbc0d9b4651
        Validity
            Not Before: Apr 13 08:01:17 2025 GMT
            Not After : Apr 14 08:01:17 2025 GMT
        Subject: CN=6356983ca83c393ba5fd59a36d43c174893f2a23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:85:80:e2:9f:58:95:04:11:eb:2b:b8:fc:4c:
                    5f:73:1f:44:61:1b:17:e6:8d:26:e3:69:5f:8b:cc:
                    d8:93:90:b2:3b:66:22:c3:38:b0:2e:a3:8f:3d:fd:
                    ba:ee:c2:2b:4c:1b:df:64:2a:18:ea:ee:89:4b:f6:
                    6d:5e:89:1c:25:30:3d:8f:e1:5b:40:26:76:de:0e:
                    76:dd:9a:7e:e8:30:fb:5f:b5:74:bc:38:9e:c2:bf:
                    db:fd:1f:5f:58:d2:49:86:3f:1d:93:f2:35:c5:68:
                    f6:12:16:a5:16:ff:29:6d:1e:a7:35:1a:16:d4:b5:
                    70:65:21:6c:86:2b:91:e5:8b:b9:60:c3:de:b4:0c:
                    03:72:69:98:a9:5f:05:2a:a3:6a:8a:2d:2a:ac:b5:
                    8f:38:c4:8d:68:e5:a2:18:33:64:33:a6:dc:44:87:
                    09:a2:4d:a9:89:5b:e0:f7:48:42:4f:83:8c:4a:16:
                    ce:61:ee:ca:59:32:30:b7:ea:6a:f2:20:be:3a:3a:
                    79:76:30:2a:35:d1:81:db:a1:0c:5d:1c:ed:84:1c:
                    f2:ab:c5:1e:3d:c8:96:02:7e:8a:9d:23:1b:a7:9b:
                    99:c9:1d:60:95:8f:36:93:80:40:3c:17:26:c4:3b:
                    16:25:c4:61:ec:19:48:4b:63:f6:16:b2:b6:49:0a:
                    bf:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:56:98:3C:A8:3C:39:3B:A5:FD:59:A3:6D:43:C1:74:89:3F:2A:23
            X509v3 Authority Key Identifier:
                keyid:88:44:FC:4A:E1:06:49:9E:05:75:FF:3C:A1:55:6D:BC:0D:9B:46:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iET8SuEGSZ4Fdf88oVVtvA2bRlE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/dd42d9-ff88-4ca0-883c-317645cd7885/1/iET8SuEGSZ4Fdf88oVVtvA2bRlE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:ed:22:e8:27:25:87:a5:8a:ce:a4:52:4d:5e:ed:3e:7f:7d:
         39:6f:c0:1e:56:2e:d0:52:bc:4b:a8:22:62:be:5a:ae:c9:18:
         10:a5:1c:63:42:33:96:36:ee:80:c8:70:a0:93:b3:ad:a2:d8:
         64:18:7a:41:f1:6e:54:4e:fd:06:22:13:24:3c:6e:9a:b9:03:
         c0:46:e5:e6:bd:7b:3c:e9:d4:a7:af:f6:f0:8a:c8:14:d9:97:
         b9:85:d5:96:c2:64:b6:38:63:81:56:15:d4:0c:34:de:b1:5b:
         14:5c:84:d6:0d:68:d9:9c:c2:28:e2:70:e0:f6:f8:91:9d:95:
         0b:e4:99:c4:75:33:2a:f0:33:64:f9:03:1a:38:23:6a:29:bb:
         ad:7f:da:0a:86:30:c7:a8:65:ab:7b:3a:3f:e5:71:76:35:58:
         02:ea:ae:39:c4:54:10:23:a6:9a:58:16:64:84:62:5d:d0:5e:
         c1:1c:85:e7:4e:05:17:0e:f0:83:93:ac:26:fd:ef:72:ea:9e:
         f8:8e:24:1f:e4:19:c8:41:8c:e9:14:0b:ff:04:68:aa:85:a6:
         ab:39:47:19:e2:80:93:0e:22:64:be:cc:b4:7a:cb:b9:f9:63:
         bd:9e:25:f7:dc:7c:bc:d6:ee:47:0d:52:95:31:cc:af:71:7f:
         53:75:f4:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----