Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
File:                     iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft (raw, json)
Hash identifier:          FlfaMiTyUXYqy2cTVYac2q+jKS42BOnb/V4z1WXpaRE=
Subject key identifier:   FC:8D:A5:55:D1:8B:01:1A:09:18:6A:7A:76:DC:5F:79:A9:0F:CC:28
Authority key identifier: 88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45
Certificate issuer:       /CN=881ab180cb3517186221b3999b08b83af4f66945
Certificate serial:       01962E61962E3D3B54A4F2E31B24BEFEE9C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft
Manifest number:          03D7
Signing time:             Sun 13 Apr 2025 09:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:09 +0000
Files and hashes:         1: KhBBIepWkUpug0B64mqgsDLFPZc.roa (hash: NekHITh7qbvUL5cT5x1+6spbZNG/DddMxPVXVZ3dQb8=)
                          2: iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl (hash: CDiCFW5JnMFgdEkwUYUfr5pv6WFJoXxQbbsblNYdt3U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:96:2e:3d:3b:54:a4:f2:e3:1b:24:be:fe:e9:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=881ab180cb3517186221b3999b08b83af4f66945
        Validity
            Not Before: Apr 13 09:01:09 2025 GMT
            Not After : Apr 14 09:01:09 2025 GMT
        Subject: CN=fc8da555d18b011a09186a7a76dc5f79a90fcc28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f4:c1:7d:3f:31:82:e5:79:47:0d:62:b3:84:
                    c5:78:73:43:17:ba:e0:d2:5f:a8:b1:40:ad:3d:13:
                    bd:b7:fc:c8:3f:1f:3a:92:47:9e:76:c2:7a:b5:fc:
                    c3:47:ec:2c:1c:45:ce:01:cf:56:5a:cd:41:b1:d6:
                    b7:58:33:f8:61:e1:14:92:67:fe:f6:a4:e5:47:c5:
                    9c:b8:36:d4:6e:76:0a:a2:da:e4:16:06:59:7a:30:
                    05:67:95:08:5c:fb:a0:7e:ca:5b:89:3d:1e:7f:fd:
                    26:6c:ca:c9:a5:ef:67:a8:fd:d7:24:d2:c1:90:76:
                    a8:a6:02:af:a3:80:5e:7c:2d:6e:da:e7:0b:c7:fc:
                    63:75:26:1b:88:96:cb:5c:81:97:4d:74:2d:b6:bc:
                    35:78:ce:b0:53:dd:a5:1e:ee:28:a0:99:6c:1f:b4:
                    52:80:ed:75:9b:e5:6a:ea:f0:86:14:d6:c3:cd:22:
                    47:4a:ee:4e:7f:6e:0a:26:ca:c3:18:4a:34:ec:97:
                    7e:10:fb:75:49:41:f0:e8:b6:61:02:d9:3b:fb:18:
                    60:27:4a:5d:d3:92:84:c3:01:5f:a0:3c:6f:83:c7:
                    b6:2d:20:33:27:b7:6b:9c:f2:c1:7e:ac:46:08:0f:
                    10:ff:aa:ce:42:d5:9f:82:d1:80:40:96:69:7e:c7:
                    40:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:8D:A5:55:D1:8B:01:1A:09:18:6A:7A:76:DC:5F:79:A9:0F:CC:28
            X509v3 Authority Key Identifier:
                keyid:88:1A:B1:80:CB:35:17:18:62:21:B3:99:9B:08:B8:3A:F4:F6:69:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBqxgMs1FxhiIbOZmwi4OvT2aUU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/c7f601-3fa2-4db6-a03d-3a63bf7630f5/1/iBqxgMs1FxhiIbOZmwi4OvT2aUU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:0f:dc:ae:cd:d1:a3:7f:4b:68:f9:48:7d:f5:72:2e:b4:42:
         c3:f4:8f:0b:97:f6:af:d1:34:0a:83:fd:3b:0e:98:81:4e:3a:
         52:b8:e7:5d:b0:7a:84:6a:32:64:8e:45:ae:83:73:f4:45:06:
         7f:76:7f:0b:b2:fe:8f:64:9b:82:2c:e8:6a:f4:27:8a:fb:5f:
         73:4a:8e:11:86:ff:f1:b9:52:e6:f9:21:a6:4f:03:ff:a8:1d:
         6f:ab:1f:61:37:31:ba:56:ad:7b:1b:77:a1:13:40:02:73:31:
         d5:8c:6f:52:71:78:16:64:e9:c3:cd:fa:6a:e0:8b:5a:12:6c:
         cb:07:d3:e9:36:49:d9:04:4d:29:4b:db:06:1e:ba:96:63:6b:
         29:ef:0b:69:5f:48:6d:23:96:4f:86:ed:89:4b:f5:90:f0:c8:
         6a:ae:8c:81:a7:e4:81:10:15:f1:20:1a:b7:df:c8:38:82:db:
         f2:e2:5e:50:2c:43:63:53:d6:9b:43:62:c5:35:75:70:0e:61:
         78:e3:5f:1b:94:18:fc:bd:0d:f4:40:8f:9a:4d:a8:7b:a0:00:
         b0:ef:bd:95:bb:9c:ca:cf:9a:b8:82:7c:b1:bc:d6:fe:53:7b:
         ab:32:40:8b:a8:36:ed:ba:b4:34:05:ab:71:57:be:47:dd:4c:
         af:36:1b:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----