Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
File:                     IATWKTJ0OW9ajWkUhdaHagogcdk.mft (raw, json)
Hash identifier:          8LmCaGbGwa3tUjVNNY3FPvEWCYmOIY7LwWtiFdWFT/E=
Subject key identifier:   15:1C:58:0A:49:7A:00:3F:79:AF:63:DB:37:14:DE:C7:A9:7F:2C:66
Authority key identifier: 20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9
Certificate issuer:       /CN=2004d6293274396f5a8d691485d6876a0a2071d9
Certificate serial:       01962F070A29DF72F907F92E0C8474FAF9C4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft
Manifest number:          118B
Signing time:             Sun 13 Apr 2025 12:01:52 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:52 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:52 +0000
Files and hashes:         1: IATWKTJ0OW9ajWkUhdaHagogcdk.crl (hash: zl8hSeVwF1NOvAaHdT+sHgENTVYz1JljSoUhkYhRb5M=)
                          2: aEJUX-P3iWzm8iZ2YmNhX1BUm-w.roa (hash: UCW6fp2JBu8X3L8wVEatff2uZp8yn3edNh91K1NyH88=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:0a:29:df:72:f9:07:f9:2e:0c:84:74:fa:f9:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2004d6293274396f5a8d691485d6876a0a2071d9
        Validity
            Not Before: Apr 13 12:01:52 2025 GMT
            Not After : Apr 14 12:01:52 2025 GMT
        Subject: CN=151c580a497a003f79af63db3714dec7a97f2c66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f9:5d:c2:b9:1b:47:47:1b:5b:33:6f:2f:6c:
                    38:87:37:8c:4c:30:72:ff:f9:04:6e:a9:a4:8f:37:
                    ca:51:db:f6:c3:bc:40:b7:c0:a6:f2:61:52:e5:7a:
                    fd:3f:3c:bb:03:49:5b:47:e3:1c:2c:ae:60:0a:c9:
                    e8:9b:d0:8d:de:60:bb:e1:42:70:b3:43:f0:79:c7:
                    1a:3b:71:df:a8:20:2e:ff:5b:60:42:95:a4:df:ff:
                    b5:14:b3:e2:01:bd:a0:dd:a3:86:fd:f5:42:58:35:
                    a9:de:55:69:89:97:ed:2e:91:ee:72:8a:77:c2:5d:
                    ab:b8:cd:a4:6d:64:57:50:12:66:13:a4:a9:08:b3:
                    5b:17:17:68:69:94:0e:82:4c:09:b5:5e:0c:e3:a2:
                    59:e8:76:8e:1d:b8:8e:4d:40:d8:7b:df:21:0b:e9:
                    47:3f:d9:f4:ef:6b:da:15:1f:1f:de:d5:1a:e6:e7:
                    a3:b6:39:96:15:ea:bd:86:40:25:c5:95:9b:c1:c6:
                    2e:34:4b:67:31:2b:b8:6a:64:eb:b9:b4:b7:2d:a4:
                    08:da:22:fc:55:7f:f0:e9:79:ee:46:57:d6:7d:d6:
                    04:55:10:67:05:31:cb:df:54:64:22:ba:ed:cf:d8:
                    2c:09:7d:e0:96:f0:bb:9b:46:3b:f6:b7:76:db:e6:
                    c3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:1C:58:0A:49:7A:00:3F:79:AF:63:DB:37:14:DE:C7:A9:7F:2C:66
            X509v3 Authority Key Identifier:
                keyid:20:04:D6:29:32:74:39:6F:5A:8D:69:14:85:D6:87:6A:0A:20:71:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IATWKTJ0OW9ajWkUhdaHagogcdk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9e5cbd-4d5a-4ed6-b1c2-4ef9cc751517/1/IATWKTJ0OW9ajWkUhdaHagogcdk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:3c:9b:0a:94:f7:80:18:5c:fb:6d:04:c3:de:bd:02:3d:4f:
         74:d5:c1:fa:c1:7f:45:e4:e1:a2:e2:bc:1a:47:c5:d3:02:57:
         0f:34:cd:8f:73:f2:f4:22:ee:a0:b2:54:ad:20:e1:3d:c3:52:
         48:4d:47:90:f3:29:70:f2:25:fc:6b:9c:6a:05:55:ec:d4:92:
         79:5b:26:15:4f:f9:22:6c:5a:54:87:46:d4:36:76:ae:34:d6:
         03:7b:08:f2:7e:35:b4:f5:db:6b:4b:f8:01:38:22:82:24:75:
         7f:19:de:ed:8b:03:51:ad:48:c8:7e:7f:87:6c:5f:cc:9a:c6:
         44:d8:e3:41:9c:30:f3:07:11:90:c3:a9:c9:79:fe:8f:36:f8:
         b1:f1:46:8c:c5:23:57:e1:35:fd:4a:89:ca:23:c6:23:1e:93:
         91:80:70:c7:34:9d:0c:f8:f3:b3:31:78:6b:70:d5:68:96:51:
         a8:22:9a:2e:cd:5a:44:51:54:48:4b:83:c3:1c:87:a6:cf:47:
         15:b8:a3:d5:39:e2:26:05:08:4a:6a:e7:c3:67:45:42:27:a9:
         6c:9f:6b:54:61:d2:c4:a7:62:cb:d5:18:58:7a:d0:f6:5c:98:
         61:ea:fa:33:dc:db:5f:d6:b7:5d:27:18:7e:60:de:f8:dc:68:
         d0:41:86:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----