Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
File:                     iGUv5lKWbXKKUnrubkPEhcaTn0U.mft (raw, json)
Hash identifier:          PbohU+othLlbX9lnmPXH5J84XA2XMBE/HddIxlspEI8=
Subject key identifier:   08:96:28:33:05:36:CB:BB:93:28:1F:98:84:E5:5D:BD:A6:55:B8:D4
Authority key identifier: 88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45
Certificate issuer:       /CN=88652fe652966d728a527aee6e43c485c6939f45
Certificate serial:       01962DF43C58C193FB42F10565D311D5BC44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft
Manifest number:          120E
Signing time:             Sun 13 Apr 2025 07:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:42 +0000
Files and hashes:         1: 1b_wV0k49kuwRrhHplXiK2XiroA.roa (hash: RH2MIMTVkHxoiPuLQAUrE2Rqg6UxaLBroHReV0YDdhs=)
                          2: iGUv5lKWbXKKUnrubkPEhcaTn0U.crl (hash: jbNawUOEQtgTProYJNqHPgtjVVl8KzD0NuqhE0SxPPg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:3c:58:c1:93:fb:42:f1:05:65:d3:11:d5:bc:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88652fe652966d728a527aee6e43c485c6939f45
        Validity
            Not Before: Apr 13 07:01:42 2025 GMT
            Not After : Apr 14 07:01:42 2025 GMT
        Subject: CN=089628330536cbbb93281f9884e55dbda655b8d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:39:af:65:4f:b3:6e:ea:6b:bd:fc:d9:f5:df:
                    06:ae:99:bd:01:52:b2:11:3b:74:15:d6:6c:a9:5e:
                    15:b8:46:e8:c6:a3:6a:53:85:04:f0:b3:16:98:93:
                    a7:57:62:cc:43:8f:06:82:4a:b3:6e:2f:61:67:7b:
                    c0:7e:d0:4b:ef:14:f7:ea:c8:70:ed:be:74:72:07:
                    7b:e8:83:92:27:57:e1:ef:f9:70:a5:9c:c9:bd:61:
                    f3:81:5b:93:4c:b5:9b:3f:95:35:7c:8b:62:a3:e7:
                    9d:ae:1c:7e:17:f6:b3:7b:26:12:29:52:d2:c7:ac:
                    e0:46:8b:0c:08:09:c0:97:8e:44:4e:f1:46:05:1b:
                    42:ef:36:33:f3:c6:4d:81:74:89:f9:2c:f2:00:13:
                    a6:2b:f9:23:28:46:76:44:c9:7a:7c:ad:4b:49:59:
                    43:03:83:c3:05:df:f0:3c:6d:34:60:22:e2:cc:5f:
                    f6:83:e9:d7:24:d9:a1:4e:08:9e:0d:e8:02:50:bd:
                    c2:62:86:a4:0d:4d:e6:a4:64:6c:f8:9b:1f:ca:b1:
                    9e:12:96:df:ea:76:d1:cb:0c:ae:b1:3e:a0:91:a5:
                    e6:5e:43:27:f4:59:c3:2d:24:97:01:6e:31:1c:a1:
                    45:7f:29:19:14:b7:d3:5a:3d:61:fd:73:cb:6f:2e:
                    63:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:96:28:33:05:36:CB:BB:93:28:1F:98:84:E5:5D:BD:A6:55:B8:D4
            X509v3 Authority Key Identifier:
                keyid:88:65:2F:E6:52:96:6D:72:8A:52:7A:EE:6E:43:C4:85:C6:93:9F:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iGUv5lKWbXKKUnrubkPEhcaTn0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/201763-176c-4e78-9bc0-496f30ac5275/1/iGUv5lKWbXKKUnrubkPEhcaTn0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:a6:c9:2a:ba:f8:c1:e3:1e:39:31:6a:34:d4:de:15:31:24:
         a2:e8:09:cb:0a:df:bb:e8:dd:96:16:07:a9:32:88:65:87:8d:
         49:2b:df:ee:ce:0a:8c:4c:6e:7e:67:be:4e:2f:de:3b:28:43:
         3b:03:2b:e9:99:7d:8b:fa:70:5e:0e:4d:01:5d:c2:b6:95:f8:
         05:61:55:2c:0d:14:36:3a:0d:65:ef:9f:94:2b:34:3f:b1:02:
         89:17:d0:f7:6f:3c:58:e1:86:6e:1f:79:72:a6:da:09:03:92:
         bf:67:23:f1:a7:91:b7:5d:a6:37:44:fe:b2:1d:c7:c5:d6:3e:
         76:6e:db:2a:3e:e0:48:54:e4:0f:a9:27:63:75:e7:d0:1b:c2:
         cd:4e:97:ca:4a:14:4a:4f:55:6b:d2:99:dd:35:54:02:d3:63:
         2c:a5:80:07:7d:72:ab:5c:7d:b7:59:e0:59:d7:d8:03:10:2d:
         b8:a0:80:45:60:3b:61:46:5a:9e:ff:5d:c4:af:b1:d2:40:c5:
         c1:3a:38:d4:d3:c6:cf:e5:85:51:a0:48:ac:72:5b:5b:f8:11:
         9e:bd:43:78:f5:8d:2b:56:5c:1e:cb:4f:12:34:29:b1:76:51:
         b5:eb:f0:cc:eb:2e:48:83:86:bd:18:69:28:74:0b:08:e7:9a:
         e9:30:cd:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----