Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
File:                     I2YsmpgK11hGUKuqNUW56pHT414.mft (raw, json)
Hash identifier:          Xc1BAh+A+lV5pUC3m8mMb0b/sG3ByQTLH+F2n1nGsvA=
Subject key identifier:   30:50:73:75:D2:A4:50:C9:4F:96:86:FA:25:A2:FE:EA:67:1C:2F:8E
Authority key identifier: 23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E
Certificate issuer:       /CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
Certificate serial:       01962E2ADC592541021BEEF27FA46F4CD9CE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 08:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:22 +0000
Files and hashes:         1: C3a8w3EA0yZf6c0xKrOAJTxFR18.roa (hash: LNpEHJw7nSfysWTvnjy399UaYBj+VVtM2qrA/gSp1Ss=)
                          2: I2YsmpgK11hGUKuqNUW56pHT414.crl (hash: 5IeN6b4KRQzsXKi1FmkQcD+LIdk17EhDH+ZntDYro7g=)
                          3: ODeZnWNl5WX6QJG7docdS6N0Lh0.roa (hash: /UPoSxqJgEbJd9A+t+po1hpjOf0Zwwvb5Sbep9uGpqM=)
                          4: sWPuB2_JaQ5IbfWV6TRjwzAEtmo.roa (hash: 2MwXerlOGNKciqFr23+HmocPZA4iLoGvibtwd5TaAxE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:dc:59:25:41:02:1b:ee:f2:7f:a4:6f:4c:d9:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23662c9a980ad7584650abaa3545b9ea91d3e35e
        Validity
            Not Before: Apr 13 08:01:22 2025 GMT
            Not After : Apr 14 08:01:22 2025 GMT
        Subject: CN=30507375d2a450c94f9686fa25a2feea671c2f8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8a:e2:5d:1b:0d:fa:cd:fe:e7:13:e0:38:be:
                    0b:98:3b:d3:a2:72:bc:c3:7c:10:2c:e7:bd:f7:f1:
                    07:e7:d0:19:41:5e:15:a3:8d:f3:ba:5b:01:70:81:
                    ee:4a:c3:60:df:19:f4:cf:77:15:00:1c:37:e0:86:
                    ab:8a:4b:b0:e3:02:6c:f4:cc:d2:db:41:ab:05:70:
                    00:59:f7:86:d0:ab:78:c1:08:83:3a:0c:c6:de:da:
                    43:67:a0:32:07:09:34:71:31:29:26:3d:35:14:cd:
                    b8:68:02:83:8a:19:0a:61:02:21:44:1c:d4:35:f5:
                    65:85:17:31:77:34:7c:40:50:93:81:95:2b:fe:e4:
                    21:2f:78:ab:8d:4d:eb:00:36:59:3c:86:a2:ef:15:
                    fb:a9:bd:3a:73:40:05:d5:5d:e5:b2:ee:dd:07:44:
                    86:9a:72:80:0d:84:17:8b:2a:a1:ae:2e:3c:6b:d2:
                    5c:99:8d:83:05:8c:3b:3b:19:5c:d3:a8:ab:08:c0:
                    b0:10:a2:bc:88:33:7f:44:1f:60:03:6b:cc:64:e1:
                    cb:36:86:4e:c5:32:0e:dc:d4:0e:dc:61:7c:ff:62:
                    5d:63:b0:cc:b8:93:b5:4b:5d:31:74:41:4a:60:3e:
                    28:dd:11:9c:7a:c5:24:73:e0:2e:b7:b7:f3:35:68:
                    d2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:50:73:75:D2:A4:50:C9:4F:96:86:FA:25:A2:FE:EA:67:1C:2F:8E
            X509v3 Authority Key Identifier:
                keyid:23:66:2C:9A:98:0A:D7:58:46:50:AB:AA:35:45:B9:EA:91:D3:E3:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I2YsmpgK11hGUKuqNUW56pHT414.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/0175e6-427b-4ef9-8eb1-8232e350d458/1/I2YsmpgK11hGUKuqNUW56pHT414.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:97:98:1a:a2:98:44:30:9a:b9:44:64:8b:b1:57:5c:87:30:
         9c:18:33:ab:5c:74:cf:42:d4:d3:0e:90:e3:93:b8:f5:91:74:
         f8:58:f2:6b:36:7d:a0:85:d4:7e:01:da:5a:ae:c1:3f:1e:21:
         51:6b:f7:c2:ff:3c:2c:2c:1d:87:d2:b5:1a:69:4f:95:5c:c2:
         e7:68:cd:77:28:ca:09:9d:db:6b:60:0f:0d:82:37:ac:27:1b:
         9d:7d:c4:ff:7b:d8:e0:ac:4e:fd:93:75:cf:2b:02:a8:c1:b4:
         04:94:9a:fe:a1:ab:e1:89:2f:5a:c1:41:23:30:74:27:06:e2:
         28:b5:9c:09:e5:4b:dd:01:fe:5e:5f:6f:7d:9a:23:32:da:d1:
         59:6f:d3:a2:60:5c:7f:7f:22:75:16:1d:07:f2:5a:9b:a6:69:
         df:2e:73:03:90:61:f0:3e:ea:2c:43:7f:72:d5:73:13:7a:88:
         50:94:41:1f:50:c9:40:a9:36:88:fe:75:84:e9:d2:08:45:9c:
         ba:b1:63:62:13:63:e7:65:0f:1b:df:76:c1:92:40:7b:bc:e6:
         69:fd:7b:d0:9d:12:11:98:86:8d:94:a6:1e:11:a5:0c:10:05:
         ed:52:0d:13:06:aa:74:c4:c9:cf:c5:46:c5:a2:ff:2d:93:71:
         d7:31:ce:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----