Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
File:                     iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft (raw, json)
Hash identifier:          BAwYxnYTCqZCzRfRVCOxoT/aJfA5GRB8jcWQtaGaIrQ=
Subject key identifier:   10:AF:E7:B1:08:27:8E:D4:43:FE:7A:FB:24:3B:FB:65:A4:00:65:8B
Authority key identifier: 88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF
Certificate issuer:       /CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
Certificate serial:       01962E9913F9D3BD63F0213BBBBC230DDBB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft
Manifest number:          0B57
Signing time:             Sun 13 Apr 2025 10:01:45 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:45 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:45 +0000
Files and hashes:         1: 8l1JGPKaxK0LdzidLYE5O7KO7uc.roa (hash: iLVJNEHjRSQZgufW9Xco39laNybFCSoPb4TytjD2nas=)
                          2: ZaUvqR58Anq8vLQipN0wr5eky28.roa (hash: SPNO6fIwJVYF/onFgsSackS0wfwUe38bLzIxAklnkrs=)
                          3: dXGr5BqS128mRLd0J3At49a2qzg.roa (hash: wuoQDj1SJzE/S7y91rkdzuUmyIzNX+hGJtJoYwKPBvU=)
                          4: iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl (hash: C5fg1z8ifu6H7FcO27jPQo98BYfgzneRNTkGO1GKwOs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:13:f9:d3:bd:63:f0:21:3b:bb:bc:23:0d:db:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88a5ab669fabe72dec2e8378476a7e915c24edcf
        Validity
            Not Before: Apr 13 10:01:45 2025 GMT
            Not After : Apr 14 10:01:45 2025 GMT
        Subject: CN=10afe7b108278ed443fe7afb243bfb65a400658b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:bd:5b:83:23:7d:b1:0f:d2:a8:ae:c7:cc:95:
                    0d:f0:03:65:21:28:5a:2b:d6:dc:0c:e0:9e:59:96:
                    49:cd:0e:7e:35:7f:2c:bc:9a:92:a7:f5:1e:9b:de:
                    0f:7b:16:c1:f2:af:bd:b0:c4:73:a1:7a:6b:5d:85:
                    9d:38:a8:e5:b8:30:fb:2a:e2:bc:c7:ae:d9:c6:c0:
                    1b:b7:a1:86:64:72:68:69:a8:36:54:53:e5:e8:57:
                    69:f8:41:0e:0c:7f:69:00:8a:42:0e:9e:a5:1a:d3:
                    01:0b:5e:c7:b0:48:68:75:90:c1:4e:87:80:c3:9b:
                    73:50:3f:bb:a7:ba:ed:c3:aa:65:63:7c:4d:f5:87:
                    03:90:7d:7b:1d:65:93:59:61:7c:dd:e8:87:ca:82:
                    49:34:4f:dd:24:bf:eb:30:3f:af:d5:85:9d:b1:49:
                    cf:a2:e8:6e:c9:86:86:4e:dc:19:79:de:72:54:ce:
                    20:78:8b:be:a9:1f:9c:92:81:62:28:d5:c2:8d:f3:
                    01:82:83:fe:64:70:0a:5e:08:f0:ab:89:ad:69:4b:
                    b2:8d:18:dd:d3:b8:db:4c:b8:61:5a:4f:31:42:16:
                    30:41:b1:4c:5f:a7:34:35:43:da:84:e0:d5:d1:88:
                    5b:80:6a:46:9f:86:a8:1f:22:1f:10:9d:dd:5f:83:
                    76:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AF:E7:B1:08:27:8E:D4:43:FE:7A:FB:24:3B:FB:65:A4:00:65:8B
            X509v3 Authority Key Identifier:
                keyid:88:A5:AB:66:9F:AB:E7:2D:EC:2E:83:78:47:6A:7E:91:5C:24:ED:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKWrZp-r5y3sLoN4R2p-kVwk7c8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/68cd10-e5cc-4f47-84a9-15a0207d4609/1/iKWrZp-r5y3sLoN4R2p-kVwk7c8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:6a:28:2b:a3:1b:0f:3d:ba:6a:c1:4a:cd:ea:ec:2c:90:7b:
         6b:fe:e1:9a:77:fd:84:b5:6e:87:fc:97:64:67:cc:27:63:50:
         74:55:9f:e1:8a:6d:2e:f3:95:cc:f6:03:a8:9b:05:05:6a:23:
         7f:e5:99:ac:cc:f0:64:8a:bb:28:23:c9:62:10:d3:cd:65:ce:
         5f:21:63:93:50:e2:ee:d1:b4:46:ba:5b:30:88:7f:b9:64:c1:
         8b:ab:32:26:c5:1d:82:51:31:49:cb:4d:7a:12:18:e1:78:d0:
         40:16:e5:e5:11:ca:23:01:1e:ae:a9:23:8c:11:5a:70:55:05:
         17:95:42:1b:1f:ff:fe:d4:2f:43:e9:d2:fd:6b:10:1f:0e:23:
         0b:01:ce:98:75:9e:fc:f4:26:9c:e2:7a:fe:e1:1b:3d:9b:28:
         7f:0a:e9:2b:29:d6:c0:4f:30:b9:f6:94:2e:80:ca:bd:33:b6:
         9d:d8:c9:69:23:13:0a:2a:8d:3f:5c:32:02:46:f3:d1:05:1d:
         31:5a:cb:68:c7:46:53:bc:fa:59:b7:06:55:c1:d8:0c:be:d7:
         d9:22:2e:3b:38:31:ce:71:b6:4a:f2:b3:df:b4:74:94:a1:0f:
         c6:74:d4:0c:e7:e1:c8:24:26:97:bd:ec:67:25:27:2c:ec:20:
         56:20:6f:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumRP5071j8CE7u7wjDdu0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YTVhYjY2OWZhYmU3MmRlYzJlODM3ODQ3NmE3ZTkxNWMy
NGVkY2YwHhcNMjUwNDEzMTAwMTQ1WhcNMjUwNDE0MTAwMTQ1WjAzMTEwLwYDVQQD
EygxMGFmZTdiMTA4Mjc4ZWQ0NDNmZTdhZmIyNDNiZmI2NWE0MDA2NThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqr1bgyN9sQ/SqK7HzJUN8ANlISha
K9bcDOCeWZZJzQ5+NX8svJqSp/Uem94PexbB8q+9sMRzoXprXYWdOKjluDD7KuK8
x67ZxsAbt6GGZHJoaag2VFPl6Fdp+EEODH9pAIpCDp6lGtMBC17HsEhodZDBToeA
w5tzUD+7p7rtw6plY3xN9YcDkH17HWWTWWF83eiHyoJJNE/dJL/rMD+v1YWdsUnP
ouhuyYaGTtwZed5yVM4geIu+qR+ckoFiKNXCjfMBgoP+ZHAKXgjwq4mtaUuyjRjd
07jbTLhhWk8xQhYwQbFMX6c0NUPahODV0YhbgGpGn4aoHyIfEJ3dX4N2zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCv57EIJ47UQ/56+yQ7+2WkAGWLMB8GA1UdIwQY
MBaAFIilq2afq+ct7C6DeEdqfpFcJO3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTkt
MTVhMDIwN2Q0NjA5LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy82OGNkMTAtZTVjYy00ZjQ3LTg0YTktMTVhMDIwN2Q0NjA5
LzEvaUtXclpwLXI1eTNzTG9ONFIycC1rVndrN2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc2ooK6Mb
Dz26asFKzersLJB7a/7hmnf9hLVuh/yXZGfMJ2NQdFWf4YptLvOVzPYDqJsFBWoj
f+WZrMzwZIq7KCPJYhDTzWXOXyFjk1Di7tG0RrpbMIh/uWTBi6syJsUdglExSctN
ehIY4XjQQBbl5RHKIwEerqkjjBFacFUFF5VCGx///tQvQ+nS/WsQHw4jCwHOmHWe
/PQmnOJ6/uEbPZsofwrpKynWwE8wufaULoDKvTO2ndjJaSMTCiqNP1wyAkbz0QUd
MVrLaMdGU7z6WbcGVcHYDL7X2SIuOzgxznG2SvKz37R0lKEPxnTUDOfhyCQml73s
ZyUnLOwgViBvNg==
-----END CERTIFICATE-----