Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
File:                     Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft (raw, json)
Hash identifier:          FXYCM+ElR0RoaczJICUerH4TcnZZrsJo2cGZzl0SvAQ=
Subject key identifier:   88:C0:04:08:E3:17:EA:36:94:01:0A:EA:ED:A2:1A:E7:41:D4:9F:2D
Authority key identifier: 23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38
Certificate issuer:       /CN=230e9ac64510fa391846bb139ab52b8001d58038
Certificate serial:       01962F3D447D971EE35D0B0771AB31946B2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft
Manifest number:          117F
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl (hash: 6WypQuAlYwML1VMHaWyFSso0Vd3tFZLP1IOVP++CXI4=)
                          2: UoyH2jgw3TjRmBGXcoIbjkHpXYk.roa (hash: 7Hn5Nml4HR5xVhJraj44LXb5goEfvTP/sHQKgiuE26I=)
                          3: pSCPepTx67SC5l3Ed1hdUBnE5IA.roa (hash: MWvK8q7nznQKhnSv15ZjQ+g2Xqx0IxpC4fGczjIPPSs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:44:7d:97:1e:e3:5d:0b:07:71:ab:31:94:6b:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=230e9ac64510fa391846bb139ab52b8001d58038
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=88c00408e317ea3694010aeaeda21ae741d49f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a3:fe:6d:fb:84:b5:1e:35:66:4a:00:b1:66:
                    e3:97:8f:56:d8:79:63:4c:e2:5e:17:77:2c:83:67:
                    bc:44:61:7a:7d:c6:7f:bc:10:7a:35:48:c1:b0:00:
                    4b:eb:0b:c1:fd:64:26:0a:f8:04:e0:4d:28:44:ab:
                    bc:c1:3e:78:20:6e:c1:67:a0:ae:7f:99:f9:e7:06:
                    f7:3c:60:99:67:48:85:ad:13:24:5c:61:78:c5:62:
                    a4:26:7c:fa:b7:e5:4b:63:0e:b6:19:8f:91:9d:cf:
                    f1:61:61:e4:e5:4f:50:37:67:7d:24:e3:22:7a:f3:
                    d2:96:25:29:6b:f7:a6:e5:c6:4f:e5:67:04:67:b2:
                    0b:c3:71:d1:21:2b:7b:3d:19:5d:ac:39:6f:75:b7:
                    c1:44:4a:68:b6:fe:43:8a:de:7d:c6:5d:c8:46:9b:
                    15:e9:19:c5:74:0a:68:06:7d:6a:b1:61:ec:aa:ca:
                    ce:ba:9c:78:02:47:f1:ff:fd:70:9f:b4:a0:75:ab:
                    0e:09:4e:26:50:a3:ea:0b:5b:82:03:53:29:5e:c0:
                    2b:76:fc:51:f0:26:91:b3:51:0c:11:4f:dd:b7:e7:
                    01:23:71:60:75:ad:95:bc:b0:1f:9c:44:95:0f:b7:
                    ac:85:ad:91:67:fa:8a:5e:59:fd:ac:c9:ac:3b:5f:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C0:04:08:E3:17:EA:36:94:01:0A:EA:ED:A2:1A:E7:41:D4:9F:2D
            X509v3 Authority Key Identifier:
                keyid:23:0E:9A:C6:45:10:FA:39:18:46:BB:13:9A:B5:2B:80:01:D5:80:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/ca68e8-5157-46b6-b584-ea92d80ab188/1/Iw6axkUQ-jkYRrsTmrUrgAHVgDg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:00:d8:93:05:6f:68:04:38:ed:a3:7a:aa:0b:32:eb:4c:18:
         f8:d6:64:be:41:45:34:0d:27:3d:f0:13:f3:a9:21:69:2e:b6:
         48:5a:12:5c:b3:81:95:a4:66:10:56:4d:3a:30:62:ec:f5:a9:
         ca:a3:ba:d6:0d:94:cc:33:22:d6:94:6e:10:ce:70:8e:68:c7:
         8e:91:90:4a:29:54:c2:9b:9c:5b:e6:35:ab:38:41:18:e4:d8:
         5c:ac:c9:b3:48:ea:62:0b:79:8f:d3:63:6d:1c:61:ec:b5:e7:
         8f:85:68:22:9f:c6:9a:08:16:0e:bb:93:95:ea:55:fd:4d:33:
         c8:e7:17:a7:db:d1:8b:99:ce:e8:61:0a:dd:8d:85:06:0a:37:
         63:e1:68:5e:e1:7e:25:9e:f9:01:d9:e7:5e:3e:cc:cf:ef:64:
         16:ee:49:22:95:96:4a:5f:54:12:4c:63:e8:fc:42:d8:c1:92:
         85:2c:04:a4:83:b0:49:96:b4:6d:91:32:fa:9f:56:3f:13:16:
         ac:20:70:3d:37:8a:68:64:59:e8:d3:7b:74:ae:87:42:90:1c:
         44:eb:9e:fa:97:16:c0:1b:41:d2:fb:b0:68:5a:0c:54:3c:d1:
         5e:ee:d5:e3:c9:ab:6c:5f:7a:5e:34:f4:8e:23:a7:32:21:4b:
         37:30:b2:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----