Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
File:                     IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft (raw, json)
Hash identifier:          f7r6AJjfnYsos8jW+bkxDH9gYTZCdieyvhWXcPSr0qE=
Subject key identifier:   8C:57:E5:69:B6:3F:BF:5E:E7:53:C5:B4:00:53:E6:1D:3F:E0:82:C9
Authority key identifier: 23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31
Certificate issuer:       /CN=23162bbf0246cda2280a293432ae6f0bd6826131
Certificate serial:       01962E2AF750D789E128E5A13421DEECB291
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft
Manifest number:          07AD
Signing time:             Sun 13 Apr 2025 08:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:29 +0000
Files and hashes:         1: IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl (hash: d22Qm/NKRaJxF7ov2dfweX6fJwM4M6E4euFnEhHFSXM=)
                          2: _Ya9SawdjIbplJ2DDMKFuiItpWw.roa (hash: D98XW56rnTmNC9SFO3Lu162y4j8aooITvkhCs2VUjc4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:f7:50:d7:89:e1:28:e5:a1:34:21:de:ec:b2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23162bbf0246cda2280a293432ae6f0bd6826131
        Validity
            Not Before: Apr 13 08:01:29 2025 GMT
            Not After : Apr 14 08:01:29 2025 GMT
        Subject: CN=8c57e569b63fbf5ee753c5b40053e61d3fe082c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:0e:fe:80:de:23:cb:50:c7:15:08:98:7f:
                    e7:d2:11:4d:72:e4:b0:e7:7e:7a:e8:c8:fa:ab:00:
                    c6:b6:c0:b4:83:d8:e5:e5:85:50:5b:1e:1e:94:3b:
                    f9:7b:44:75:05:09:95:69:6f:ed:36:b9:39:fc:ff:
                    74:54:0f:c9:b6:9b:aa:80:a3:c4:f4:ca:f7:28:25:
                    5c:04:71:8b:ee:7d:42:e9:68:73:5a:f0:8b:0a:6f:
                    92:cd:09:4d:89:88:e2:b6:c0:03:66:6c:7d:12:db:
                    ba:d1:ca:ee:39:3d:7c:f5:62:c1:34:61:8d:35:00:
                    5c:7d:74:04:86:58:4f:b2:2c:22:ac:3c:2c:bd:1a:
                    a2:56:76:e8:a4:6f:57:de:66:7b:83:8c:8d:b4:34:
                    2f:d6:70:ab:83:7b:f5:c1:d5:61:66:c2:a8:f0:d7:
                    34:fe:da:6c:2a:b4:1b:55:a5:8a:62:42:18:a1:02:
                    e1:b4:82:f0:1d:84:37:91:60:09:21:02:82:72:5a:
                    4d:2e:4a:ad:73:63:1a:5d:6f:d8:95:38:83:7e:66:
                    f9:aa:b2:bf:5d:fb:e0:8f:c5:35:e6:65:77:74:e9:
                    67:52:07:f7:ad:02:2a:9c:c6:dc:77:7d:ea:ab:69:
                    38:34:00:ad:f4:25:11:3a:d4:3e:4c:c7:21:c0:3e:
                    66:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:57:E5:69:B6:3F:BF:5E:E7:53:C5:B4:00:53:E6:1D:3F:E0:82:C9
            X509v3 Authority Key Identifier:
                keyid:23:16:2B:BF:02:46:CD:A2:28:0A:29:34:32:AE:6F:0B:D6:82:61:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxYrvwJGzaIoCik0Mq5vC9aCYTE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/2f9689-a915-4127-a470-85c305f9fe6f/1/IxYrvwJGzaIoCik0Mq5vC9aCYTE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:41:cf:89:c2:54:84:f5:72:e6:cd:a6:51:29:af:54:7c:60:
         f7:bc:37:37:13:3e:5c:f0:36:b2:74:18:f9:47:a6:1e:3b:ac:
         e6:b1:11:ad:e1:c0:12:31:73:0b:f0:cf:a9:58:a8:70:14:9f:
         6b:db:c4:4f:ba:13:37:84:9c:83:42:8a:32:7d:37:1f:94:4b:
         64:28:15:5d:34:48:47:fd:7b:25:54:7f:de:5e:c7:20:1f:e8:
         81:43:a4:0b:ee:fd:88:1f:f6:39:b2:ca:d6:0a:40:e4:01:1f:
         02:55:d6:9d:81:e9:bd:6f:01:1b:11:22:81:f8:02:85:13:83:
         a3:f9:c6:79:60:fa:9f:fb:69:34:d8:97:04:f0:91:40:46:82:
         a6:35:8b:01:59:23:6b:ff:d1:77:b8:fc:18:27:23:e5:ea:90:
         ac:95:5d:5a:b5:5e:67:c7:82:b4:b8:5a:50:c4:ac:3f:ed:a7:
         94:4a:34:f0:1a:07:37:0f:49:69:b9:6f:46:a3:b1:bf:70:18:
         40:27:c1:72:d7:29:4a:02:c6:c0:d5:cc:29:d0:5e:0d:f0:44:
         38:a7:f2:8b:5a:66:43:4b:1e:30:30:7e:bf:32:e0:4f:f1:c9:
         69:d0:76:2f:f9:3c:06:65:43:3a:f4:ff:87:4b:58:87:1b:6b:
         14:16:d8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----