Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
File:                     IB_jD8a0sND2204b-71QGV3KV1w.mft (raw, json)
Hash identifier:          o0VMNhFggiTBm7kmV95ce2kJJiU+n8F88bgD+SULSfg=
Subject key identifier:   A8:21:F6:90:DA:D8:CE:8D:F0:09:73:93:87:42:D2:9C:57:0A:18:A5
Authority key identifier: 20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C
Certificate issuer:       /CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
Certificate serial:       01962ECF72203547AB65B863714F642CF00F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft
Manifest number:          14F9
Signing time:             Sun 13 Apr 2025 11:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:09 +0000
Files and hashes:         1: 4Gcae_TgkqRGfUsxPV5DJhfgyWI.roa (hash: paAdpC7qR+39s63v1lKKgqBwKLqwrzz8gisXlWTAmhc=)
                          2: 5E90rYIvCMDpGsIs3-NkraLYuv8.roa (hash: +YypfQeEbAGU3FeS2PhNIE1YSOJOl4GeH2O/62cFjDI=)
                          3: BhPcXGYnux6Htrr0geNPo2dWGdU.roa (hash: PTzfPxeNLPc/h/6D3ZpRk3JrHog5IaXB8oZUZl5iIcI=)
                          4: CV8BH6QqqPLT40ybYR57zHuITz0.roa (hash: wm6WquYdkguvcYg3PAEhLwWwYG/+gCf3lNo5BB9WLJU=)
                          5: HWr5mjO0pCI1Vd4EP8Vsj0SbdDk.roa (hash: +GccY64PF6EoLu4o0b6AELGvN60tAWxw+ayqy5DT/8Y=)
                          6: IB_jD8a0sND2204b-71QGV3KV1w.crl (hash: aHTXsVEIfRMmYQ1MejMJdGMzNxkeKUfQf1w3icwkCm4=)
                          7: IJfxzs2X4cnbV8oPCRMYN2tzTtk.roa (hash: AwHWst2zHFb3hOVHS8cOQNZo/ytidV4zeGK2ViUjB10=)
                          8: Jb3G42rmQZaFwwdUOSNnbExAB1A.roa (hash: 1th08y4K0FUm4z+TLV/vXPdjR8Ng5KU2mnpnZhL8EBQ=)
                          9: MVj7HeSBvInIalrqufIBH8fKRoI.roa (hash: DxnNzMl8A0PYv0GRWFqxaL90B+shZhnUh2ZmOg4PM8E=)
                          10: MewT8wuMGfdVhTwmRM4TncORW08.roa (hash: 6kSDhYAugYSl0WrTiw8QRQya1ahduQViXnb9qN2HSOY=)
                          11: OTrigJ7_aPNFptL9-1H351sJknI.roa (hash: K/oqf4mDjIXLt7R/zbvZCfYf4v02mbWbP2zavJ0lff8=)
                          12: P3f_XNSuhVmZyRxdAPRJ84YNlXA.roa (hash: lo7iZTplZ87A4iJ++BaieabRH6sKtCtDX2XXqRtA5yU=)
                          13: RrbTdF6fRUGHl3RbUer2JdR3V6Q.roa (hash: NjhRh9Ynh+xjxteJ6n1t1coSm8Ha5SNUei3SRsgIj9Y=)
                          14: TjSH3W6imQ9XDjdn4GvtR5L0ThM.roa (hash: oS+XHOTP0lr+oOSwM3Jm1wiP14cg9ppm8BuvyOD/XlM=)
                          15: XT5hbM3hN0uWeQo78-4wXcwwUT0.roa (hash: SvbDE43Viqioo219I0DAuxFJK4VGXf3/3TDJAtfLyTs=)
                          16: eWk2WvIGvufYh6GSD7WPRpEjVmk.roa (hash: 861KbddJZFU31BhF9p6+lRipwRX0U3jrOqqTaMuNKdU=)
                          17: ejzl0ofmzawIFodS3w9DT80Q_Sc.roa (hash: pqNkIe/f5LGm6clq4rxSpp7oiX85pDpRj/cIU4SqPjI=)
                          18: fWnPtpRNC8zgbKiXYtNqxhdRL6I.roa (hash: m/6fVl/bjmqyGI5dn716lOlRlKQjcsdkUb01DH+aLtU=)
                          19: js3FolXTNbl9FECoYSqnW-MLw0A.roa (hash: l+vnWLzEj6U/PJzE4BCRuD1dAjg4yzYHTVAeiPyP5AQ=)
                          20: w_oxaJYBSRv6YGnAjIebPG-6n6g.roa (hash: sU92Ri+ayKRIGTYAdjVvh3Xj8xCFrEDz6vd3EC74pJ0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:72:20:35:47:ab:65:b8:63:71:4f:64:2c:f0:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=201fe30fc6b4b0d0f6db4e1bfbbd50195dca575c
        Validity
            Not Before: Apr 13 11:01:09 2025 GMT
            Not After : Apr 14 11:01:09 2025 GMT
        Subject: CN=a821f690dad8ce8df00973938742d29c570a18a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ff:6e:ab:1c:5e:dd:b5:69:cc:29:a3:37:7e:
                    a8:bd:31:85:ad:0f:25:05:98:3c:65:69:30:be:4d:
                    e7:4f:8f:cb:75:58:fd:fa:6d:60:4d:09:24:0f:73:
                    e6:f4:06:51:4a:60:fc:71:9e:c2:75:70:57:09:11:
                    8d:1a:dc:f9:b7:2d:19:94:e6:7d:e5:0c:a8:26:ec:
                    e6:8c:d2:90:11:60:1f:f4:4a:fa:ba:d0:f3:b4:87:
                    ff:6b:a4:4d:d3:b4:65:d3:e9:20:55:8e:98:bb:51:
                    e0:bb:fc:1f:76:68:59:a3:91:ed:ea:b1:ff:b8:2a:
                    27:55:2d:11:90:a5:e8:5f:5a:2c:f3:b3:eb:d7:36:
                    a9:58:b7:83:88:3e:8f:6d:99:9c:c0:2e:fd:d4:f8:
                    4c:31:dd:3c:9b:f0:1b:75:3b:4f:9b:df:ff:7a:fa:
                    24:b4:86:c4:8b:8d:a0:e6:cc:e8:21:fa:60:5f:86:
                    71:d4:97:74:3a:73:92:e4:d6:cc:d2:bf:83:c0:89:
                    e3:f6:9f:de:8f:3a:ce:e7:10:8d:26:66:12:c9:cc:
                    2f:88:10:98:9e:81:f8:19:4d:c1:ce:54:62:2c:20:
                    cd:a1:04:81:3d:00:8e:f5:82:d7:b3:f2:f6:58:a9:
                    ab:36:a8:66:36:ef:9d:4e:af:02:03:70:06:9a:a6:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:21:F6:90:DA:D8:CE:8D:F0:09:73:93:87:42:D2:9C:57:0A:18:A5
            X509v3 Authority Key Identifier:
                keyid:20:1F:E3:0F:C6:B4:B0:D0:F6:DB:4E:1B:FB:BD:50:19:5D:CA:57:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IB_jD8a0sND2204b-71QGV3KV1w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/8d80f9-494e-4abb-9956-fc121c800b30/1/IB_jD8a0sND2204b-71QGV3KV1w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:0f:24:a8:85:1d:1b:2f:65:c6:15:5f:6b:d3:36:26:5d:5e:
         8d:2d:3f:b4:55:36:50:c0:61:89:81:ef:55:7f:56:58:57:d5:
         70:39:93:4e:3d:0a:6b:49:7a:bc:0b:5d:4f:3f:f4:19:1c:64:
         da:b8:e6:10:57:1f:1b:83:70:1d:b9:bc:8f:e4:0a:1a:96:d9:
         4a:06:9d:04:a1:6e:31:c2:5d:7f:a4:53:22:21:34:e2:81:40:
         64:2a:28:b2:84:5e:c9:a5:6b:9b:da:0e:16:ed:d1:6c:5c:43:
         b7:88:10:be:1b:d2:b2:37:11:e9:ae:9f:a4:f3:54:aa:40:a5:
         e2:58:da:82:f0:94:f0:4b:c8:14:c7:5e:ea:b5:75:bc:6e:f7:
         58:50:ca:9c:7e:10:9e:3f:6b:e9:66:41:a7:90:81:bc:4e:ac:
         6f:92:c8:c0:37:79:ce:8f:65:50:cd:8f:0d:f1:76:87:09:95:
         34:7e:b7:73:64:68:e4:5a:ff:1d:ba:b0:3c:98:db:3a:ba:08:
         48:27:dc:5d:a7:5d:49:eb:05:95:ea:f9:35:b8:5c:fb:68:85:
         c4:ac:0e:c1:57:29:53:d8:ba:23:70:4d:24:58:25:63:7c:36:
         5d:a3:ae:9e:90:18:af:69:c1:d2:c5:be:db:45:a0:28:ce:3b:
         a0:49:91:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----