Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
File:                     ij8nyT77e7wLCv6OzCT3A50nUQg.mft (raw, json)
Hash identifier:          2oVaOa58jbpiJtlHiFFzhzmQOx3HIs4nyFCOOjILPoM=
Subject key identifier:   E8:43:1F:08:FA:B3:3D:EB:C5:39:7B:D0:2C:99:99:F3:89:62:CC:38
Authority key identifier: 8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08
Certificate issuer:       /CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
Certificate serial:       01962E618F473C206E60C4E302D149CA5C14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft
Manifest number:          02E0
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: 4mtjo1wkfTbCTW9KNexHpaJfxb4.roa (hash: NNFjMP/4ryf3yqLdY/nlmC6UZkGbjTY7ealoIUdpyCw=)
                          2: ij8nyT77e7wLCv6OzCT3A50nUQg.crl (hash: DRJ7nEurSpGdkk6QBHVcnaFZVZu6UXDIlcI/C3PccEI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8f:47:3c:20:6e:60:c4:e3:02:d1:49:ca:5c:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a3f27c93efb7bbc0b0afe8ecc24f7039d275108
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=e8431f08fab33debc5397bd02c9999f38962cc38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e9:a5:0b:4e:89:33:12:86:83:29:d2:bc:a7:
                    9e:71:ca:68:41:d7:2e:2b:63:72:5a:d6:00:ac:99:
                    12:16:60:91:b1:a5:48:c1:82:db:3b:b6:41:65:a4:
                    3d:dd:e0:2f:13:13:05:ae:4a:29:15:9b:75:f4:d4:
                    3f:71:01:25:24:4a:11:e5:0c:68:75:4a:fc:f9:44:
                    4a:01:4b:0f:86:6e:70:14:a1:37:93:24:c0:b7:fa:
                    ba:e5:f4:42:a5:77:93:31:01:e2:35:84:31:b4:b1:
                    ad:60:c6:1c:bb:f6:c8:a2:08:e4:e1:f5:a2:93:1b:
                    1e:40:0d:62:40:18:06:90:9b:f9:cf:07:d2:c6:f5:
                    23:87:69:98:5e:c6:48:ec:3e:57:52:a4:be:e2:b6:
                    1a:1c:0f:8a:ef:55:17:74:2b:1f:2c:70:34:19:ce:
                    44:52:1e:82:f1:7e:d6:23:ad:3e:2d:7b:db:12:99:
                    12:62:86:f6:73:9f:9d:d0:01:fb:48:b6:db:27:81:
                    52:d1:4a:9e:c2:fb:17:45:f0:46:b7:00:92:2f:96:
                    7d:64:5a:4e:b7:b4:1d:55:05:27:12:09:fa:cb:61:
                    ec:2e:d3:6d:2b:39:20:ef:3a:56:59:41:ce:2f:23:
                    7f:06:10:9f:d2:90:c4:78:f9:82:35:a9:0b:ae:89:
                    02:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:43:1F:08:FA:B3:3D:EB:C5:39:7B:D0:2C:99:99:F3:89:62:CC:38
            X509v3 Authority Key Identifier:
                keyid:8A:3F:27:C9:3E:FB:7B:BC:0B:0A:FE:8E:CC:24:F7:03:9D:27:51:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ij8nyT77e7wLCv6OzCT3A50nUQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/2c9a24-8560-4307-acc7-ebf834fe9a15/1/ij8nyT77e7wLCv6OzCT3A50nUQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:5d:33:95:94:46:ad:67:be:c9:89:87:0d:08:69:26:b8:34:
         56:65:34:3c:c3:08:28:14:b3:89:f4:7f:73:aa:3e:4d:87:19:
         04:58:01:76:15:e0:89:7f:32:04:db:2c:d7:82:f6:a2:59:f1:
         8d:70:36:c8:aa:f0:93:4f:0f:fd:b9:0e:17:26:bf:6d:ee:fd:
         03:c6:52:5b:9f:d3:ee:a1:4c:72:c1:df:9e:f8:d8:39:82:a4:
         10:e6:f3:fc:7e:92:7a:de:23:40:3b:16:f1:e6:df:57:3b:3c:
         68:e8:d8:04:3c:f2:41:bf:cd:e3:8c:e3:8c:0f:f7:7f:0a:b9:
         3e:e0:4a:0d:7b:01:d1:8f:ee:a0:96:52:72:92:e4:cc:2e:fe:
         ec:23:1f:23:29:8e:1c:20:a4:2f:09:79:55:6e:36:50:7c:4a:
         18:d0:66:f7:bc:30:4a:62:f2:65:60:29:0c:b9:f1:5d:da:1b:
         f8:c6:52:0c:21:fa:01:d2:2f:f2:ef:51:1d:db:6e:6c:56:98:
         d0:ea:8e:78:29:ab:75:6e:ac:ae:ee:ba:b9:62:3a:5c:45:52:
         2b:43:1c:bb:e1:9e:44:b2:44:f6:21:a4:f0:cf:4c:22:6a:8b:
         1e:5d:3d:69:87:39:1a:1b:f5:d1:d3:54:e6:1e:fa:f1:3e:95:
         31:8c:d8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----