Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
File:                     IE19hlKpn8F__y197MSeVWqg64A.mft (raw, json)
Hash identifier:          FKo9dIvJMe4ZJyUP2kKxW5DcOXFDzvEpk2KXPl+fY2Q=
Subject key identifier:   FF:BC:06:9E:C5:2A:31:60:CA:FB:D4:CA:DA:A6:E8:43:EF:E2:FD:98
Authority key identifier: 20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80
Certificate issuer:       /CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
Certificate serial:       01962E2B01BDA0A20CBF45724572EF01AEFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft
Manifest number:          01EE
Signing time:             Sun 13 Apr 2025 08:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:32 +0000
Files and hashes:         1: IE19hlKpn8F__y197MSeVWqg64A.crl (hash: RmDBQYBji15t5aIQAukyMiYGyERcij8WVGuI/BqUuCk=)
                          2: qVpN4Y8KxLODwpDOgLN11KilqHg.roa (hash: 09hTebOsoFtxumaEhzqwE7uj7IeLGjUIKeNrykM3gp8=)
                          3: tdhuYGIdy-7BcAqbVeS6RaDWjiM.roa (hash: Sh6aeKnHHbg/58/2+xd9mufW5cUQ13QaLyf7FAUXcc8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:01:bd:a0:a2:0c:bf:45:72:45:72:ef:01:ae:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=204d7d8652a99fc17fff2d7decc49e556aa0eb80
        Validity
            Not Before: Apr 13 08:01:32 2025 GMT
            Not After : Apr 14 08:01:32 2025 GMT
        Subject: CN=ffbc069ec52a3160cafbd4cadaa6e843efe2fd98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:7f:e3:fe:a5:4f:fb:3b:60:86:d9:db:d5:70:
                    dc:43:0e:e2:56:ed:9a:09:3d:2c:8a:7a:bb:6e:4f:
                    f1:3e:6a:33:02:ab:ca:25:06:7a:f5:3c:81:18:05:
                    b7:0f:c0:af:95:1f:c1:1e:4c:16:70:ce:25:88:9f:
                    c5:fc:fd:62:45:d6:e0:04:ba:a6:27:c9:2f:b3:11:
                    e1:42:aa:2f:12:f9:91:e1:71:75:e0:66:37:ce:71:
                    53:ea:39:56:50:6a:21:5f:ef:12:b7:7f:11:60:a0:
                    ff:75:62:03:27:5d:bd:d6:ba:71:3a:74:32:dc:b8:
                    7b:e0:bb:fe:68:ea:f4:8e:d4:1f:3e:3a:1c:75:40:
                    c0:d4:d1:59:f6:b3:bc:67:88:83:45:b6:af:46:3d:
                    92:64:90:76:c3:46:36:79:c8:92:fb:06:ea:db:e8:
                    9d:b6:f3:d7:50:6c:d1:01:39:3c:e8:ff:0b:8a:68:
                    68:b1:6b:e3:62:b7:a8:bc:07:95:d4:27:8e:41:46:
                    2f:f9:72:66:51:be:c9:e1:06:22:93:ec:c2:4e:99:
                    d1:86:4b:74:ab:4d:6c:a4:e7:14:47:fa:aa:bc:f6:
                    23:78:41:fa:a2:6d:68:41:3d:15:a2:42:ad:88:67:
                    67:8b:dd:d3:aa:d5:fd:a9:4c:1d:c0:1c:85:fb:60:
                    9f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BC:06:9E:C5:2A:31:60:CA:FB:D4:CA:DA:A6:E8:43:EF:E2:FD:98
            X509v3 Authority Key Identifier:
                keyid:20:4D:7D:86:52:A9:9F:C1:7F:FF:2D:7D:EC:C4:9E:55:6A:A0:EB:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IE19hlKpn8F__y197MSeVWqg64A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ac0694-1e22-436d-82c9-17ce620e74f1/1/IE19hlKpn8F__y197MSeVWqg64A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:c6:31:7d:2a:d6:09:92:3e:c1:5c:ce:30:a1:ef:27:7b:37:
         db:46:ff:ad:98:84:ae:2c:5a:fe:4a:b5:5c:f2:cc:1f:d8:3f:
         ae:f3:f7:97:09:83:49:be:6c:33:75:74:f1:7b:04:52:ee:de:
         16:58:11:ed:1a:b4:f3:1d:52:e6:e6:3b:e8:26:cf:f1:75:63:
         2e:87:e9:74:42:6a:15:d2:de:29:3a:8a:a0:8e:29:9d:e2:22:
         c2:c4:84:85:e2:0e:79:0c:05:1c:fd:39:c9:ab:07:99:c5:99:
         a3:01:1f:22:92:48:e8:c6:13:bb:ea:d3:f9:4d:29:25:f1:61:
         53:9d:c9:69:c0:9a:3c:1f:6b:47:05:68:80:73:53:c2:35:2f:
         55:a3:95:8d:8d:ee:67:2e:1b:7b:40:27:fa:12:88:34:9a:76:
         b1:f3:e1:ac:da:a9:94:2a:04:ea:30:a8:2e:4e:80:42:9d:7a:
         b2:00:7f:38:c0:13:a6:9a:55:e9:5b:7b:e5:33:19:4c:88:cf:
         60:07:da:b3:d2:5c:fe:b6:89:30:45:67:1a:0e:bc:4c:47:8d:
         a1:c9:d5:01:dd:c8:65:92:2a:83:b8:21:93:81:0c:38:ec:b3:
         1b:29:be:28:c3:47:16:38:e3:27:3a:4d:50:07:32:03:e1:20:
         de:4e:5e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----