Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
File:                     iu8WONCRG6mIZOl5yEJrpPQaJy4.mft (raw, json)
Hash identifier:          9WmVWSZxsZnJm21T9CLxKZMXVkRZp6q80V3D4WSADUQ=
Subject key identifier:   3F:DE:72:7C:F3:5D:EF:64:78:6F:20:6B:77:58:D1:A4:44:5A:C7:A6
Authority key identifier: 8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E
Certificate issuer:       /CN=8aef1638d0911ba98864e979c8426ba4f41a272e
Certificate serial:       01962E9974104B58952897D73ED0FE465C2C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:10 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:10 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:10 +0000
Files and hashes:         1: if3KaihHpbg1Z08V6cXxVYQmFhk.roa (hash: 4GJMU1mopT3EhZuM0ayjHedY3bbBO8iZn11kZBRbuts=)
                          2: iu8WONCRG6mIZOl5yEJrpPQaJy4.crl (hash: 5VHFHAe6ijZ9HC8IoprmBSTKk+aKA3JxfJ1wHzc+ts8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:74:10:4b:58:95:28:97:d7:3e:d0:fe:46:5c:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aef1638d0911ba98864e979c8426ba4f41a272e
        Validity
            Not Before: Apr 13 10:02:10 2025 GMT
            Not After : Apr 14 10:02:10 2025 GMT
        Subject: CN=3fde727cf35def64786f206b7758d1a4445ac7a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c8:c3:85:0c:3d:15:50:27:5f:42:da:03:2d:
                    68:ef:e5:c1:50:51:c3:c5:70:c1:0a:c8:37:df:2e:
                    6a:32:02:b0:72:96:c2:e9:0c:d7:46:f1:3e:e1:cb:
                    68:d2:da:58:14:e0:6d:d7:b1:38:74:a4:de:3b:d4:
                    76:5e:86:47:8f:58:93:71:eb:b4:36:01:19:0f:aa:
                    12:9a:d6:de:7b:9c:68:55:e5:a8:45:bd:62:a5:81:
                    19:bc:15:42:19:c1:a0:3e:f6:c6:29:72:c3:5c:86:
                    2b:74:91:57:52:da:bd:ec:3c:65:eb:d6:c3:48:ca:
                    70:d5:dd:fd:d2:1c:c8:b2:3f:8c:e9:65:f5:e9:46:
                    af:17:75:72:d5:ec:f4:71:38:43:90:8a:28:7b:c7:
                    00:fc:3d:00:48:b3:9b:25:38:4a:fb:1d:25:ee:fb:
                    3c:7f:bc:3a:83:9f:33:72:a5:24:6a:91:c1:18:64:
                    ef:0f:85:c1:54:0b:4e:09:8d:11:67:e4:fe:64:48:
                    ca:ae:a5:c5:d1:47:3c:16:76:53:6f:55:6e:32:49:
                    d1:57:cf:dd:f0:e8:6f:3e:52:a3:a0:4f:db:38:eb:
                    41:c1:50:33:01:76:7b:6d:36:40:80:ee:91:8f:70:
                    08:66:45:6a:08:43:41:a2:b9:f3:9c:6e:b7:a6:18:
                    be:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:DE:72:7C:F3:5D:EF:64:78:6F:20:6B:77:58:D1:A4:44:5A:C7:A6
            X509v3 Authority Key Identifier:
                keyid:8A:EF:16:38:D0:91:1B:A9:88:64:E9:79:C8:42:6B:A4:F4:1A:27:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iu8WONCRG6mIZOl5yEJrpPQaJy4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/265769-354e-4a8b-9542-94f97b3a2ce2/1/iu8WONCRG6mIZOl5yEJrpPQaJy4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:24:05:89:f9:65:70:7f:9f:8e:a3:96:c4:2a:4b:33:0d:b8:
         2a:aa:b5:c7:52:42:29:be:c7:c7:8f:71:6b:76:1c:1e:84:84:
         e4:00:a6:c5:80:6d:84:71:3a:24:67:92:10:25:2e:07:9e:5a:
         f0:12:2b:48:26:7c:36:06:c6:fc:06:46:b7:71:93:1d:08:25:
         2a:84:bc:44:69:b3:1f:53:08:3a:f4:89:f4:2b:f6:9b:53:0b:
         af:de:d4:55:b9:ec:9f:fa:d8:09:51:b6:56:ac:ce:c0:60:29:
         3f:ae:67:96:a8:da:51:63:fe:f0:6b:ee:10:f7:47:92:9f:d2:
         9a:14:7a:e8:15:ac:c0:96:ab:25:81:61:92:50:37:e6:f8:60:
         8d:22:93:c8:04:35:ff:b3:1f:fa:e1:18:4a:88:1b:80:0e:8e:
         a2:b9:0a:a4:dc:84:4d:9f:b8:fc:79:4c:13:b4:ed:e1:ba:0a:
         a8:9c:54:0d:f2:09:5c:bd:38:d6:3d:fe:1e:0c:b6:ca:c0:bf:
         76:be:fc:c5:66:6d:2c:34:00:bc:5d:c3:a7:ea:9a:b9:87:4e:
         a4:c9:50:8f:c3:85:7e:ac:ad:56:8e:84:85:1f:d6:24:41:3c:
         b1:a3:9b:c7:ab:df:37:2c:d3:be:fb:25:24:8d:4d:ba:ab:60:
         2c:57:0d:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----