Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
File:                     iQCNpBkicovFvtu9cIhwHFKbme0.mft (raw, json)
Hash identifier:          G26jSrFbuZvlyxaz82J1J5UKOWbuE81rBV8yuJG+R/g=
Subject key identifier:   B6:10:F1:56:83:4F:93:B4:CD:BD:B7:5C:71:8D:98:19:0F:34:9C:B9
Authority key identifier: 89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED
Certificate issuer:       /CN=89008da41922728bc5bedbbd7088701c529b99ed
Certificate serial:       01962E61E11CC3AF3FEF9C1210F85584111E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft
Manifest number:          8D
Signing time:             Sun 13 Apr 2025 09:01:28 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:28 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:28 +0000
Files and hashes:         1: 9WCM-NfBtEzVC0bLgcXxGw_dKs0.roa (hash: +AotBLTXOYZ2qqQz68W39gfX7TdnqXgGz673AR3fS9c=)
                          2: iQCNpBkicovFvtu9cIhwHFKbme0.crl (hash: Ne9XSjAIBj1/HeF1eZbc3EQkhazT9SFF4SBE2HsiAiM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:e1:1c:c3:af:3f:ef:9c:12:10:f8:55:84:11:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89008da41922728bc5bedbbd7088701c529b99ed
        Validity
            Not Before: Apr 13 09:01:28 2025 GMT
            Not After : Apr 14 09:01:28 2025 GMT
        Subject: CN=b610f156834f93b4cdbdb75c718d98190f349cb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1f:fb:9d:05:4b:d6:50:cb:e5:77:ce:ae:b3:
                    0c:c7:90:c4:3b:52:bb:14:8c:6a:84:c0:35:6a:64:
                    71:c5:93:e8:99:59:af:0d:42:af:b9:dc:7e:8d:85:
                    8e:44:8c:91:e6:96:c3:3b:51:06:32:e1:5f:5f:e2:
                    64:34:5c:8e:d5:b2:9b:4c:26:f9:93:f4:7e:c7:78:
                    66:24:7d:d6:d2:55:71:4a:f8:93:99:ef:94:bd:54:
                    68:cd:dc:1e:0e:f0:ee:6d:bb:76:5d:16:e2:cc:89:
                    1a:d2:27:d6:36:c7:5c:e2:fd:94:a8:bc:10:4f:f4:
                    7c:ba:27:27:26:7d:bb:0e:51:7e:ee:e0:d0:94:d0:
                    86:dc:89:86:24:91:55:c2:7d:cf:16:0f:a2:1c:f1:
                    a4:8a:88:33:23:e3:a9:c7:50:aa:6b:02:fb:f1:23:
                    ae:ae:8f:80:99:6c:06:36:a2:1b:a4:a1:58:22:01:
                    38:d5:66:3d:ae:d0:54:6d:7b:8b:25:7b:7f:1b:ac:
                    64:f0:d1:6a:f4:03:a7:04:f8:fd:84:95:de:97:9f:
                    a4:e6:22:a3:8e:5f:b2:22:58:80:f2:14:20:02:0e:
                    15:fb:f0:e0:78:a6:2b:58:ed:f7:b0:a3:9f:df:6f:
                    98:a0:09:d0:92:2a:9b:0b:d7:97:90:73:13:fd:9d:
                    96:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:10:F1:56:83:4F:93:B4:CD:BD:B7:5C:71:8D:98:19:0F:34:9C:B9
            X509v3 Authority Key Identifier:
                keyid:89:00:8D:A4:19:22:72:8B:C5:BE:DB:BD:70:88:70:1C:52:9B:99:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQCNpBkicovFvtu9cIhwHFKbme0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/e5b14b-9d5b-4346-8e85-63729fe588a2/1/iQCNpBkicovFvtu9cIhwHFKbme0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:fa:db:b2:e5:d8:ae:b9:76:25:96:8a:6f:fe:6c:56:36:65:
         cc:7b:8b:b4:69:f9:6d:c3:17:6e:e5:f2:9e:7c:e9:be:86:26:
         ea:1b:de:b5:ec:dd:df:b2:2c:16:b2:c3:32:30:2a:a8:e4:6f:
         97:f5:9e:b7:c3:63:29:1d:3a:3e:eb:3b:a0:72:77:81:0c:fa:
         f4:c3:b6:f0:09:44:5f:a8:0a:83:d7:a6:e5:12:29:42:d7:b9:
         b9:ad:cb:43:c3:0e:c1:f7:55:b0:00:73:7e:35:13:9d:ad:c9:
         0a:7b:75:fd:4b:61:75:5f:c8:15:64:ad:02:5e:59:3f:be:2f:
         4d:f9:88:6e:fd:7c:65:58:a2:f1:cc:80:4a:7c:d4:3f:3d:d9:
         d2:3a:b4:ca:f7:b4:e3:b7:aa:57:1e:f2:7e:89:e6:a9:c4:13:
         3a:cb:ad:10:af:34:02:95:86:06:61:73:4f:61:f0:3c:f4:bf:
         72:7f:8f:16:01:e1:d1:26:9e:9f:41:f3:89:8b:1b:fd:9f:9d:
         a4:de:04:df:60:2d:13:66:81:57:78:d0:40:9c:69:95:c6:8a:
         ea:61:6d:82:96:c2:f0:27:48:4b:8c:e3:29:c8:90:d9:a1:33:
         f1:30:3c:6c:c0:25:06:56:3c:15:4b:59:fa:b4:ac:16:4f:e3:
         ec:ee:93:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----