Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
File:                     iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft (raw, json)
Hash identifier:          FHwlre0TsfcIqEKh38e9ESLtewpoWepL8aLu+J/fQ8o=
Subject key identifier:   48:F9:AD:34:99:89:E1:A3:38:F3:87:58:D8:32:8B:9B:76:30:7F:91
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Certificate issuer:       /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial:       01962E2AC1A34DF0C2988D80FC250D5E77CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft
Manifest number:          14C0
Signing time:             Sun 13 Apr 2025 08:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:15 +0000
Files and hashes:         1: QdF_t5GM6hFZDI7Ycz1kPbhRE0s.roa (hash: gZA+5nFU0e3J+dZOb0p/gBtvIfB/51rVDEOTe4nlfP8=)
                          2: iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl (hash: s1mbmA2i+Prbdwts4kKTzlZnhTn8xAhB+mqsbrDDhnM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c1:a3:4d:f0:c2:98:8d:80:fc:25:0d:5e:77:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
        Validity
            Not Before: Apr 13 08:01:15 2025 GMT
            Not After : Apr 14 08:01:15 2025 GMT
        Subject: CN=48f9ad349989e1a338f38758d8328b9b76307f91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:12:a6:2b:3d:d9:13:f5:45:7b:91:2a:ec:61:
                    28:fd:17:fc:e1:36:49:7a:70:a8:36:62:a0:9e:90:
                    de:fb:39:d3:98:31:59:a7:57:a3:19:9f:13:ee:1d:
                    14:8d:0b:b3:41:4d:60:e0:c0:4c:98:6d:fa:43:10:
                    8c:aa:af:df:2f:b7:79:27:bf:6f:ca:e1:90:bc:d7:
                    0b:d3:8d:88:d7:f6:78:0d:ae:e4:c6:1f:ae:b0:b9:
                    d5:35:61:97:74:b4:20:09:85:00:1f:44:17:9a:50:
                    14:97:ac:59:14:01:b2:e2:2e:11:68:4c:f4:d7:5e:
                    b8:44:fa:49:1c:37:34:f6:2b:a8:15:6c:97:71:01:
                    ef:d9:34:4f:55:cd:9d:23:54:e9:3d:a2:30:04:d1:
                    d9:a3:ef:66:9c:06:4f:b7:c4:5f:bb:3d:c5:ca:15:
                    eb:66:2b:ae:3e:94:97:9e:de:7c:06:81:fc:d3:0f:
                    91:bd:82:c9:dc:67:89:17:2c:54:2e:55:71:ae:99:
                    4e:6c:dd:1a:8e:d5:e2:75:41:10:b4:7d:40:37:e7:
                    d4:9c:56:5c:75:94:13:0a:93:56:94:69:6b:0e:7e:
                    3b:57:ad:54:21:ea:96:b5:a8:f9:77:32:46:1d:9e:
                    45:b2:dc:e2:23:58:5b:de:16:56:0b:00:ba:36:b0:
                    41:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F9:AD:34:99:89:E1:A3:38:F3:87:58:D8:32:8B:9B:76:30:7F:91
            X509v3 Authority Key Identifier:
                keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e0:f2:37:be:d9:b9:21:1d:a8:c8:b4:b6:38:d0:fd:69:d2:
         d8:75:56:32:e6:31:13:26:ab:7d:44:a1:10:02:c9:83:e2:b4:
         3f:95:5a:23:93:b8:dd:90:aa:3d:d3:0a:eb:aa:8c:67:d4:03:
         1d:7b:41:89:e9:c1:d3:71:0b:1a:9b:f5:fd:8f:9d:aa:62:6a:
         f7:a8:98:07:c2:ea:a7:8c:7f:06:7b:8d:cf:48:ef:d2:a8:40:
         d1:68:4c:9e:0c:a0:4c:40:cf:cc:92:48:3c:14:78:62:0e:90:
         7d:64:07:5f:21:e0:47:8b:71:9c:5b:89:87:f4:fe:12:b0:a6:
         0b:d0:b9:86:c1:b6:ff:c9:e7:a3:53:49:e0:ab:06:11:17:d7:
         38:83:e4:2a:c2:ff:6e:43:f0:b5:52:29:6f:71:af:fd:ed:f9:
         d6:cd:5e:50:8c:c7:ec:96:ad:99:32:8d:27:d6:04:4c:dd:c8:
         92:7f:ff:33:0a:4c:9e:52:a7:a1:6e:87:a5:6e:5f:1b:ee:b6:
         e2:40:d0:3c:dd:57:30:3d:f3:a3:e7:20:a5:75:ab:ab:ed:91:
         5a:b9:58:25:7b:b3:48:68:26:c1:ae:f3:df:73:6b:37:bf:1d:
         08:5d:53:d8:1a:5b:57:ae:86:21:28:a3:ce:5d:39:5c:c7:2e:
         ac:b6:95:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----