Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
File:                     it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft (raw, json)
Hash identifier:          SZQDsLeZ+0K7+dSOVhWdrNrnQozMe0pdHrel9PkZc30=
Subject key identifier:   9A:54:5C:5D:17:5E:D4:5D:75:37:C9:9B:93:EA:85:B1:55:C0:19:A6
Authority key identifier: 8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65
Certificate issuer:       /CN=8ade0787cf9881a1fc59556ca1542d7779f28765
Certificate serial:       01962DF3E7C7990F14301799B3E17C3CC183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft
Manifest number:          11E6
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: 5v7duN9Ge8yGISXqxG3qUzWZAS0.roa (hash: 1SA0Oa41y733C6WZxDupsHaqhvUOZQl7E3vDY0FiKPY=)
                          2: it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl (hash: A0QzDiKKSNxGhF+MgjJDYwd3uOztWn2kAAXUYyrYLCA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e7:c7:99:0f:14:30:17:99:b3:e1:7c:3c:c1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ade0787cf9881a1fc59556ca1542d7779f28765
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=9a545c5d175ed45d7537c99b93ea85b155c019a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fe:c7:04:9c:fa:ae:96:f2:13:7b:57:26:5e:
                    82:78:ef:2a:4f:8b:86:13:a6:e0:e4:11:8a:68:ee:
                    9b:8c:6b:1b:88:8c:17:52:1f:3c:d7:d6:2c:0f:91:
                    33:38:c7:89:4d:bc:bd:c8:18:05:e2:01:87:6f:53:
                    80:5b:3a:ae:1c:4c:b0:f6:ce:84:61:94:88:5d:43:
                    cb:82:b2:79:02:11:b2:3d:40:72:52:ac:1e:1f:44:
                    8c:73:23:e2:8f:99:3e:e1:86:fd:c0:9f:e1:99:68:
                    f6:69:f9:01:d4:36:2e:de:66:c4:b5:10:64:4d:be:
                    c9:b2:85:70:be:75:91:cb:d1:3c:4e:1e:38:ea:39:
                    e7:ee:37:5c:ef:e2:62:3e:7d:82:cb:df:de:e9:73:
                    3e:41:e9:c7:f6:ca:d7:9f:79:2a:82:27:df:c1:10:
                    15:dc:08:8b:06:15:53:c8:a4:78:74:e2:a1:b7:4b:
                    fd:00:ea:36:71:03:34:d0:52:bd:5d:04:ed:b9:45:
                    25:ab:5b:e6:3e:e9:1e:fb:26:e1:00:d3:27:05:51:
                    f5:2f:e1:d1:45:ad:c0:b2:06:7f:c9:2e:06:f4:f6:
                    33:7c:cc:fc:6d:4b:6f:ad:de:e6:42:62:d8:18:a1:
                    8c:67:c9:6c:69:47:c9:11:ec:62:0b:11:89:68:d2:
                    9c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:54:5C:5D:17:5E:D4:5D:75:37:C9:9B:93:EA:85:B1:55:C0:19:A6
            X509v3 Authority Key Identifier:
                keyid:8A:DE:07:87:CF:98:81:A1:FC:59:55:6C:A1:54:2D:77:79:F2:87:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/it4Hh8-YgaH8WVVsoVQtd3nyh2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/bc1915-dbfe-4481-b31b-5697c7b1c5c1/1/it4Hh8-YgaH8WVVsoVQtd3nyh2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:b0:bb:d3:77:7c:e4:75:a0:5d:62:8f:7d:2e:68:9e:31:68:
         77:6c:1c:ac:ed:c2:30:ac:07:56:fa:20:bb:9c:e7:06:83:bb:
         ba:9b:c3:c5:bf:4d:ed:22:1e:44:49:9a:0d:d0:71:ee:c1:73:
         a3:da:29:5a:d7:73:1a:7d:bf:ea:cb:f6:2d:ef:fd:98:af:04:
         83:96:fc:aa:a7:13:b1:a5:ac:bc:a8:06:11:8a:f8:b3:00:03:
         d7:3c:ca:2c:c2:e6:6b:aa:32:33:80:1d:04:2d:5f:d7:a6:8d:
         f7:b7:1d:82:19:79:bf:ce:c8:e2:39:c2:74:7b:88:a5:0c:2d:
         a2:c3:85:30:3a:43:2c:39:64:3c:61:6e:1c:7f:e6:6e:95:09:
         f6:73:97:67:e3:be:78:43:71:78:c8:ef:f9:42:fc:60:89:a0:
         18:41:e1:d2:93:76:13:b0:5e:97:41:ec:59:ac:0f:36:de:ec:
         fe:6d:b9:ea:33:0b:dc:fa:07:cc:7b:70:58:1d:26:0c:26:11:
         44:c0:3c:0a:94:db:d7:79:bf:cd:3f:c7:2c:83:85:0c:07:11:
         39:cf:28:a4:f8:4d:56:64:9d:ee:c5:d8:3a:ff:9c:c3:5a:55:
         c4:09:c1:33:ec:5c:97:eb:7e:18:3e:aa:e1:5f:d2:1e:e1:9e:
         80:f4:97:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----