Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
File:                     I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft (raw, json)
Hash identifier:          UBz0nppDnNt+GBsK55RE1owKLqJg1cxAgUH4u0wwxF0=
Subject key identifier:   69:BA:9E:92:F2:B3:2C:5B:0D:94:6C:DE:09:4E:E4:F7:56:E2:5E:BC
Authority key identifier: 23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21
Certificate issuer:       /CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
Certificate serial:       01962F74EE800D8909C3AD057DEA9F0AEF88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft
Manifest number:          143F
Signing time:             Sun 13 Apr 2025 14:01:54 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:54 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:54 +0000
Files and hashes:         1: I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl (hash: isEbOOSXKs272DpONADdqFs5/tPcSnFbVwf/UwlcK8o=)
                          2: ytASscQl-jcvF2Td7QzFghuuoNE.roa (hash: H19QKz9GlVTgCFc+7rr/9vdcrrvYDR0hpeCGpVF7EE0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:ee:80:0d:89:09:c3:ad:05:7d:ea:9f:0a:ef:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237b2b50bf0c18a531e6db15667be7ed76bb2821
        Validity
            Not Before: Apr 13 14:01:54 2025 GMT
            Not After : Apr 14 14:01:54 2025 GMT
        Subject: CN=69ba9e92f2b32c5b0d946cde094ee4f756e25ebc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1d:bb:45:e0:de:3e:51:68:18:95:7d:73:c8:
                    c3:34:f1:55:ee:71:9f:75:c2:b3:c9:bd:69:4a:e8:
                    b1:b9:f9:af:93:c3:2a:05:07:0e:48:11:16:29:bb:
                    6c:d0:3f:7c:c7:17:39:42:af:58:18:8c:72:50:cc:
                    2b:64:4f:9a:6f:9e:e9:a0:d1:ba:eb:56:10:15:ed:
                    1b:0a:98:9e:bb:80:8b:f6:23:d2:b7:a0:c0:c6:e4:
                    ba:4c:bc:2f:1b:53:4a:1b:eb:3c:9b:84:5f:5e:05:
                    98:4a:c2:85:7a:03:f8:1a:7d:e7:62:32:7c:f6:02:
                    58:71:9e:c0:1d:9f:8e:8c:01:ce:df:d0:e4:76:7f:
                    25:44:d3:2d:01:2f:e3:54:50:b7:6b:f0:0b:2f:0b:
                    0a:e0:cd:34:5f:ea:f9:75:c0:6b:1f:e4:f0:ed:02:
                    fc:34:fa:7b:39:f9:fb:32:e6:46:c8:8b:a7:c9:a8:
                    2c:4b:04:fe:ad:32:94:bf:1b:8d:31:00:10:25:96:
                    1a:ba:fe:e5:52:d4:f7:54:dc:6c:15:b5:b0:75:40:
                    91:80:4b:bd:1a:a2:2f:10:a4:ce:09:db:58:41:df:
                    16:d3:81:de:c5:6f:44:31:34:fc:4d:70:02:1c:c7:
                    0f:ce:33:aa:a3:dd:98:26:f4:2c:43:ca:d9:46:9d:
                    40:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BA:9E:92:F2:B3:2C:5B:0D:94:6C:DE:09:4E:E4:F7:56:E2:5E:BC
            X509v3 Authority Key Identifier:
                keyid:23:7B:2B:50:BF:0C:18:A5:31:E6:DB:15:66:7B:E7:ED:76:BB:28:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3srUL8MGKUx5tsVZnvn7Xa7KCE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/3d6d51-3d57-43a8-b67f-b615df7fce9e/1/I3srUL8MGKUx5tsVZnvn7Xa7KCE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a2:14:30:33:71:d3:6f:20:f8:5e:37:f2:6a:8e:a9:ec:a5:
         3e:17:bf:b0:c1:59:28:aa:c1:a4:17:db:69:95:1c:bc:5b:f7:
         27:61:46:03:3d:68:2b:8b:62:e0:c5:f2:da:44:6d:cd:12:72:
         4c:b5:9f:9d:3b:1a:6c:13:08:42:35:e3:db:64:2f:dc:2d:0e:
         ce:a4:ff:44:a5:b6:70:59:d3:4e:77:32:ef:88:7b:e1:4b:bb:
         2a:34:18:27:46:c9:98:97:43:23:a0:d9:3e:b7:3f:2f:be:b5:
         d2:99:e0:4f:90:45:93:de:32:a6:c4:77:75:5e:99:14:c9:e2:
         87:e0:26:0c:ae:19:13:62:5b:27:26:bf:ce:71:aa:fd:00:ea:
         78:d0:04:fa:14:85:52:73:bf:28:24:fd:6d:58:8e:e0:a0:be:
         94:29:d4:af:cb:7a:9a:27:e9:00:17:65:9c:7d:07:aa:c1:91:
         7a:74:bf:b8:70:52:4b:cf:b1:ba:76:46:35:e4:a4:95:2e:8d:
         2e:34:7c:f5:14:af:af:73:7b:1b:f3:3b:df:3e:66:3a:0f:a5:
         cf:8e:74:00:85:e6:2a:24:d0:92:06:62:25:85:01:90:d9:cf:
         43:c3:a9:67:45:7e:44:88:b3:1c:37:af:e9:ff:56:02:ce:a4:
         45:57:66:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----