Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
File:                     ivp-CzSkdiIssfW8DAXsE7uxSnk.mft (raw, json)
Hash identifier:          GNiM8O4ijOOkIBf0Sni2u+tlGK5Ph/jgyFWdmPbEQ5k=
Subject key identifier:   3F:F4:AA:E0:F0:22:42:6C:5C:C5:72:5E:4F:78:9B:75:6C:23:AA:C5
Authority key identifier: 8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79
Certificate issuer:       /CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
Certificate serial:       01962E98B2656B24BDC17C254F779A20EE53
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft
Manifest number:          0348
Signing time:             Sun 13 Apr 2025 10:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:21 +0000
Files and hashes:         1: ivp-CzSkdiIssfW8DAXsE7uxSnk.crl (hash: a9Fthh2Bmrztt1VXQU5YKTvS+ywyFEE6D3punuSHtH8=)
                          2: xjFYnGP6tvKlT0bnY6Z0blojedo.roa (hash: D4wBiEgNI0VL2j2WFme+xBy3GKKEqlCZgqQ1eMFWWqI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b2:65:6b:24:bd:c1:7c:25:4f:77:9a:20:ee:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8afa7e0b34a476222cb1f5bc0c05ec13bbb14a79
        Validity
            Not Before: Apr 13 10:01:21 2025 GMT
            Not After : Apr 14 10:01:21 2025 GMT
        Subject: CN=3ff4aae0f022426c5cc5725e4f789b756c23aac5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:01:ef:30:57:ab:bb:09:de:9d:bf:fd:c8:cd:
                    4b:3b:59:bc:3a:b1:71:c5:98:db:a1:9f:d6:fa:73:
                    93:20:41:41:5b:35:d1:e4:66:f8:dd:a0:a3:d3:36:
                    c5:6d:04:9b:e6:b2:f9:85:12:4a:4b:ad:6d:0e:51:
                    31:3e:8e:71:71:3b:c3:ce:bd:c1:7d:cc:7a:9e:0e:
                    a4:88:cf:a0:e3:bd:c6:77:bf:ac:c7:4e:64:8f:94:
                    16:2a:31:52:1a:f4:e6:13:fe:b8:a0:05:63:29:46:
                    fb:9d:26:55:f9:5a:35:29:ce:fa:de:e1:73:34:f7:
                    4f:6b:7c:b0:61:6a:4a:6c:d1:e0:96:ef:38:9b:a7:
                    88:4b:08:3e:aa:6d:83:bc:2f:c9:6e:65:a6:b3:d1:
                    21:2a:02:e9:37:65:85:d0:22:e0:6e:94:cc:be:e1:
                    fc:65:5a:89:26:8a:d0:19:03:2b:6d:05:50:75:73:
                    ef:bc:3d:41:e8:85:dc:a3:b4:4b:51:15:4c:9c:75:
                    7c:79:d6:8d:22:ae:56:e5:d2:04:76:79:1d:cf:d8:
                    14:e8:40:fd:3f:d8:cb:c6:1f:f3:dd:c2:f9:f4:48:
                    55:46:bf:d3:8f:50:1e:13:a1:0f:37:4e:80:e1:9b:
                    5f:73:ff:6d:38:d6:a7:31:8f:6e:c3:19:04:a4:c3:
                    e8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F4:AA:E0:F0:22:42:6C:5C:C5:72:5E:4F:78:9B:75:6C:23:AA:C5
            X509v3 Authority Key Identifier:
                keyid:8A:FA:7E:0B:34:A4:76:22:2C:B1:F5:BC:0C:05:EC:13:BB:B1:4A:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ivp-CzSkdiIssfW8DAXsE7uxSnk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ba8769-8d8a-4c17-91c7-6ba7a947a7f7/1/ivp-CzSkdiIssfW8DAXsE7uxSnk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:31:c8:ba:f6:83:e0:8c:ac:61:ed:5c:79:f0:da:d9:6f:a1:
         5c:ba:fb:cf:09:d5:65:82:47:58:0c:c6:ee:f0:88:8c:3f:ac:
         af:e4:6e:9c:70:48:42:6a:27:4f:ef:09:58:ec:fd:0f:47:d4:
         2d:98:c5:0b:65:fd:95:09:e1:2e:1d:db:85:9a:66:5b:33:18:
         4d:3a:b6:96:87:50:55:e8:ba:5c:85:8f:49:5c:05:d7:b8:68:
         75:c8:1c:84:4f:45:d6:24:c0:20:26:60:6d:6c:8a:38:cd:0c:
         06:13:01:76:83:22:93:88:7a:5f:81:3b:c7:2c:49:13:2e:80:
         85:6b:22:3b:40:ea:e5:3a:55:cd:4c:f5:a5:99:37:c9:03:fa:
         7b:54:01:90:7c:e8:88:cd:2b:95:51:6d:57:51:6c:e6:bd:2d:
         a2:71:80:ee:c6:c5:2a:e3:fa:d5:2a:09:6e:fa:1e:c9:d3:c1:
         9c:4d:ff:20:d6:d6:f1:4a:5d:e9:32:e7:f6:ba:1d:b7:a4:8a:
         f1:a6:bb:8b:3e:82:74:07:13:e6:73:05:7c:77:23:2f:d4:5b:
         77:ef:df:1d:04:90:c7:7f:fe:86:f8:b4:8a:74:f0:8f:88:54:
         1d:33:ce:83:15:89:ab:ec:42:05:6f:2f:dc:04:10:13:7b:88:
         c5:bf:a1:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumLJlayS9wXwlT3eaIO5TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZmE3ZTBiMzRhNDc2MjIyY2IxZjViYzBjMDVlYzEzYmJi
MTRhNzkwHhcNMjUwNDEzMTAwMTIxWhcNMjUwNDE0MTAwMTIxWjAzMTEwLwYDVQQD
EygzZmY0YWFlMGYwMjI0MjZjNWNjNTcyNWU0Zjc4OWI3NTZjMjNhYWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QHvMFeruwnenb/9yM1LO1m8OrFx
xZjboZ/W+nOTIEFBWzXR5Gb43aCj0zbFbQSb5rL5hRJKS61tDlExPo5xcTvDzr3B
fcx6ng6kiM+g473Gd7+sx05kj5QWKjFSGvTmE/64oAVjKUb7nSZV+Vo1Kc763uFz
NPdPa3ywYWpKbNHglu84m6eISwg+qm2DvC/JbmWms9EhKgLpN2WF0CLgbpTMvuH8
ZVqJJorQGQMrbQVQdXPvvD1B6IXco7RLURVMnHV8edaNIq5W5dIEdnkdz9gU6ED9
P9jLxh/z3cL59EhVRr/Tj1AeE6EPN06A4Ztfc/9tONanMY9uwxkEpMPogQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/0quDwIkJsXMVyXk94m3VsI6rFMB8GA1UdIwQY
MBaAFIr6fgs0pHYiLLH1vAwF7BO7sUp5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXZwLUN6U2tkaUlzc2ZXOERBWHNFN3V4U25rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC9iYTg3NjktOGQ4YS00YzE3LTkxYzct
NmJhN2E5NDdhN2Y3LzEvaXZwLUN6U2tkaUlzc2ZXOERBWHNFN3V4U25rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC9iYTg3NjktOGQ4YS00YzE3LTkxYzctNmJhN2E5NDdhN2Y3
LzEvaXZwLUN6U2tkaUlzc2ZXOERBWHNFN3V4U25rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJzHIuvaD
4IysYe1cefDa2W+hXLr7zwnVZYJHWAzG7vCIjD+sr+RunHBIQmonT+8JWOz9D0fU
LZjFC2X9lQnhLh3bhZpmWzMYTTq2lodQVei6XIWPSVwF17hodcgchE9F1iTAICZg
bWyKOM0MBhMBdoMik4h6X4E7xyxJEy6AhWsiO0Dq5TpVzUz1pZk3yQP6e1QBkHzo
iM0rlVFtV1Fs5r0tonGA7sbFKuP61SoJbvoeydPBnE3/INbW8Upd6TLn9rodt6SK
8aa7iz6CdAcT5nMFfHcjL9Rbd+/fHQSQx3/+hvi0inTwj4hUHTPOgxWJq+xCBW8v
3AQQE3uIxb+hQg==
-----END CERTIFICATE-----