Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
File:                     iF5uZejXQYIDljRWbNH6KysyVwI.mft (raw, json)
Hash identifier:          6aBk5PDyJ8edqIn8oBEnULm9Sx8tj5dATMdLJscvb68=
Subject key identifier:   89:B8:AC:75:9E:DC:E5:10:F4:74:20:27:34:98:8A:00:A0:D7:F0:D6
Authority key identifier: 88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02
Certificate issuer:       /CN=885e6e65e8d74182039634566cd1fa2b2b325702
Certificate serial:       01962DF39FFA16F066EACFE1BDDD4153EE50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft
Manifest number:          EA
Signing time:             Sun 13 Apr 2025 07:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:02 +0000
Files and hashes:         1: 7R9_GJs-RL0ErJSF-LSh2qvUnoE.roa (hash: vAKa7err3VX58GgPpqscTS8KcHYZ802QYuzRZdVwrE8=)
                          2: iF5uZejXQYIDljRWbNH6KysyVwI.crl (hash: L+yYoVWq1bUQBChT0Y4JoICauqF/qnF650rAthCajsY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9f:fa:16:f0:66:ea:cf:e1:bd:dd:41:53:ee:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=885e6e65e8d74182039634566cd1fa2b2b325702
        Validity
            Not Before: Apr 13 07:01:02 2025 GMT
            Not After : Apr 14 07:01:02 2025 GMT
        Subject: CN=89b8ac759edce510f474202734988a00a0d7f0d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:40:67:b6:be:53:35:2b:ee:63:c1:2a:26:01:
                    f8:8a:d8:ef:82:73:c3:09:a8:20:9d:9b:4e:ed:3b:
                    dd:6e:e7:02:f8:af:63:2a:60:2c:ce:d1:99:18:68:
                    43:30:02:8d:45:af:a7:24:2b:80:8c:8a:15:76:1f:
                    9f:a1:a7:38:1c:2b:a5:99:41:04:0b:a6:8f:62:3d:
                    91:29:f5:fe:40:05:2e:ac:81:49:cd:70:8b:ed:80:
                    13:b8:f8:10:ad:bc:b0:3b:a6:57:64:b2:2b:c2:09:
                    09:09:47:d2:57:04:6e:b8:79:8e:04:0a:b0:b2:d3:
                    b2:0d:88:7b:48:e7:5e:4c:9d:98:07:ea:22:59:f9:
                    c2:26:d7:fb:c7:95:82:19:d1:67:dd:33:be:88:af:
                    17:3d:3e:75:9a:48:aa:04:a6:5b:8e:71:c3:97:19:
                    f9:e8:a8:c1:ed:ad:9d:e7:44:d4:cc:8f:a4:44:a9:
                    89:bd:af:5a:0f:ce:bb:62:78:65:45:32:8f:68:96:
                    a3:4d:ea:29:4f:d7:5b:60:a6:7d:d4:5e:17:e1:c0:
                    11:39:6d:46:7f:3e:5e:ee:67:2c:56:1d:5a:b8:5f:
                    82:7c:ee:c7:27:f1:fe:93:37:95:9b:da:ad:9c:42:
                    08:29:94:c3:89:8a:90:4a:20:91:71:ac:4f:6c:be:
                    da:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:B8:AC:75:9E:DC:E5:10:F4:74:20:27:34:98:8A:00:A0:D7:F0:D6
            X509v3 Authority Key Identifier:
                keyid:88:5E:6E:65:E8:D7:41:82:03:96:34:56:6C:D1:FA:2B:2B:32:57:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iF5uZejXQYIDljRWbNH6KysyVwI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/75/b5e438-e292-4d22-a90e-ceebdfde01fc/1/iF5uZejXQYIDljRWbNH6KysyVwI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:97:4d:20:14:0d:ab:9f:3e:36:11:b1:38:cb:07:e0:23:ad:
         5f:10:e0:a3:b8:b7:e0:47:d8:bc:fc:59:68:8e:7c:41:c9:5e:
         b2:4e:0f:bf:e0:29:35:f3:53:d9:15:a9:f4:5d:91:17:89:d4:
         bd:d8:76:79:c9:7e:ea:e0:9b:a3:9e:39:7d:c3:5a:54:61:2e:
         8b:15:d0:eb:61:80:8c:c6:77:b4:73:46:74:c3:75:15:aa:81:
         2b:09:85:ea:17:40:46:e8:14:0b:96:aa:9b:e7:01:3b:67:9e:
         29:5a:e3:8c:6f:1f:88:ac:0d:18:ce:aa:f1:cc:33:62:47:c4:
         93:f2:63:e5:76:7c:76:ef:3a:35:58:28:97:81:e5:98:7e:03:
         cf:3a:32:cb:71:d2:0f:80:0e:1a:87:8f:8d:fc:18:6f:df:a6:
         0b:10:d1:80:73:3b:db:a0:90:7d:0e:ff:c8:96:47:dc:fc:a3:
         52:d9:60:b1:73:cb:4a:97:57:88:85:fc:0d:d1:eb:60:93:65:
         29:d1:2a:57:f3:0d:80:69:b0:94:f6:8c:e2:aa:41:82:df:75:
         13:b3:87:01:ce:8a:61:f9:78:18:8a:0c:03:ba:e7:29:58:5d:
         44:6e:42:ee:25:47:12:19:07:9e:14:fd:25:3f:7c:c0:15:b0:
         7d:55:2f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----