Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
File:                     ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft (raw, json)
Hash identifier:          3EqIaPgpgNFVqnyj3i+/zizL8xiTD1pLdi20j+t8/Wc=
Subject key identifier:   FB:05:E9:DD:38:65:E1:C6:7C:35:8A:4B:EC:2F:17:12:3E:B5:5F:D2
Authority key identifier: 8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F
Certificate issuer:       /CN=8b17fe8dd72c50c628dea973158d0f942326da8f
Certificate serial:       01962DF400160C06F3E5DBCE0DA707450202
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft
Manifest number:          066B
Signing time:             Sun 13 Apr 2025 07:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:27 +0000
Files and hashes:         1: DLubGHoQGgvM_j186blmZIGyLZM.roa (hash: TEMPnE8yGqVWn4gW4EZOnV9emzYVMGQtqJpNZOLj0Yc=)
                          2: ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl (hash: WKl8/Rd+DFKstVATmZjtjkhZopsbS+GZBLDn6OQjTVY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:00:16:0c:06:f3:e5:db:ce:0d:a7:07:45:02:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b17fe8dd72c50c628dea973158d0f942326da8f
        Validity
            Not Before: Apr 13 07:01:27 2025 GMT
            Not After : Apr 14 07:01:27 2025 GMT
        Subject: CN=fb05e9dd3865e1c67c358a4bec2f17123eb55fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:81:f2:37:42:95:16:57:be:34:15:0d:c7:30:
                    88:64:dc:f5:0b:c6:e7:f6:20:a2:a6:28:e0:f0:f9:
                    db:10:6e:9d:42:7f:6d:e5:0b:a3:05:31:f7:12:c9:
                    1b:7e:c0:99:6d:02:54:ed:e8:9f:94:22:33:07:ac:
                    9a:93:4a:26:67:da:31:aa:df:90:32:17:ce:da:a6:
                    ed:b2:8c:17:0b:8c:94:17:78:c4:d6:09:ff:4a:0e:
                    a2:fa:b6:94:6a:76:77:ed:af:8c:7d:72:d1:ca:d2:
                    8f:2b:ac:0d:69:2d:ee:8e:5f:3d:f0:08:04:4c:a5:
                    ee:eb:d6:03:72:ec:50:93:aa:58:6e:49:73:62:0d:
                    7f:73:c9:b1:45:bc:a0:cc:fc:5a:85:7c:72:a5:a8:
                    c4:59:db:5b:69:df:8e:75:f1:72:f3:87:ee:1f:4a:
                    de:e9:e8:f3:a2:b0:c6:34:d5:d0:f4:a5:16:de:bd:
                    23:70:6e:10:ec:2c:94:05:3c:fb:df:8e:27:7f:a7:
                    88:c6:05:bf:c5:b7:23:52:e2:3d:74:c5:1d:56:7e:
                    21:74:af:f8:03:3e:87:aa:f4:30:c3:4a:31:7f:6b:
                    49:95:b3:35:17:5f:8e:6a:5d:bc:1d:ab:38:41:62:
                    10:28:59:13:cb:bc:2c:fa:6e:74:38:31:8e:b3:18:
                    60:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:05:E9:DD:38:65:E1:C6:7C:35:8A:4B:EC:2F:17:12:3E:B5:5F:D2
            X509v3 Authority Key Identifier:
                keyid:8B:17:FE:8D:D7:2C:50:C6:28:DE:A9:73:15:8D:0F:94:23:26:DA:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ixf-jdcsUMYo3qlzFY0PlCMm2o8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/28d3cd-d799-43f6-87fe-f5baeaee865a/1/ixf-jdcsUMYo3qlzFY0PlCMm2o8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e9:4c:6c:ac:d9:3d:e6:4f:03:ea:f4:f5:98:97:63:2f:c4:76:
         35:08:72:7f:a7:eb:57:d6:2d:c9:17:5d:d7:8e:fd:71:42:b3:
         e8:46:dc:2d:66:db:44:27:c7:d5:7a:b0:82:e7:3e:9f:b8:ce:
         53:a8:9e:e5:0d:93:e6:44:98:00:db:69:21:8d:a0:c0:fb:a5:
         06:5f:05:89:01:47:09:2f:31:47:15:36:34:1a:81:1b:49:d5:
         c2:87:74:dd:e2:33:c5:2f:4c:bc:77:f4:b4:9b:22:05:85:90:
         80:ab:11:15:09:69:a4:e7:09:28:4b:a1:80:1f:db:6e:bd:8f:
         7a:e8:96:be:be:bb:15:f8:0a:d4:17:84:4c:f3:39:5b:ec:e4:
         f8:6a:71:37:be:c8:d7:de:35:84:b6:a7:a1:f4:97:53:0e:6c:
         cd:c1:dc:03:89:e9:13:80:88:5b:21:ba:da:97:bd:5b:bc:90:
         b5:a0:b6:bd:17:6b:ca:ef:7d:b5:86:0d:df:c3:4d:15:d4:15:
         e3:0f:86:0d:79:ec:e5:ac:17:60:9b:e7:6f:cb:15:3d:bf:72:
         96:7b:e0:ef:58:dc:2b:df:66:0e:96:a3:48:34:ec:d1:c3:b8:
         d1:23:a8:a6:bd:a8:08:42:fa:29:a5:f1:70:e7:06:9b:8b:15:
         9a:dd:81:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----