Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
File:                     I67pTQ__bGx1KmlC_6lirjfH5rY.mft (raw, json)
Hash identifier:          u1rIkGpDP7iXXrlsj+YC9iW4B5O4U5Jq/4wuX1S8JZY=
Subject key identifier:   85:D5:48:AB:E3:8A:89:AA:BE:3F:8A:E4:61:E5:F2:C4:F2:1F:CE:F4
Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
Certificate issuer:       /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Certificate serial:       01962E98B114F4057373AC1ED2E53EF2CC4C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 10:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:20 +0000
Files and hashes:         1: I67pTQ__bGx1KmlC_6lirjfH5rY.crl (hash: SfZomVIE4FYPJ9TV/5j6XWAL2LXKaXDzm7lOwaZlHXE=)
                          2: gR0LYM6QGI-qsid_nSKtkxsGl7k.roa (hash: ZNyhf/gNov+ZA8ZlWmnXcmM+r4ht/hEtiegrCZhA7GA=)
                          3: s_AzbY_4r2Y_-4vfgCGonUFbZoY.roa (hash: HgaSiRleH54HgG93gpFtFR8yZx0H4YCH5wCdvkPpECU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:b1:14:f4:05:73:73:ac:1e:d2:e5:3e:f2:cc:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
        Validity
            Not Before: Apr 13 10:01:20 2025 GMT
            Not After : Apr 14 10:01:20 2025 GMT
        Subject: CN=85d548abe38a89aabe3f8ae461e5f2c4f21fcef4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:47:f9:b7:3b:55:8f:8c:e4:cf:fa:e1:75:1a:
                    6a:2a:f6:d9:48:58:50:a5:81:bc:cb:e2:1e:5c:f1:
                    23:32:2e:67:20:3a:1d:22:ca:42:06:50:ad:4a:13:
                    f1:c7:de:f5:04:ea:ec:47:33:2e:58:2e:22:15:51:
                    78:1b:ff:72:51:1e:f9:53:ad:6a:4b:18:31:7e:95:
                    e5:2f:3c:06:7c:28:ae:2e:0d:47:fc:99:cb:f5:6f:
                    bc:d8:97:d0:15:78:03:9c:37:f7:8e:f8:37:49:7f:
                    82:56:33:06:c2:49:04:1d:07:20:15:a9:77:73:75:
                    15:34:b5:8d:d2:7a:6d:a9:f4:e0:d2:25:bb:6b:b9:
                    6e:10:db:a8:11:b5:bf:11:bb:7f:44:a6:10:5d:72:
                    ec:84:e3:75:76:de:d6:57:4e:2e:f5:b8:89:bb:79:
                    84:29:65:17:aa:49:97:c4:5b:50:50:a2:4b:2a:2e:
                    fa:ba:e7:ca:cf:5a:66:f0:f2:ac:b1:8e:cd:20:54:
                    ed:1f:76:40:8d:a8:35:81:7e:fe:4d:7f:6d:b3:44:
                    ce:40:08:76:a4:e2:96:14:11:5b:71:c6:3f:d3:a2:
                    a7:ff:a1:36:90:7d:bf:2e:cb:10:7a:3c:72:bc:f0:
                    b3:a6:29:93:2b:34:bb:0e:6f:c4:47:8a:1b:2d:ea:
                    22:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D5:48:AB:E3:8A:89:AA:BE:3F:8A:E4:61:E5:F2:C4:F2:1F:CE:F4
            X509v3 Authority Key Identifier:
                keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:d6:ba:3b:55:be:f0:ca:ca:a2:ac:de:93:70:c4:0e:f3:c2:
         4a:b5:4d:36:e1:54:01:7d:02:a4:3a:7f:95:d8:94:b3:41:05:
         8f:27:6b:ff:9f:f6:3b:6b:34:d9:4c:6c:35:30:91:55:6b:0b:
         44:81:4c:18:94:10:bc:03:77:7a:a7:19:73:f9:08:8f:8f:39:
         0d:28:97:15:e5:29:72:0b:98:3b:ca:c0:cc:1b:2d:94:a9:dd:
         86:33:63:8a:69:42:cf:11:04:40:81:03:e9:23:6d:51:b2:f7:
         ce:0c:b2:f5:1a:2a:9f:86:8d:f8:ca:0f:a1:d3:bd:c5:b1:a6:
         81:15:5e:72:0c:66:21:57:99:bc:5a:a3:9b:85:73:23:92:e2:
         6f:0e:06:6d:fc:ca:31:d1:3a:db:1e:a0:e3:5c:b7:12:af:d0:
         85:5d:f2:44:d8:a8:42:17:6f:15:b5:b1:9d:95:29:00:9e:94:
         06:23:5f:59:8b:7e:89:af:34:b9:c8:0f:50:ff:98:44:b8:70:
         43:b4:57:ed:98:22:c0:47:58:f3:36:29:39:a3:99:95:f5:ec:
         66:b0:7e:c3:67:5b:4e:cc:bd:ec:64:17:16:4b:30:5f:3d:14:
         3c:08:24:55:2f:40:f2:24:94:ad:04:bf:f6:4d:0d:be:95:06:
         93:fc:a2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----