Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
File:                     i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft (raw, json)
Hash identifier:          0271v6W47QNJ4lVdxelButtABlEhOdKYLVIZgkTu/hY=
Subject key identifier:   A5:0B:33:EB:4C:81:2C:D1:C7:F3:69:C4:A7:8C:E5:F3:C5:36:38:8F
Authority key identifier: 8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03
Certificate issuer:       /CN=8b9289d88259c33cc7ad81482b779450ae4eac03
Certificate serial:       01962DF434551CFB459A1105CA08344CA0C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft
Manifest number:          079F
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl (hash: cGaG3wl91pnB4FY9Nhwdnli8Yd4mVmK105pU+xFX3Us=)
                          2: i_rrSeZPVtugiJJvEliUK8J1RzA.roa (hash: 1fESgkXEQ9WR5T3026NuI2KYcBFTrF7XO7UpgxQnSpk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:34:55:1c:fb:45:9a:11:05:ca:08:34:4c:a0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b9289d88259c33cc7ad81482b779450ae4eac03
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=a50b33eb4c812cd1c7f369c4a78ce5f3c536388f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:28:8b:8b:ec:c5:b5:5f:be:be:64:15:d9:48:
                    fe:98:01:73:99:69:e0:c6:99:bd:11:6c:be:5d:e6:
                    32:82:2a:87:83:e0:ff:f2:40:cb:38:de:35:a4:bb:
                    d0:b3:08:c1:74:6a:4f:db:1f:ab:85:ec:37:6a:40:
                    a2:cd:92:9f:00:01:84:c1:7c:10:75:79:a7:a8:ac:
                    e6:0b:f5:16:45:0c:df:63:c0:16:bd:ae:c2:1a:db:
                    f4:b8:e0:79:a6:7b:d2:a5:6d:77:79:f8:d9:f5:13:
                    72:ca:b5:31:65:d3:b9:3f:3e:75:7c:63:a9:a9:04:
                    4a:53:16:50:c2:0f:9f:a0:12:2b:bf:d1:10:ed:e0:
                    cb:fd:c4:b0:1e:83:18:10:d3:96:59:35:50:c8:7b:
                    5d:53:aa:3e:17:18:f8:3f:51:94:90:7c:e3:28:30:
                    77:e7:76:6f:a0:9c:19:53:61:98:04:03:14:a9:90:
                    02:f6:a3:5f:2a:4b:19:0d:b0:90:3f:cd:f4:46:87:
                    09:6c:76:b2:95:95:5d:83:15:0f:14:0d:29:0e:11:
                    7a:3e:3b:4b:d5:78:ac:59:56:4b:e7:96:f5:31:96:
                    e6:38:2e:75:20:6d:ef:be:2b:c9:c4:dd:70:50:23:
                    9f:6c:2d:11:0c:cc:6c:2e:4e:14:8b:b7:28:de:9b:
                    2d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0B:33:EB:4C:81:2C:D1:C7:F3:69:C4:A7:8C:E5:F3:C5:36:38:8F
            X509v3 Authority Key Identifier:
                keyid:8B:92:89:D8:82:59:C3:3C:C7:AD:81:48:2B:77:94:50:AE:4E:AC:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/9e9d9d-9091-435a-9967-d8468b72f1a0/1/i5KJ2IJZwzzHrYFIK3eUUK5OrAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:fb:30:5a:d1:e1:9a:09:ba:6c:a1:83:60:9e:86:b8:ea:f2:
         91:e3:15:20:b8:a7:af:64:b0:65:98:62:09:2f:fc:09:fb:78:
         58:b3:0d:d0:47:e0:5e:29:7b:ff:28:41:cf:46:fc:67:66:fc:
         d2:5f:ee:cc:ed:5d:29:27:19:7f:d2:87:9f:42:f9:5d:e7:4b:
         1c:fa:b2:a6:7a:37:51:dd:26:48:8a:3f:21:32:17:dc:e7:0c:
         30:e8:b0:c4:67:be:18:9d:56:e8:80:fc:08:2b:d3:cf:0d:ca:
         61:e8:f3:c0:d0:f4:1c:c1:71:02:c9:35:3c:f8:8c:83:72:23:
         a6:63:fa:85:72:de:40:39:36:66:aa:24:e9:4e:59:20:33:b3:
         16:77:44:22:52:de:f9:00:ce:95:28:50:6c:b2:45:f9:c3:47:
         18:fc:ac:fb:89:a1:0e:e8:65:2c:3f:6c:f1:36:a8:66:91:94:
         76:6a:1b:ef:f5:33:8d:43:79:8a:4d:37:fe:f3:c7:17:fc:bc:
         15:16:ca:2b:0f:e6:46:4b:0a:0e:cc:d8:e1:23:c3:6a:8d:f3:
         98:76:c0:99:3f:ae:0f:ef:0d:2b:ba:c1:64:40:22:51:28:73:
         f1:74:77:ed:79:0a:38:05:a8:a8:0f:e2:28:49:8c:18:d2:48:
         70:49:a4:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----