Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
File:                     iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft (raw, json)
Hash identifier:          1mtFe33jfrU+eYzwv8HMyu/umP7jwaBqnMNzqWfwMpU=
Subject key identifier:   D0:6F:5A:E2:53:23:B2:E1:6D:05:2C:33:1E:70:44:C0:F9:57:CC:7B
Authority key identifier: 88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE
Certificate issuer:       /CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
Certificate serial:       01962E61DDBAE74BE903F2B2B9D175E79468
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl (hash: Bipk9kSh6UXK4JOqi8VPzw14KV3I0E1whTjWpORdj5o=)
                          2: qvYpsZQGhS3eiJYFcpoDInx2DkE.roa (hash: AzKXVpJ7rQhInqcKxYMIE20bjXuo9eJ0x8CLUXTV+A0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:dd:ba:e7:4b:e9:03:f2:b2:b9:d1:75:e7:94:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88a62cf8100e8c1b475443fd94cd58d8ef2a33ae
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=d06f5ae25323b2e16d052c331e7044c0f957cc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3d:fa:d8:1e:4a:f1:87:0c:90:b9:c2:14:10:
                    fe:81:07:53:ea:c1:9a:3d:9a:09:0c:65:9e:91:cc:
                    c6:e4:b2:60:16:f6:d1:82:60:e6:62:2d:22:eb:67:
                    98:88:c3:c1:53:9f:38:c6:8f:ba:6a:8b:06:11:2f:
                    97:5b:72:25:fd:f4:17:ef:92:e3:6e:d1:c0:e7:cf:
                    f8:9b:c9:b4:5c:1d:7b:91:93:95:e7:3f:b9:00:2b:
                    42:5e:24:b6:94:9d:94:f5:ce:0a:fa:19:2b:ae:3a:
                    52:33:8f:fe:4f:95:3c:a1:34:c6:31:15:ce:cf:09:
                    78:90:b9:9d:46:98:eb:92:0d:43:7c:1d:e5:9e:a9:
                    a4:94:44:8a:97:66:e4:c1:0a:29:2b:7b:91:58:43:
                    96:5f:d0:43:39:e6:b0:b8:59:b6:be:36:0f:c4:d0:
                    79:c4:c9:3e:48:9b:37:d7:48:44:9a:19:a6:a8:80:
                    f6:29:88:9a:12:79:f7:0e:c1:10:6b:df:59:96:ae:
                    ea:38:62:1b:66:c9:11:6b:c6:4d:78:fb:a9:2c:d7:
                    26:7f:70:b6:ce:8b:f9:d2:69:0c:46:05:2c:ea:e7:
                    3d:b3:16:37:bb:6e:4e:ac:d6:52:31:09:60:57:3b:
                    97:fa:ac:61:37:2d:b2:ac:99:0e:b6:f9:58:b0:5b:
                    eb:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:6F:5A:E2:53:23:B2:E1:6D:05:2C:33:1E:70:44:C0:F9:57:CC:7B
            X509v3 Authority Key Identifier:
                keyid:88:A6:2C:F8:10:0E:8C:1B:47:54:43:FD:94:CD:58:D8:EF:2A:33:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iKYs-BAOjBtHVEP9lM1Y2O8qM64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/eef035-2629-4e3e-bebc-15a0dddd749c/1/iKYs-BAOjBtHVEP9lM1Y2O8qM64.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:e8:66:84:40:e0:d3:b1:6e:d6:6c:35:f8:ab:22:b0:3b:d0:
         b1:3c:26:7f:88:26:58:df:b5:66:55:70:1b:c1:0b:79:5a:28:
         3c:d1:92:ca:d7:e8:c0:9e:82:d7:b6:e9:96:6b:15:19:76:d2:
         6d:e1:42:c4:37:f8:56:7d:0d:cd:0c:b3:90:3e:a7:8a:80:60:
         50:2f:5e:80:39:f1:e3:ab:e6:8e:46:b4:2d:d8:3c:e7:2e:86:
         4d:d6:fe:e4:8b:c3:f8:4c:6a:8b:67:6a:82:f2:55:99:c6:bb:
         74:9a:67:55:0d:ca:99:b0:ec:89:8d:4a:17:4e:26:0c:fd:82:
         e9:a3:a4:d8:be:7f:a0:96:b2:6e:ea:78:41:c2:67:5d:75:a8:
         30:bd:1c:35:44:ff:c3:86:a8:93:7c:87:d5:f4:d1:0b:a4:33:
         27:13:e2:07:be:1e:0d:41:f6:55:9e:ab:bb:12:25:5f:a5:92:
         63:2b:7b:ad:0e:5e:69:4a:46:e1:d3:c1:e9:1b:ac:ac:25:3d:
         fe:dc:2d:80:12:f9:28:f9:86:c0:65:28:f6:62:08:01:60:05:
         02:b3:ef:29:38:96:46:52:c4:9f:a1:3b:24:a7:3d:33:58:e7:
         77:5c:32:ac:23:1e:83:e6:a9:88:15:bf:3f:e5:d7:1f:d0:b7:
         6e:29:8e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----