Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
File:                     I6NILh1m2H9bml7rnIr9a17CMiQ.mft (raw, json)
Hash identifier:          neBNXQEClbCwgmMnJ/jbOi+k+PybRsUNMD+ODvCv/zg=
Subject key identifier:   12:EA:27:1F:BE:4C:7A:46:6F:C3:98:E8:70:F7:19:F9:B2:B0:F4:07
Authority key identifier: 23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24
Certificate issuer:       /CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
Certificate serial:       01962ECF94D80FA372D5B57F18D17E5AACE7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: I6NILh1m2H9bml7rnIr9a17CMiQ.crl (hash: IoElByFvGLgsy3L1+gSXZ5dmF3ENp9ooAs7Gn1V+6rs=)
                          2: IQwej1LnyY7ETYPMzr0MBaKMJYU.roa (hash: m2Od1UXry84TfojxLTlOoi+R13MMd4A7opflyOM6uR0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:94:d8:0f:a3:72:d5:b5:7f:18:d1:7e:5a:ac:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23a3482e1d66d87f5b9a5eeb9c8afd6b5ec23224
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=12ea271fbe4c7a466fc398e870f719f9b2b0f407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5e:43:f9:d6:7b:25:4e:2f:a1:b3:82:c2:20:
                    ba:ab:2e:c0:ec:d2:67:5d:8f:96:59:9f:13:d4:8e:
                    e7:7d:87:bb:7d:fe:75:48:3b:68:6a:7b:d1:0b:83:
                    3c:f9:cc:72:bb:1c:bd:06:a8:d0:13:ce:d9:10:ec:
                    d5:05:3e:d9:52:80:78:01:8c:6e:d5:80:a9:8f:f4:
                    7c:95:06:d5:7a:9e:07:07:43:57:5e:1a:ef:19:d3:
                    53:34:af:1a:40:47:55:b3:08:a0:66:57:2e:08:15:
                    92:de:92:f7:e6:32:2f:4b:ae:a9:22:85:3e:5d:0d:
                    78:aa:53:89:6f:05:66:9a:d1:5e:9a:10:3d:29:e8:
                    2c:0d:44:cf:c1:51:0b:a1:50:34:14:2d:65:e5:3d:
                    f1:2b:99:ab:b3:cd:3c:1e:9f:db:ab:5d:66:b2:0f:
                    6b:ae:a2:cd:34:56:7c:26:39:0c:b0:c0:35:c7:59:
                    e4:01:9f:7d:39:62:72:9e:c2:38:33:b3:19:28:b5:
                    0f:17:2a:1c:10:ec:4b:f6:fe:6b:04:09:aa:fc:77:
                    c8:04:ee:a1:1a:68:9a:b9:a4:8b:3e:05:a9:9d:1a:
                    53:22:20:d1:db:e0:19:5a:15:a0:fe:d3:a0:e8:85:
                    54:2d:e3:3f:1a:89:f4:76:05:92:0e:91:78:d6:3c:
                    0c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EA:27:1F:BE:4C:7A:46:6F:C3:98:E8:70:F7:19:F9:B2:B0:F4:07
            X509v3 Authority Key Identifier:
                keyid:23:A3:48:2E:1D:66:D8:7F:5B:9A:5E:EB:9C:8A:FD:6B:5E:C2:32:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6NILh1m2H9bml7rnIr9a17CMiQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/502ecd-e6fe-4298-8054-1385871a909d/1/I6NILh1m2H9bml7rnIr9a17CMiQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:40:90:5e:ef:26:b4:06:f8:2d:55:8f:fb:3c:fd:70:0e:5a:
         13:d0:3c:e0:7d:a4:11:20:3e:c5:c8:7a:36:e3:f3:43:a0:3a:
         a2:b2:94:d1:da:f0:40:4c:4b:02:f5:a9:2b:9a:1c:ee:13:09:
         25:03:4e:bb:bb:ac:77:e2:b0:c9:51:18:43:45:0d:e0:a7:c1:
         2d:fb:33:50:55:4f:92:b3:93:4f:79:32:c7:55:27:ea:8e:a5:
         ce:63:05:64:d5:a1:3f:39:7b:e4:5f:10:d9:48:58:d7:69:63:
         d9:28:a0:7b:37:7c:c8:76:45:f2:01:f6:a8:ff:58:af:f4:16:
         07:75:04:27:f0:26:7e:17:f7:78:f3:da:b2:7e:51:d2:51:15:
         3d:8a:f3:10:42:65:6a:59:6e:a2:ab:f2:0d:64:e9:fe:19:f8:
         b6:c6:f6:43:bf:d6:7c:5c:17:ff:8e:26:b3:ec:83:a3:ed:73:
         ae:30:bc:e4:d0:c7:82:02:f9:2e:6d:e8:62:4b:2e:b0:b7:ac:
         07:ed:24:72:51:25:db:fe:9f:35:ce:40:af:f1:7b:00:72:d3:
         d8:03:2c:8c:b4:6d:ae:7b:b2:17:c1:6e:f1:cb:6b:04:3a:64:
         84:40:75:d2:82:3b:e1:1a:9f:04:1a:75:08:2d:32:01:3a:ec:
         7f:e5:1b:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----