Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
File:                     iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft (raw, json)
Hash identifier:          LmSBG+Iuy3Q0gj8S3U+77lAfZTMXEBvLm47oiZDkv40=
Subject key identifier:   EA:B1:A4:5B:5B:0D:9B:6F:DA:01:F7:F7:16:9F:B9:12:3B:7F:35:3E
Authority key identifier: 89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC
Certificate issuer:       /CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
Certificate serial:       01962FAB343DD2036CF63A66173ADC86A198
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 15:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:11 +0000
Files and hashes:         1: iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl (hash: XiEV3XcKEFudDjVAMsbc+eS498xGT6L0WRE5nDdFqVs=)
                          2: w8vjCf4MhWSno6arrBizV8hRGB0.roa (hash: u0VlJI61dIeh8T7++/kZccPzyKi9DwtmR02dU9ACLS8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:34:3d:d2:03:6c:f6:3a:66:17:3a:dc:86:a1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8959ae3f4177a3cdd9668d0c5b8a89f9186b5bfc
        Validity
            Not Before: Apr 13 15:01:11 2025 GMT
            Not After : Apr 14 15:01:11 2025 GMT
        Subject: CN=eab1a45b5b0d9b6fda01f7f7169fb9123b7f353e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:14:4c:41:c5:c8:54:eb:81:f7:d0:2e:46:8d:
                    87:f6:e5:60:90:af:19:e2:5a:13:95:9c:0d:e0:51:
                    34:e6:50:66:60:fa:9c:57:7a:56:56:b8:a0:71:ba:
                    e8:a4:9f:04:4b:9b:08:81:30:c3:9d:90:a9:fd:48:
                    49:a8:3b:cd:2e:73:92:89:64:88:61:0c:e0:6c:47:
                    50:04:e6:0f:f5:d4:7a:2e:52:1e:be:c3:03:a3:90:
                    d8:c7:2b:90:97:67:95:eb:f3:8a:36:3e:dc:80:2a:
                    98:f7:e7:02:50:7e:67:6e:e8:c6:03:c9:81:9f:8f:
                    87:1f:39:e8:a4:0a:67:44:d9:a3:9f:1a:77:42:86:
                    ad:49:d7:19:dc:dc:89:0f:46:ec:80:93:2c:ba:3f:
                    f2:a2:4f:d3:36:48:92:e2:1b:76:1f:f2:dc:f7:8a:
                    fd:6b:46:aa:b5:3c:c4:c4:bb:ae:5e:f9:84:bd:a4:
                    fc:a0:33:b6:fa:1f:95:f1:01:f7:2d:e0:2c:e3:18:
                    12:f1:df:c8:00:65:55:4d:f4:cf:6e:ba:00:49:4e:
                    3a:98:1f:ad:e2:15:20:8e:0c:fc:41:6c:21:e9:9b:
                    e1:e3:f0:a5:46:45:d7:3d:2e:c6:15:a9:7c:75:f4:
                    2c:f5:eb:90:68:a6:33:ae:29:b8:66:7d:e4:2b:53:
                    83:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B1:A4:5B:5B:0D:9B:6F:DA:01:F7:F7:16:9F:B9:12:3B:7F:35:3E
            X509v3 Authority Key Identifier:
                keyid:89:59:AE:3F:41:77:A3:CD:D9:66:8D:0C:5B:8A:89:F9:18:6B:5B:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/04ba26-f1b9-4285-b7fa-ee982a512f43/1/iVmuP0F3o83ZZo0MW4qJ-RhrW_w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:6d:3d:38:84:89:e6:33:cf:11:db:28:b0:6b:f0:ce:92:d1:
         f6:7a:06:e3:25:9a:75:f3:75:00:1f:1c:47:ec:ce:83:17:79:
         2b:b4:25:10:e5:55:72:4c:37:fd:52:fe:79:2b:50:92:7b:3b:
         7b:92:94:78:ec:b1:8b:cc:1e:5a:0e:60:dd:0e:1e:c0:42:2e:
         41:ea:a7:28:2b:36:bd:69:f4:61:d6:65:b1:a6:d4:8e:06:57:
         d4:e0:a7:94:5e:43:72:61:99:af:a9:72:c3:bd:c2:2c:0b:5e:
         07:b6:cd:fc:4a:ed:d8:fb:a1:b9:9c:ec:c2:ff:4c:2a:71:eb:
         07:23:49:55:f0:46:ff:5e:58:22:d7:c6:00:f0:17:cf:11:db:
         cf:af:0a:3a:bc:db:d0:64:97:b5:c8:91:7c:95:93:bb:ca:01:
         eb:56:a6:73:88:4e:5e:53:47:74:9f:f8:58:eb:1f:51:97:c0:
         72:bf:b4:ca:fa:54:23:9a:aa:2d:04:ae:b7:58:ed:0d:ec:93:
         45:41:b5:65:24:9c:92:2e:1a:85:06:15:e4:b3:f6:09:48:f9:
         e2:a9:04:9b:bf:ca:35:7d:13:7d:ab:53:b2:d9:5b:82:28:eb:
         86:ca:b9:93:4c:5a:f3:3b:78:aa:67:6b:08:a6:2e:b6:b6:c2:
         64:ce:c1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----