Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
File:                     iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft (raw, json)
Hash identifier:          GIm4UJFyowLL6n1hsls9uCyGUyURNUM+nmCocPXYKUM=
Subject key identifier:   55:51:49:34:08:01:93:F2:D1:7B:14:DD:CC:24:12:96:95:F6:70:05
Authority key identifier: 88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07
Certificate issuer:       /CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
Certificate serial:       01962E98E2ED5C692C46AD4E33EEEF35FCB6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 10:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:33 +0000
Files and hashes:         1: KYtWtlgqE5B9oPVpa5XtMWrTy2s.roa (hash: S7OWPBmD/em3aOMLq183MKVqtbhQIKvOUTkiCEiDOio=)
                          2: iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl (hash: uE94hNGh6vfCW/UfxOoIhAhStLIxiMGQdF0+g4dtC2U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:e2:ed:5c:69:2c:46:ad:4e:33:ee:ef:35:fc:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8888818c4ecf1d5deb4ea93667470a7a114d9a07
        Validity
            Not Before: Apr 13 10:01:33 2025 GMT
            Not After : Apr 14 10:01:33 2025 GMT
        Subject: CN=55514934080193f2d17b14ddcc24129695f67005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:34:6d:76:65:32:da:77:92:b4:ad:4b:f0:02:
                    f1:b7:2a:8e:3d:10:8c:d8:d1:99:7e:56:4e:ff:fb:
                    51:45:48:8e:00:fc:7c:fc:c1:e0:9c:79:30:c1:95:
                    0d:11:07:be:86:f7:db:3c:ef:d9:55:33:74:27:0e:
                    f9:ee:83:7a:08:67:04:e7:c9:24:80:16:13:d3:13:
                    df:c5:06:93:f4:62:e9:0f:5a:49:bc:d4:b9:e2:95:
                    f2:9a:14:9b:1e:7e:09:e2:38:2f:2c:75:03:6a:db:
                    71:36:61:b1:fe:e2:2a:f2:fc:5c:f5:91:2d:e3:ae:
                    36:5d:57:30:ed:f0:a7:6b:2a:ea:0c:12:c9:c6:eb:
                    ef:f4:a1:0a:1c:fc:d5:46:8b:ac:df:d4:a6:57:e2:
                    14:c8:99:71:0f:1d:5c:06:34:ba:c2:8f:32:ea:c7:
                    fa:06:26:dc:05:13:ba:5f:b1:dc:15:fd:e6:33:2c:
                    d4:6c:e9:69:af:a5:cf:80:fc:c5:ac:f0:72:ab:cc:
                    4c:92:16:0a:a4:92:9d:7d:43:df:ea:35:57:85:0b:
                    75:cc:2f:f8:8e:8f:5d:15:2e:12:f3:18:5d:b0:b8:
                    0c:42:8a:9c:0e:3e:2b:cf:ee:bc:8c:b7:d3:7b:0d:
                    b0:8a:c6:68:0d:05:08:6d:f3:ae:3d:90:6f:91:dd:
                    55:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:51:49:34:08:01:93:F2:D1:7B:14:DD:CC:24:12:96:95:F6:70:05
            X509v3 Authority Key Identifier:
                keyid:88:88:81:8C:4E:CF:1D:5D:EB:4E:A9:36:67:47:0A:7A:11:4D:9A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iIiBjE7PHV3rTqk2Z0cKehFNmgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/85/c9ebb2-851d-4578-a879-c29bf25d266e/1/iIiBjE7PHV3rTqk2Z0cKehFNmgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:2d:32:1e:a0:53:cb:12:b3:88:87:1a:59:5f:fa:c7:9d:5a:
         92:84:e1:94:e3:06:6d:de:00:0f:ff:4e:47:f7:91:61:aa:f2:
         7e:12:5c:53:5b:5b:47:24:28:d0:e8:82:28:93:8a:5d:a5:12:
         c4:07:23:35:e1:9a:79:4b:94:ff:27:e3:9c:ab:0f:6b:57:f9:
         43:cb:ca:bf:16:bb:ba:1f:55:c1:17:a1:6e:da:11:41:ba:15:
         e5:71:65:eb:b5:f0:1e:41:d6:60:2c:d8:fc:b7:8e:33:f6:64:
         47:7b:f9:6a:52:e2:f4:78:e3:ca:9b:a8:06:ec:be:c2:18:88:
         dc:fe:68:bc:de:9e:5f:84:c3:92:cb:ba:6f:13:bb:85:54:b6:
         01:06:17:f4:4c:19:0e:13:a2:02:1c:cb:80:2c:ff:c9:b1:d0:
         01:af:76:46:a5:14:14:46:cf:ef:47:51:e9:1c:e7:6a:d5:97:
         d0:55:5e:13:90:32:a7:b9:59:d6:2f:a5:90:c2:59:06:17:a3:
         97:14:bd:ea:da:60:d8:7c:1c:b5:2d:c0:49:35:cc:b2:86:bf:
         cd:0e:3f:9e:5b:e2:56:84:97:3c:51:72:cd:59:ad:e4:43:ef:
         78:0c:0d:4e:b1:02:45:89:85:06:59:f5:69:84:9a:7b:bb:0c:
         79:2f:f3:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----