Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
File:                     Iet_m1iVK56Ar897vboysmo00KE.mft (raw, json)
Hash identifier:          pRAmz2W3/8c4yp6H3OhpibOGBwDgdRK0M8YtYJtlDo4=
Subject key identifier:   EB:F9:FF:E3:80:F0:4C:88:7D:E6:DF:D7:E0:CA:79:A0:7B:9D:55:75
Authority key identifier: 21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1
Certificate issuer:       /CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
Certificate serial:       01962F74F8B8578A02D3C8ACCF784771730D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft
Manifest number:          11BE
Signing time:             Sun 13 Apr 2025 14:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:57 +0000
Files and hashes:         1: Iet_m1iVK56Ar897vboysmo00KE.crl (hash: e9SbJNAZvPYHS9JMLYka/fHIF0536cEkA6vopKnJZ+g=)
                          2: awEUUsb69K1CqabOYZXpO61MCTg.roa (hash: 9PPvHVQ3Mjg4T1Rer/rBY6hN8ex1RSBq3SwkRV1OUrQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:f8:b8:57:8a:02:d3:c8:ac:cf:78:47:71:73:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21eb7f9b58952b9e80afcf7bbdba32b26a34d0a1
        Validity
            Not Before: Apr 13 14:01:57 2025 GMT
            Not After : Apr 14 14:01:57 2025 GMT
        Subject: CN=ebf9ffe380f04c887de6dfd7e0ca79a07b9d5575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ee:87:6b:9e:33:3e:9c:7e:ba:65:0c:8f:3d:
                    aa:27:40:71:b1:b3:fa:fa:76:b0:7b:1e:ce:66:70:
                    59:78:e5:d5:74:21:6e:fb:28:2f:16:bd:a5:d3:aa:
                    12:67:61:0d:5b:26:66:84:6a:f5:4d:cd:df:cf:6f:
                    13:68:60:a2:0c:34:ba:3b:07:77:d8:bc:bb:4a:0f:
                    2b:80:22:89:21:96:0e:5f:c1:ab:4e:08:2b:e3:9e:
                    64:bb:32:20:ce:7d:c2:d6:b0:9f:3d:be:9d:fd:e2:
                    51:c8:b4:3e:0f:95:5d:4c:95:ef:ae:0e:4a:01:7f:
                    e5:b2:c3:dc:75:0f:5c:66:11:a1:64:5c:09:ca:4e:
                    40:ab:85:75:cf:b6:16:c0:73:17:9d:21:6b:4b:5f:
                    df:39:0e:d9:7e:5b:6c:b5:ed:53:ae:37:4d:43:c6:
                    2f:9b:ee:d7:8b:05:20:aa:fd:2a:72:9b:b8:82:6a:
                    1d:5e:d1:b3:e5:ea:be:6d:1c:df:56:41:67:09:01:
                    41:45:16:2d:a4:a5:19:a6:5c:43:23:b6:92:91:69:
                    7d:a5:28:8e:67:31:c0:c4:6f:c0:4f:c2:4d:86:71:
                    a7:19:eb:c9:e6:64:4d:a8:17:79:51:df:76:26:90:
                    12:27:25:68:82:eb:44:f1:c2:4d:46:37:77:9a:e9:
                    da:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F9:FF:E3:80:F0:4C:88:7D:E6:DF:D7:E0:CA:79:A0:7B:9D:55:75
            X509v3 Authority Key Identifier:
                keyid:21:EB:7F:9B:58:95:2B:9E:80:AF:CF:7B:BD:BA:32:B2:6A:34:D0:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iet_m1iVK56Ar897vboysmo00KE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/d6db46-85b1-420c-8ce7-f7dabb0d2787/1/Iet_m1iVK56Ar897vboysmo00KE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:46:2d:fc:68:4d:79:27:79:10:5b:7d:23:a6:6d:b4:2f:06:
         8e:1f:12:a2:99:e1:55:e8:d5:c0:20:9a:50:30:07:7f:36:d6:
         a9:43:7d:ec:ca:9c:e3:7a:df:9f:2d:06:69:53:ff:ab:40:f9:
         f9:ed:9a:eb:07:fe:73:e7:b7:3b:4f:70:28:d9:e0:03:83:d5:
         19:65:fd:53:e2:11:08:99:07:5e:7a:95:91:ec:84:71:47:42:
         04:d9:90:a9:44:f5:d3:13:d4:5c:cc:7d:3e:40:ef:c9:53:98:
         8f:59:3d:83:cb:a7:7d:11:fc:f0:dc:10:b4:90:4c:df:b0:3e:
         b5:e3:65:91:c6:d9:f4:28:dd:9b:d6:81:ba:63:5d:7b:af:af:
         1e:3c:81:b3:f2:1f:2a:4d:4e:8f:42:de:e7:27:e0:bf:cd:c4:
         14:dd:89:75:11:81:48:c7:20:f7:f5:4a:af:29:db:cd:e0:f4:
         b4:ee:e8:cf:06:03:98:6c:9a:02:6d:6c:bb:d0:7b:62:01:6e:
         e0:ca:b4:02:a1:eb:d1:03:2a:a9:ec:da:f0:87:e2:58:e2:de:
         04:23:fc:3f:df:a9:53:82:6e:7f:7b:80:b4:66:ee:6d:c6:6b:
         8d:7c:7b:c8:fc:29:ed:ae:e7:bf:da:ef:df:ea:8c:3e:e2:7c:
         92:3d:ce:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----