Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
File:                     iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft (raw, json)
Hash identifier:          rtaYh+VhmPZWiqJRY/x4NOdcDgxBbcYsEzlrIZkA9/w=
Subject key identifier:   E1:B5:53:4A:E9:08:F2:66:92:7A:B4:D8:66:70:50:3E:FB:36:EC:4F
Authority key identifier: 88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16
Certificate issuer:       /CN=88e719f426793b1e9063771460abd311a3dff116
Certificate serial:       01962F068E08F61073D2C47231BEBEDE28AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 12:01:20 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:20 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:20 +0000
Files and hashes:         1: 2JOqb_FcM3JCaikWzh1QzLM3NNs.roa (hash: isQtSQoVI4VnIJhK4p6fvX5w7lFtKPVqkwJW/rfKCwA=)
                          2: KkqNZ54Qewj5mCBLo3rtzCSFt7g.roa (hash: Rbv/KvRW9C13yYdCBXyUxqLUAuWNRC3szrxFy+NiiA8=)
                          3: iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl (hash: rSw1ovvbHpTAE0rjXMK3s46oYVCdM7lSrjPL5CFQAck=)
                          4: soZKqGzihNQNfxzcrDh_Qn-1Tnw.roa (hash: +H581vOHkrLuu+UEmJR0K8H+S0wh9yACSCN32HI4jio=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:8e:08:f6:10:73:d2:c4:72:31:be:be:de:28:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88e719f426793b1e9063771460abd311a3dff116
        Validity
            Not Before: Apr 13 12:01:20 2025 GMT
            Not After : Apr 14 12:01:20 2025 GMT
        Subject: CN=e1b5534ae908f266927ab4d86670503efb36ec4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5f:5c:a5:51:ed:ac:d1:04:10:1f:a1:a5:d9:
                    cf:fe:03:8d:05:66:a5:3b:b8:b4:4e:6e:de:00:32:
                    57:3c:69:01:a8:e8:95:13:4f:97:52:41:63:fb:d7:
                    df:8b:85:c7:e1:54:af:25:c9:f8:32:a2:6e:7c:ed:
                    02:61:26:2a:7a:d2:72:15:a3:51:2c:67:ae:c9:6d:
                    e8:1f:71:30:d4:87:f2:fd:5d:c1:71:a8:91:60:79:
                    4a:f9:16:79:8a:a3:6e:7a:75:7a:34:a6:33:64:97:
                    be:8d:cf:4d:1b:67:ae:cb:16:9b:70:fc:f5:40:66:
                    0a:85:4c:39:40:54:8d:9a:04:71:3d:e2:eb:1c:2a:
                    3f:84:a5:8c:3a:7b:8c:03:fa:de:ab:fb:75:8f:b0:
                    f2:a8:e2:28:99:d8:06:3f:77:a8:3b:bf:91:08:aa:
                    ea:fb:53:52:a1:4c:5a:4c:2f:af:61:3e:c0:f7:39:
                    63:b6:b1:27:c8:e7:2a:f7:9b:1b:c7:cc:06:0d:56:
                    12:84:18:17:ad:c5:65:5a:dd:54:6d:a1:78:fb:16:
                    f7:f5:a3:79:29:ce:31:33:1c:4b:8f:0f:7f:15:06:
                    ef:8c:8e:08:f2:ff:ef:b4:ae:5a:97:7c:88:6c:f7:
                    2f:9e:51:96:bb:c6:01:d9:54:c3:ae:9c:9b:40:d9:
                    42:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:B5:53:4A:E9:08:F2:66:92:7A:B4:D8:66:70:50:3E:FB:36:EC:4F
            X509v3 Authority Key Identifier:
                keyid:88:E7:19:F4:26:79:3B:1E:90:63:77:14:60:AB:D3:11:A3:DF:F1:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/00d45d-5e48-458d-92f7-ae52e156b77e/1/iOcZ9CZ5Ox6QY3cUYKvTEaPf8RY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:91:10:a0:25:81:f2:22:52:86:a5:cc:b5:37:52:cb:84:67:
         ee:ee:c4:a9:d7:61:6f:bf:59:dd:f6:4f:ea:44:5d:9c:f1:c8:
         38:55:52:20:55:03:29:7b:a0:14:5a:00:0b:26:9a:bc:1c:aa:
         1e:38:1c:ac:2e:60:95:d4:4d:71:bd:ea:68:40:61:72:11:43:
         98:c1:00:cb:e4:60:28:24:3e:b4:10:88:ac:77:a5:1b:6e:ee:
         e0:28:f9:d0:7d:98:3f:58:f9:02:5a:66:17:80:72:67:b4:11:
         22:e5:d5:9b:5a:be:17:4c:d2:94:f2:b9:a2:6e:ad:d7:83:56:
         23:02:12:94:85:51:72:4e:56:cc:2d:cf:5a:3d:69:ee:a4:cb:
         8d:d7:db:ea:57:ca:0e:96:b1:cd:a3:d7:4d:c2:20:89:9a:60:
         c4:f5:00:29:73:9f:d5:32:5c:85:bb:e7:76:9c:5c:af:01:d1:
         22:b9:d5:b9:da:4e:c6:b0:aa:b3:fe:76:fe:0b:15:86:ed:93:
         3b:8f:d0:57:51:f6:da:3e:cb:50:af:de:df:ff:b4:06:69:cc:
         7e:92:bb:6e:a2:e4:de:38:51:40:47:3c:3a:8d:01:fd:82:d1:
         84:14:9a:b8:b2:a7:84:f7:db:9e:1e:27:93:41:5f:50:69:7a:
         52:c1:27:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----