Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
File:                     88iZC9bpMHET6DgyxpFf2lys_C8.mft (raw, json)
Hash identifier:          LkMcU9suB+oSWUYcLaRMs4k4mkNEywHZ15eo8YE9Bmk=
Subject key identifier:   B9:C7:50:47:A8:DC:F9:B3:B7:E0:72:B5:F9:29:BC:BB:D4:74:4B:0F
Authority key identifier: F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F
Certificate issuer:       /CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
Certificate serial:       01962DF3B06FA0644915017E8BFFCD46FE34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft
Manifest number:          14E9
Signing time:             Sun 13 Apr 2025 07:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:07 +0000
Files and hashes:         1: 88iZC9bpMHET6DgyxpFf2lys_C8.crl (hash: eYmC0M6mD6NNU9sY5ShaSLowqdUoULD7iF52tcQp4pM=)
                          2: ic2AvQV4fn5mQGurv_9LydC-BbI.roa (hash: mD0dAfaF87izkBorR76KrAgNEqpqvPq8C6YXxT1+QYI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:b0:6f:a0:64:49:15:01:7e:8b:ff:cd:46:fe:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3c8990bd6e9307113e83832c6915fda5cacfc2f
        Validity
            Not Before: Apr 13 07:01:07 2025 GMT
            Not After : Apr 14 07:01:07 2025 GMT
        Subject: CN=b9c75047a8dcf9b3b7e072b5f929bcbbd4744b0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ca:bd:6a:bf:57:b2:5a:3f:d7:1c:58:d9:4f:
                    f9:52:b1:37:d6:62:2b:55:2e:4d:8e:19:99:2c:b0:
                    02:03:9d:24:d4:a1:11:aa:59:25:97:77:6d:62:04:
                    8d:e0:bc:8d:fb:02:83:dc:f7:17:cd:13:d4:32:38:
                    1e:17:83:50:20:b1:91:ea:53:0f:28:d2:17:e4:46:
                    42:93:c4:71:8d:95:ff:f4:2c:4d:66:da:dd:b2:3f:
                    28:a1:5b:1a:48:18:59:83:5f:27:3e:f9:28:59:b4:
                    4f:04:21:87:98:df:f6:74:b3:c0:9c:dc:c3:46:96:
                    1c:86:cb:e9:ea:bd:36:37:29:ca:33:49:19:fa:cd:
                    42:3f:c9:b8:4e:49:8c:bf:2f:04:9c:a6:c0:58:8e:
                    ef:8c:f6:a4:d3:cf:f6:7b:f0:b1:d5:be:eb:5b:01:
                    87:9c:a8:52:e3:da:43:59:a8:fc:f9:42:5e:0d:42:
                    6a:0a:9c:cc:53:1e:62:be:04:97:d6:36:f4:e6:f0:
                    9c:de:9c:29:92:3e:3d:af:b2:55:53:55:16:55:7e:
                    3f:6a:2c:76:ee:0c:0b:78:33:96:73:a0:0c:fd:bb:
                    67:f8:b3:82:17:0a:80:d9:83:56:ac:ac:18:25:df:
                    62:f2:cf:f6:dc:69:be:45:f4:9d:a2:18:16:52:7f:
                    05:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C7:50:47:A8:DC:F9:B3:B7:E0:72:B5:F9:29:BC:BB:D4:74:4B:0F
            X509v3 Authority Key Identifier:
                keyid:F3:C8:99:0B:D6:E9:30:71:13:E8:38:32:C6:91:5F:DA:5C:AC:FC:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/88iZC9bpMHET6DgyxpFf2lys_C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fd73d8-154a-40ce-aebc-e889a6e6beac/1/88iZC9bpMHET6DgyxpFf2lys_C8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:46:35:87:28:dc:0e:02:10:5d:cc:27:26:aa:52:b4:88:73:
         07:38:b7:a7:63:31:1e:ef:85:f6:92:ad:18:94:c3:08:22:e8:
         81:71:4b:be:b4:ad:d6:3c:f1:64:17:d4:b1:b4:ba:da:73:69:
         60:0e:be:a9:30:e2:61:d0:19:94:d8:c0:5d:ce:1c:1e:db:de:
         72:48:2f:f9:ea:8f:39:44:52:29:99:34:b3:02:ce:ab:d6:bf:
         fb:2c:30:35:f0:d5:e5:90:a1:cc:92:fe:0d:05:d7:85:41:df:
         f7:6b:38:6c:6b:b6:2b:d2:0e:ec:f2:6f:44:24:61:bc:c2:6c:
         1c:49:33:36:50:e5:d0:42:1f:1d:0d:64:8b:14:a3:8f:f3:5a:
         16:c5:b9:8d:13:ce:8f:6a:23:d8:0f:97:eb:e5:60:a0:4a:de:
         69:05:f0:15:97:08:6b:55:42:6c:b0:62:d1:6f:7d:f6:f5:be:
         e0:c2:88:4e:cb:40:22:de:01:c0:e4:e3:f2:e3:82:ae:1f:22:
         a6:2b:81:0f:ec:22:2f:be:78:21:5a:c5:d4:7d:37:e7:97:82:
         3e:f8:d9:f6:d3:0f:92:4e:ef:ef:c2:a9:e3:04:cb:70:96:e6:
         be:73:ef:d1:e8:ea:3a:6d:cf:fc:30:10:7b:c5:85:e7:ad:c5:
         60:d3:4c:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYt87BvoGRJFQF+i//NRv40MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzYzg5OTBiZDZlOTMwNzExM2U4MzgzMmM2OTE1ZmRhNWNh
Y2ZjMmYwHhcNMjUwNDEzMDcwMTA3WhcNMjUwNDE0MDcwMTA3WjAzMTEwLwYDVQQD
EyhiOWM3NTA0N2E4ZGNmOWIzYjdlMDcyYjVmOTI5YmNiYmQ0NzQ0YjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sq9ar9Xslo/1xxY2U/5UrE31mIr
VS5NjhmZLLACA50k1KERqlkll3dtYgSN4LyN+wKD3PcXzRPUMjgeF4NQILGR6lMP
KNIX5EZCk8RxjZX/9CxNZtrdsj8ooVsaSBhZg18nPvkoWbRPBCGHmN/2dLPAnNzD
RpYchsvp6r02NynKM0kZ+s1CP8m4TkmMvy8EnKbAWI7vjPak08/2e/Cx1b7rWwGH
nKhS49pDWaj8+UJeDUJqCpzMUx5ivgSX1jb05vCc3pwpkj49r7JVU1UWVX4/aix2
7gwLeDOWc6AM/btn+LOCFwqA2YNWrKwYJd9i8s/23Gm+RfSdohgWUn8FKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnHUEeo3Pmzt+BytfkpvLvUdEsPMB8GA1UdIwQY
MBaAFPPImQvW6TBxE+g4MsaRX9pcrPwvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODhpWkM5YnBNSEVUNkRneXhwRmYybHlzX0M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mZDczZDgtMTU0YS00MGNlLWFlYmMt
ZTg4OWE2ZTZiZWFjLzEvODhpWkM5YnBNSEVUNkRneXhwRmYybHlzX0M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mZDczZDgtMTU0YS00MGNlLWFlYmMtZTg4OWE2ZTZiZWFj
LzEvODhpWkM5YnBNSEVUNkRneXhwRmYybHlzX0M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkEY1hyjc
DgIQXcwnJqpStIhzBzi3p2MxHu+F9pKtGJTDCCLogXFLvrSt1jzxZBfUsbS62nNp
YA6+qTDiYdAZlNjAXc4cHtveckgv+eqPOURSKZk0swLOq9a/+ywwNfDV5ZChzJL+
DQXXhUHf92s4bGu2K9IO7PJvRCRhvMJsHEkzNlDl0EIfHQ1kixSjj/NaFsW5jRPO
j2oj2A+X6+VgoEreaQXwFZcIa1VCbLBi0W999vW+4MKITstAIt4BwOTj8uOCrh8i
piuBD+wiL754IVrF1H0355eCPvjZ9tMPkk7v78Kp4wTLcJbmvnPv0ejqOm3P/DAQ
e8WF563FYNNMVQ==
-----END CERTIFICATE-----