Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
File:                     I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft (raw, json)
Hash identifier:          LacS6fYqNGe+53Hs50EMJ0nwBZH5Zxt2A80+uMsqqcY=
Subject key identifier:   1A:78:B6:A1:EE:DB:02:B0:A8:2E:C2:40:E2:01:22:68:F6:56:49:F3
Authority key identifier: 23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14
Certificate issuer:       /CN=2347aaab2206c08128f543730064a145a3effa14
Certificate serial:       01962F74DD4122D7A712525F2195CD4727EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft
Manifest number:          14F6
Signing time:             Sun 13 Apr 2025 14:01:49 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:49 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:49 +0000
Files and hashes:         1: GdDoydsiseWesyFp8nfXLAwY-Ss.roa (hash: ZX3EqP0ya1H5H5fx2BO7+jv6fp5rUfEUzpZL5ygfDiA=)
                          2: I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl (hash: r+mYt7sutzL66motIBpaMoAXLijE3tXXn21sW7JTXsw=)
                          3: IKXrcUKwMlPG0eAi0Yyy4f8rN_E.roa (hash: k1m1X5cjV+X+s8K2eluUA+PEvYRc1/2CONci6dgq2xY=)
                          4: yujM9boXq2owCDALS6fBRuV-QS4.roa (hash: uBWZxd0MuVhnf/a/H4XCYeoko2cyqYwJN4ZzBnbQh88=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:dd:41:22:d7:a7:12:52:5f:21:95:cd:47:27:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2347aaab2206c08128f543730064a145a3effa14
        Validity
            Not Before: Apr 13 14:01:49 2025 GMT
            Not After : Apr 14 14:01:49 2025 GMT
        Subject: CN=1a78b6a1eedb02b0a82ec240e2012268f65649f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:61:77:3f:2b:8e:dc:b5:38:0a:ea:50:f7:22:
                    4b:63:d0:a2:cb:b9:a4:bb:22:83:35:32:d8:f1:69:
                    6b:c1:c3:64:a8:c3:66:97:0d:d3:a2:52:e1:cb:98:
                    4a:b1:31:a5:2c:19:ce:94:40:e5:9f:65:62:01:56:
                    49:67:cc:e9:ba:da:f1:4f:a9:a3:20:fa:3a:99:7e:
                    ba:6b:dd:d7:0e:56:54:6d:5c:1a:d1:70:1e:2b:2e:
                    6b:20:4a:30:21:8f:b3:02:8e:66:56:d7:f7:3a:d7:
                    23:8b:70:51:71:07:43:12:a6:a7:34:75:79:ee:4e:
                    2b:b7:3f:f1:f0:8e:31:5a:df:e2:5e:4f:3c:4e:cb:
                    98:6e:8b:d1:00:68:e8:38:a0:86:b9:8a:bb:ff:49:
                    76:3f:88:18:d9:ee:67:90:27:62:ec:21:b8:08:e6:
                    85:61:d7:46:b9:44:3f:73:d9:cd:fd:96:32:ca:7d:
                    98:b9:02:1d:c2:6c:c2:47:ec:b0:9d:87:39:d0:29:
                    23:59:81:ea:e9:6e:b6:97:2d:d6:3e:a3:90:66:31:
                    79:bf:32:55:b1:29:2e:af:c1:c4:42:9f:cf:44:c9:
                    42:74:2b:d4:b7:95:85:4d:4d:a0:fa:fd:bf:0b:ad:
                    7f:85:20:c6:d3:10:3f:63:88:fd:67:c0:70:cb:1f:
                    65:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:78:B6:A1:EE:DB:02:B0:A8:2E:C2:40:E2:01:22:68:F6:56:49:F3
            X509v3 Authority Key Identifier:
                keyid:23:47:AA:AB:22:06:C0:81:28:F5:43:73:00:64:A1:45:A3:EF:FA:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0eqqyIGwIEo9UNzAGShRaPv-hQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ef9f0d-d840-4371-adc4-75840661eaf5/1/I0eqqyIGwIEo9UNzAGShRaPv-hQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:95:92:fe:da:2e:8c:5d:3d:4d:56:67:61:cf:1d:ba:b0:4f:
         69:7c:e8:fb:37:9f:4f:df:50:7f:8d:52:d0:41:24:09:c5:64:
         8a:60:78:85:88:3f:06:ef:5e:bf:60:39:6d:6c:74:ae:87:45:
         83:f6:38:2f:9a:bd:d9:e8:fc:3a:41:0c:57:8a:7f:db:fc:99:
         28:bd:4b:cb:aa:e9:a7:50:fa:a0:6b:e2:bd:05:cb:50:c2:35:
         d5:a5:28:32:3f:d8:26:cb:3e:37:b6:5a:96:d1:1e:0a:d6:2a:
         c1:c0:b0:df:ea:ca:92:a2:7d:d9:f2:38:14:93:0a:2d:30:5c:
         dc:10:5d:9f:35:0a:e9:d5:76:56:1f:8a:a7:b5:05:4c:16:eb:
         e9:32:dd:df:22:10:75:54:b4:12:22:cd:16:af:f6:0b:61:e9:
         1c:ee:5d:81:24:9d:41:db:3c:f4:90:49:7d:d7:21:13:4f:f3:
         1d:ab:23:4a:2e:bb:ac:b9:f1:42:e1:0d:40:80:e0:16:49:ff:
         bf:09:97:c0:a6:8e:2b:cd:79:73:01:94:15:55:97:9a:4a:35:
         c9:25:19:d1:32:6a:59:5c:17:a8:1d:08:5f:d1:ab:c6:13:c5:
         e9:10:09:60:af:fe:ed:e6:d3:6d:dc:ec:d0:eb:74:98:0e:39:
         61:29:16:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----