Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
File:                     cLTaDxATrNthwveibRTE8N6CIuw.mft (raw, json)
Hash identifier:          IbgGOJNq9Lbp9XpYUG0P+veeeO79Fs8mebMOFHEwm5Q=
Subject key identifier:   88:5D:2B:C1:B0:A0:D6:47:51:75:DF:9B:0C:21:6B:87:99:4B:A8:EF
Authority key identifier: 70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC
Certificate issuer:       /CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
Certificate serial:       01962E6203F7B6AC7D13083984FBE195EDD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:37 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:37 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:37 +0000
Files and hashes:         1: F94-zZFEc6qh0jKnwFf7o1uXF7I.roa (hash: w7SpfiHOXF1SxdkUidpIylH68mEs/yNWYY/p77Td/KQ=)
                          2: cLTaDxATrNthwveibRTE8N6CIuw.crl (hash: LVPZLC6hdoNC+iQlJAXZbAkzvriDDR6+j8hUQ7gdJ3A=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:62:03:f7:b6:ac:7d:13:08:39:84:fb:e1:95:ed:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b4da0f1013acdb61c2f7a26d14c4f0de8222ec
        Validity
            Not Before: Apr 13 09:01:37 2025 GMT
            Not After : Apr 14 09:01:37 2025 GMT
        Subject: CN=885d2bc1b0a0d6475175df9b0c216b87994ba8ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ab:95:31:d3:97:57:16:23:84:66:60:9b:0e:
                    ac:93:e3:3b:9a:c9:e3:a7:bd:39:3b:39:12:4e:0d:
                    65:59:90:cc:a8:61:f3:78:ab:0c:b0:4d:1e:a1:f1:
                    86:9c:c1:07:b9:4d:06:c4:c0:89:aa:3a:01:ae:6f:
                    81:b4:ca:b0:f5:cf:37:63:48:18:14:0a:ba:ce:02:
                    e4:93:79:dd:58:8d:f2:a5:39:b7:17:28:49:f6:09:
                    c0:6c:b0:23:91:ac:84:44:0a:cc:a5:0d:a1:42:97:
                    b7:7d:ed:7f:e7:1e:65:3f:7e:24:ca:ee:bb:0f:c6:
                    4d:dd:99:9e:c0:4c:04:65:de:09:17:d3:4f:fe:ba:
                    2b:80:69:69:bd:92:d5:88:6b:59:17:06:72:3f:28:
                    e1:b6:79:bf:bd:77:f3:c3:1b:c5:c2:c2:3b:dd:d4:
                    bb:97:f4:d3:56:61:42:b5:cd:d6:dc:63:a3:99:22:
                    d8:dc:ce:a6:47:9d:5a:06:ef:37:29:f2:d2:15:e6:
                    56:69:f2:5d:ac:23:fa:f8:bf:53:b6:97:69:d9:b1:
                    2b:86:fe:af:df:8a:f4:94:37:bd:fc:27:09:63:26:
                    85:47:d1:a4:08:9b:4f:0a:d4:4c:25:8d:a3:ca:a0:
                    fe:5d:cc:d2:62:3a:c5:75:cf:02:f1:f4:b2:2e:27:
                    52:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:5D:2B:C1:B0:A0:D6:47:51:75:DF:9B:0C:21:6B:87:99:4B:A8:EF
            X509v3 Authority Key Identifier:
                keyid:70:B4:DA:0F:10:13:AC:DB:61:C2:F7:A2:6D:14:C4:F0:DE:82:22:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLTaDxATrNthwveibRTE8N6CIuw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/883fd6-c6b6-4ae1-a187-f3069ee590da/1/cLTaDxATrNthwveibRTE8N6CIuw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:08:2a:a5:2e:65:13:3a:0d:49:50:65:4d:67:86:38:43:78:
         9a:7f:91:60:90:2a:d0:d8:0f:bd:a4:73:17:78:b3:7a:2e:35:
         e1:f6:e1:86:e6:70:ee:14:7c:0b:1d:09:e5:99:8f:b9:a7:73:
         87:03:20:11:2a:34:83:7e:1c:ca:bc:4a:97:a1:10:38:55:61:
         40:f2:1b:11:c8:4a:5e:df:58:63:8b:13:7d:16:bd:86:c6:5a:
         df:fe:6c:93:97:04:2e:61:24:39:ad:59:0f:78:38:b7:4a:cf:
         e3:d0:f7:c6:90:b9:6c:c0:d8:c0:36:58:86:af:b9:91:69:17:
         b0:45:25:66:b6:d3:42:15:91:86:78:7c:43:1d:a5:bb:45:1b:
         14:6d:79:1c:eb:c5:77:29:9d:7a:0c:3a:80:4b:29:52:51:f1:
         e6:93:df:82:81:ae:2b:ec:63:f9:68:fb:65:16:ef:4c:01:97:
         38:09:f1:8b:87:22:86:63:b8:19:10:13:8c:6e:e0:e7:f0:f4:
         6d:e5:a1:dc:4f:8d:ba:b3:ef:4b:b2:fc:79:63:e0:db:02:43:
         77:5f:e7:c8:16:b4:11:3c:04:22:b6:92:a5:7c:9e:73:8e:c5:
         f0:fa:1e:b8:ba:36:15:2c:e3:8a:d2:19:15:36:89:e2:0a:4d:
         2e:58:5c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----