Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
File:                     IK7ciyobvW03BV7ADo5g9FiOEwU.mft (raw, json)
Hash identifier:          BaJXiXXRe0iiHpGULWT71TZHuYnP31L3gtgDk9rIQfs=
Subject key identifier:   22:30:E5:FF:BF:C7:DE:18:3C:23:9D:82:8F:FA:0D:E7:50:BE:83:F6
Authority key identifier: 20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05
Certificate issuer:       /CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
Certificate serial:       01962E2AC373C77665308A8208E1A209C222
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:16 +0000
Files and hashes:         1: 20Yy79DTSfilFFbqcJeVWxZcEUk.roa (hash: Ts6CpvaJSTki03QhEk4q4v0AnVBL0dLMnm27BuNB3Q8=)
                          2: IK7ciyobvW03BV7ADo5g9FiOEwU.crl (hash: rijI/Hf2nJkvIKaP7N3Q6vevKG5pyC6kOTIP7Lsu+x4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:c3:73:c7:76:65:30:8a:82:08:e1:a2:09:c2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20aedc8b2a1bbd6d37055ec00e8e60f4588e1305
        Validity
            Not Before: Apr 13 08:01:16 2025 GMT
            Not After : Apr 14 08:01:16 2025 GMT
        Subject: CN=2230e5ffbfc7de183c239d828ffa0de750be83f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7f:75:61:a0:ea:07:7e:3a:4f:01:e8:8a:8d:
                    25:d9:b5:0a:7d:0e:00:56:16:a2:2c:11:50:1b:dd:
                    bb:70:45:2b:03:a0:5e:5b:a9:dc:88:82:16:78:0f:
                    39:4d:3e:93:27:80:30:5f:90:aa:d8:91:50:f2:47:
                    c5:8f:73:21:67:8a:33:62:3a:8b:a6:fc:38:86:bb:
                    15:68:12:b3:85:1a:8c:2a:49:43:76:ae:fb:68:f5:
                    1b:75:01:06:3e:c7:3d:94:c0:9d:88:c8:43:2a:e7:
                    99:5f:91:35:af:35:e3:c8:bf:ce:63:3e:7b:40:c8:
                    b3:a5:3f:ce:f8:3a:8a:36:b4:d0:c3:9a:46:37:b0:
                    06:85:98:26:6d:57:71:bc:70:28:73:0c:a2:7c:d0:
                    e2:05:01:60:a6:f5:60:5b:15:65:ba:55:a5:37:73:
                    1e:21:ce:61:86:bc:d3:4d:98:cf:38:0b:41:cb:d3:
                    90:ab:62:98:86:af:c4:12:98:0d:35:d9:ad:ae:1d:
                    45:d7:a9:6a:64:73:05:18:7d:91:c5:5f:f6:c5:d6:
                    02:bc:bd:7f:d1:46:f9:db:22:19:87:0e:40:92:c8:
                    84:9b:51:ec:ec:16:68:c9:2b:21:e6:6e:6f:1b:50:
                    e5:80:73:70:c6:64:64:04:18:ad:e1:52:3a:87:d1:
                    45:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:30:E5:FF:BF:C7:DE:18:3C:23:9D:82:8F:FA:0D:E7:50:BE:83:F6
            X509v3 Authority Key Identifier:
                keyid:20:AE:DC:8B:2A:1B:BD:6D:37:05:5E:C0:0E:8E:60:F4:58:8E:13:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IK7ciyobvW03BV7ADo5g9FiOEwU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/feb15e-de7c-40a7-86d4-969d2539d0ca/1/IK7ciyobvW03BV7ADo5g9FiOEwU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e3:9c:29:45:9b:da:df:9e:6b:6b:9c:a2:ab:9d:c7:da:bf:
         4f:84:73:df:a6:13:8f:82:97:32:1e:b3:0f:c8:61:4d:25:a6:
         3f:c3:a3:f5:5a:70:01:40:cf:ef:dc:e4:51:32:59:05:e7:13:
         fa:69:fd:3f:ab:c5:4a:7a:1a:10:c8:d7:9d:12:e2:6e:1f:5a:
         0a:79:a8:28:72:50:af:0e:8f:81:00:c0:90:46:7a:28:87:7f:
         a2:9c:ec:e8:37:a6:7a:72:aa:b3:cc:57:90:58:05:17:0c:1f:
         a1:12:09:35:4c:6d:21:82:ed:e8:35:75:3c:97:5b:76:55:20:
         87:a9:36:07:1c:9b:79:f1:86:ad:88:ff:86:df:1e:6b:08:51:
         3a:0e:89:3b:3a:3c:69:e0:a9:61:85:c5:1e:ad:f0:ad:71:ea:
         22:45:1d:fb:8c:0b:6c:f7:a4:5a:e5:1b:46:04:d7:01:67:84:
         34:34:06:da:1c:8f:eb:ce:0d:7d:34:6f:ea:e5:5d:fa:72:f2:
         07:b5:04:7d:fe:9f:bd:81:a5:bc:f3:a5:2c:44:fb:3c:2d:6f:
         ec:60:ee:38:88:c3:03:97:c1:53:f3:5f:e9:57:9e:35:7a:96:
         9c:2b:6f:18:f4:3b:e1:0c:c8:33:26:19:6e:e3:4a:70:30:53:
         1e:3f:58:ad
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKsNzx3ZlMIqCCOGiCcIiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYWVkYzhiMmExYmJkNmQzNzA1NWVjMDBlOGU2MGY0NTg4
ZTEzMDUwHhcNMjUwNDEzMDgwMTE2WhcNMjUwNDE0MDgwMTE2WjAzMTEwLwYDVQQD
EygyMjMwZTVmZmJmYzdkZTE4M2MyMzlkODI4ZmZhMGRlNzUwYmU4M2Y2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtH91YaDqB346TwHoio0l2bUKfQ4A
VhaiLBFQG927cEUrA6BeW6nciIIWeA85TT6TJ4AwX5Cq2JFQ8kfFj3MhZ4ozYjqL
pvw4hrsVaBKzhRqMKklDdq77aPUbdQEGPsc9lMCdiMhDKueZX5E1rzXjyL/OYz57
QMizpT/O+DqKNrTQw5pGN7AGhZgmbVdxvHAocwyifNDiBQFgpvVgWxVlulWlN3Me
Ic5hhrzTTZjPOAtBy9OQq2KYhq/EEpgNNdmtrh1F16lqZHMFGH2RxV/2xdYCvL1/
0Ub52yIZhw5AksiEm1Hs7BZoySsh5m5vG1DlgHNwxmRkBBit4VI6h9FFDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCIw5f+/x94YPCOdgo/6DedQvoP2MB8GA1UdIwQY
MBaAFCCu3IsqG71tNwVewA6OYPRYjhMFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUs3Y2l5b2J2VzAzQlY3QURvNWc5RmlPRXdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mZWIxNWUtZGU3Yy00MGE3LTg2ZDQt
OTY5ZDI1MzlkMGNhLzEvSUs3Y2l5b2J2VzAzQlY3QURvNWc5RmlPRXdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mZWIxNWUtZGU3Yy00MGE3LTg2ZDQtOTY5ZDI1MzlkMGNh
LzEvSUs3Y2l5b2J2VzAzQlY3QURvNWc5RmlPRXdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYOOcKUWb
2t+ea2ucoqudx9q/T4Rz36YTj4KXMh6zD8hhTSWmP8Oj9VpwAUDP79zkUTJZBecT
+mn9P6vFSnoaEMjXnRLibh9aCnmoKHJQrw6PgQDAkEZ6KId/opzs6DemenKqs8xX
kFgFFwwfoRIJNUxtIYLt6DV1PJdbdlUgh6k2BxybefGGrYj/ht8eawhROg6JOzo8
aeCpYYXFHq3wrXHqIkUd+4wLbPekWuUbRgTXAWeENDQG2hyP684NfTRv6uVd+nLy
B7UEff6fvYGlvPOlLET7PC1v7GDuOIjDA5fBU/Nf6VeeNXqWnCtvGPQ74QzIMyYZ
buNKcDBTHj9YrQ==
-----END CERTIFICATE-----