Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
File:                     I9hEjFy5A5jkwoXOycD0dmrJMd8.mft (raw, json)
Hash identifier:          KCCwz8nhTZ+W9JjQWxkM2giGwGPgz3B8UUkhKWUm5/E=
Subject key identifier:   08:1A:5B:F1:43:AF:2C:81:AC:FB:A0:F2:E9:EA:F3:C9:E9:6C:59:53
Authority key identifier: 23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
Certificate issuer:       /CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Certificate serial:       01962F3DA55D64654ABF0949E81089BD185E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:31 +0000
Files and hashes:         1: 0R9hBHck9goXLckWs83vfzxcFiw.roa (hash: obv3yvxGMmGg4JBfXp95o/8uj2ocziHcF4Wd0qYKBC0=)
                          2: 2ZLinOVEwJGKFicgX--T-MLOzJk.roa (hash: c5tPFVJAjAdrD/biJVfWeRiWObKwMs1MmzB2QE9giIE=)
                          3: 9unXgezNMxzwNg4bzifOYAuCs0o.roa (hash: g4XwuMrRwxeGeiZBFLLb9s8Q1VZBOHGp5ebHoGbs+mc=)
                          4: I9hEjFy5A5jkwoXOycD0dmrJMd8.crl (hash: pgaPw1bmfO5kGmVcGYVs7x+K51mm5O2oZNs1xMVWX/4=)
                          5: dK0aI2R_s129Y-75FIrpBYL1yE8.roa (hash: R66OS8lUtMZTTbo9eo/xMi56yXXva1T37X0KuifJS+s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:a5:5d:64:65:4a:bf:09:49:e8:10:89:bd:18:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
        Validity
            Not Before: Apr 13 13:01:31 2025 GMT
            Not After : Apr 14 13:01:31 2025 GMT
        Subject: CN=081a5bf143af2c81acfba0f2e9eaf3c9e96c5953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:77:67:b7:6f:fc:de:4b:56:21:73:1d:af:8e:
                    6e:f4:3b:74:95:87:5d:48:72:61:16:61:01:87:90:
                    09:a7:8e:f2:c9:0d:cc:a9:5d:5b:01:e6:98:33:3b:
                    82:e3:8b:b8:83:f3:b5:62:d5:b8:89:02:36:a0:54:
                    31:42:7f:00:f5:ba:51:f6:89:2a:60:c1:d4:3c:f0:
                    e3:08:ad:e2:08:bd:28:70:66:cc:ab:cf:7b:c7:5a:
                    dd:40:07:9e:07:65:88:ce:b0:fa:de:d4:2a:23:53:
                    6b:24:92:bf:8c:43:8f:1b:90:34:af:32:0e:81:77:
                    b3:c5:e9:27:9a:2a:9c:b0:7b:56:92:94:1a:f9:d8:
                    ff:2b:c3:66:7a:42:3d:d6:c1:6e:c5:09:41:83:16:
                    19:03:cf:b1:dc:d4:1b:2b:0d:34:64:48:32:af:49:
                    ac:5f:b6:9a:82:aa:5c:3c:31:ea:03:3e:41:00:bf:
                    f7:d4:55:66:73:f1:d1:43:d2:a2:61:2f:85:be:e9:
                    cd:52:77:5c:2e:54:b6:48:d1:bb:ad:1f:3a:c8:36:
                    10:c9:20:a3:b2:9f:8c:d2:76:2e:f1:5c:c0:09:52:
                    ca:5b:d8:df:4f:f2:69:3a:50:ed:50:cd:66:df:3c:
                    88:8d:e8:28:0b:54:53:86:59:3a:f3:8e:72:80:0b:
                    49:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:1A:5B:F1:43:AF:2C:81:AC:FB:A0:F2:E9:EA:F3:C9:E9:6C:59:53
            X509v3 Authority Key Identifier:
                keyid:23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:e8:96:74:08:e1:cd:8e:16:25:53:c5:8c:f9:d9:bd:79:f9:
         5e:fb:18:92:e2:33:93:df:ea:e2:7f:d5:85:f1:3f:ae:83:fc:
         dc:80:dc:92:61:4a:34:99:96:b5:b5:60:ce:2c:b7:b4:cf:26:
         c1:58:86:94:ba:cc:c4:2c:1d:22:51:75:73:bc:fa:eb:b4:dc:
         f1:c4:74:a0:5b:74:9e:89:49:7c:d6:b6:e9:f6:93:4e:a3:3d:
         bc:90:d1:e0:90:45:b9:77:df:d5:fd:8a:5d:20:e7:7c:0d:d8:
         bc:3b:3c:19:5d:4d:12:9c:21:6f:da:88:c2:03:fc:69:6a:0b:
         7b:65:82:22:79:ee:c4:e5:38:b1:f2:e9:bc:1b:d0:64:fa:0c:
         4d:9f:e4:e7:de:d2:2c:be:82:df:9c:c4:83:51:a3:8b:9a:15:
         59:8c:bf:f1:d7:bb:df:19:4d:15:07:2c:cc:74:6d:a1:01:22:
         f5:25:ce:09:d6:f7:f3:95:41:b2:e7:40:52:34:d6:fc:3d:7b:
         c5:99:c7:9c:4b:3e:fc:ad:5d:1f:3d:df:ee:ba:50:d0:d4:b5:
         69:e9:4a:60:2d:14:88:f1:c0:d9:2f:2d:f8:02:84:ad:65:d7:
         3e:aa:56:f6:d0:6e:ed:08:b6:d7:08:43:e3:cb:ee:43:2c:7f:
         f0:44:00:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----