Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
File:                     iZJ3h0cqfL3Zff209Tt077O7vFs.mft (raw, json)
Hash identifier:          yUfU6Rnz8TcoaPghuIUObNroU9SkfMP02NnWBvKMvYw=
Subject key identifier:   2A:3C:77:71:1F:C6:7A:CE:06:F9:55:1B:36:2C:1B:C6:AC:7B:FA:C1
Authority key identifier: 89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B
Certificate issuer:       /CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
Certificate serial:       01962DF3E1BFCA3D5518CC2AD1DF9DF2EB06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft
Manifest number:          101A
Signing time:             Sun 13 Apr 2025 07:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:19 +0000
Files and hashes:         1: iZJ3h0cqfL3Zff209Tt077O7vFs.crl (hash: cc88JTSUHLc05JiC+7gJR0SOSV1hxhzbhAhxHPVDKpw=)
                          2: k_0z9yImMkkx7Q7hZaLKVoTRO74.roa (hash: bY1XGYbefYoSOVyj59OiTxL9N9Rlyyr/sbaOhEye3EE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e1:bf:ca:3d:55:18:cc:2a:d1:df:9d:f2:eb:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89927787472a7cbdd97dfdb4f53b74efb3bbbc5b
        Validity
            Not Before: Apr 13 07:01:19 2025 GMT
            Not After : Apr 14 07:01:19 2025 GMT
        Subject: CN=2a3c77711fc67ace06f9551b362c1bc6ac7bfac1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:0d:3f:be:a6:3f:c4:12:41:07:cf:91:70:
                    8e:45:e0:f5:3b:26:8f:4e:38:10:e0:d9:77:ea:ed:
                    7b:1a:e4:78:12:f7:de:03:8b:04:b2:22:47:1d:8a:
                    fa:7a:ba:65:a0:d2:6a:bd:fb:0d:a4:83:ef:47:3b:
                    d6:0f:56:86:dd:8f:22:f8:47:2d:c5:8a:b2:58:76:
                    98:a3:01:97:72:91:af:62:9c:94:f9:98:12:02:02:
                    cd:33:46:76:2a:10:6f:83:3c:a1:e5:e0:3b:ef:8b:
                    d2:df:da:c5:75:a2:7c:11:1b:97:e2:da:90:24:d8:
                    c4:31:3b:a5:2c:88:c8:92:6f:ff:88:ab:da:0b:a9:
                    5d:1d:56:4d:d1:47:1d:bd:cf:10:90:59:3e:53:72:
                    56:e3:7f:8b:d3:56:68:27:5a:b9:47:72:06:6f:0f:
                    e1:99:c2:f4:77:5e:f2:6d:3d:b8:19:6f:a9:70:2d:
                    60:b6:56:fd:cb:9e:eb:74:57:2d:50:2f:9e:d4:87:
                    fd:8c:09:68:db:1d:cc:67:43:b2:06:f4:52:ac:4a:
                    b1:a2:34:c3:bf:d4:7e:90:45:42:51:bc:cd:1e:28:
                    31:16:c3:f5:2a:ae:d6:63:fd:f8:35:b6:4f:ed:69:
                    0a:76:d8:d5:8b:e5:1d:e8:61:a3:e5:ce:02:8b:3b:
                    2f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:3C:77:71:1F:C6:7A:CE:06:F9:55:1B:36:2C:1B:C6:AC:7B:FA:C1
            X509v3 Authority Key Identifier:
                keyid:89:92:77:87:47:2A:7C:BD:D9:7D:FD:B4:F5:3B:74:EF:B3:BB:BC:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZJ3h0cqfL3Zff209Tt077O7vFs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/d20b8c-9fac-41f7-9e79-c410062d4d52/1/iZJ3h0cqfL3Zff209Tt077O7vFs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:8e:0d:8e:c6:7f:98:7d:17:00:27:db:e2:a7:a8:e9:bb:65:
         d1:1c:65:15:74:23:1b:0e:f7:33:15:e1:bb:ed:94:04:47:a8:
         09:4a:7f:cd:f1:e9:61:93:e0:1a:96:52:26:44:f2:6d:ab:d4:
         0a:8f:06:29:a8:d3:ed:a4:95:a6:ce:4f:3e:16:38:c2:39:24:
         7d:27:90:4d:bf:09:ef:7f:1f:29:0c:6f:4f:a0:90:8b:ab:ed:
         d5:0c:9c:e2:b3:e8:60:eb:5b:03:a7:28:50:05:08:83:92:17:
         63:7a:b8:3f:51:01:e9:0e:30:a1:da:13:20:f8:c1:65:03:b1:
         1a:25:6e:2b:21:1b:8b:de:96:92:e0:da:b4:e7:85:ef:6e:ce:
         90:49:75:89:0a:c7:68:08:38:de:6b:64:d6:59:20:eb:b7:80:
         ee:9b:f5:30:31:85:fb:c6:70:a3:15:c7:e3:22:59:e2:27:3d:
         9f:56:13:f8:bb:10:19:82:a3:76:9b:a7:48:6b:b6:03:11:60:
         16:a1:14:9b:b2:33:f8:97:7e:3d:80:a9:ad:17:68:81:1c:00:
         e2:89:e8:16:dd:a7:c2:96:4f:3e:ff:83:79:b1:ee:b0:d3:3b:
         de:29:fb:a7:34:99:2b:34:47:b3:4a:23:40:34:52:a1:8b:6d:
         22:ca:27:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----