Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft
File:                     ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft (raw, json)
Hash identifier:          sRIlQFgY7Ip8QNJV/uMaZjJw8lAG5S/MgUxk9AD6CBc=
Subject key identifier:   88:7A:B4:FB:FB:E9:21:A2:67:6B:44:2E:41:95:9E:BE:37:66:9F:BA
Authority key identifier: 8A:41:E2:F2:D1:45:2E:7C:4C:C0:7D:BF:A7:83:9D:58:DF:57:F2:18
Certificate issuer:       /CN=8a41e2f2d1452e7c4cc07dbfa7839d58df57f218
Certificate serial:       01962E995CFF3C50800491DAA6C8D458415D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ikHi8tFFLnxMwH2_p4OdWN9X8hg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft
Manifest number:          14E6
Signing time:             Sun 13 Apr 2025 10:02:04 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:04 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:04 +0000
Files and hashes:         1: ikHi8tFFLnxMwH2_p4OdWN9X8hg.crl (hash: acir9h4Nexl0kxU04cykAcrpQhoEp7DXxCFTqJFihfk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:5c:ff:3c:50:80:04:91:da:a6:c8:d4:58:41:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a41e2f2d1452e7c4cc07dbfa7839d58df57f218
        Validity
            Not Before: Apr 13 10:02:04 2025 GMT
            Not After : Apr 14 10:02:04 2025 GMT
        Subject: CN=887ab4fbfbe921a2676b442e41959ebe37669fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:62:5e:cd:13:d8:de:69:f9:ed:df:bd:1f:8a:
                    32:c0:4f:3f:5b:c2:92:85:58:f9:a5:4d:8b:65:4d:
                    fe:bc:14:f2:96:f8:0c:3a:ae:07:db:9b:f8:8e:0f:
                    58:71:4e:12:24:13:b2:f6:15:8b:b9:fd:b8:25:51:
                    c4:83:e9:f8:a8:29:35:a1:19:0a:87:59:ae:92:8f:
                    8a:13:0d:bb:ae:99:96:2c:f8:56:6f:aa:0f:15:5f:
                    c3:40:8f:f4:42:92:af:5a:58:77:ef:f6:2e:69:e8:
                    05:8b:f6:82:6c:96:4a:05:6d:32:ce:e8:95:29:d2:
                    ec:e2:3c:cd:4e:e5:f5:8b:71:21:4b:e9:51:a7:cd:
                    bd:63:ad:51:80:6c:e4:64:c5:1d:8e:40:5f:f1:ed:
                    3c:b7:95:f6:27:33:3e:d2:21:0b:5c:46:9c:e6:ce:
                    2e:32:da:ab:8d:f1:3a:e8:c0:91:d9:1f:19:8b:6c:
                    33:ac:53:5e:9c:8d:fd:d9:dd:32:45:5e:0d:84:49:
                    61:dd:f3:70:2f:25:99:7a:34:58:c9:0e:c6:a2:8c:
                    03:30:77:ac:14:03:68:c3:81:85:c0:39:6e:df:5f:
                    48:fd:9e:d9:72:5c:de:2d:3a:53:41:76:2b:94:62:
                    5a:99:bf:de:4e:74:c9:55:b5:5a:d3:6a:48:6b:4f:
                    0f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:7A:B4:FB:FB:E9:21:A2:67:6B:44:2E:41:95:9E:BE:37:66:9F:BA
            X509v3 Authority Key Identifier:
                keyid:8A:41:E2:F2:D1:45:2E:7C:4C:C0:7D:BF:A7:83:9D:58:DF:57:F2:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ikHi8tFFLnxMwH2_p4OdWN9X8hg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bf69c4-d64a-4340-9bf1-364854cbc0e8/1/ikHi8tFFLnxMwH2_p4OdWN9X8hg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:19:c2:06:86:63:f2:49:44:f9:df:ac:06:03:a5:1a:cc:39:
         a4:52:f0:33:7e:c9:a6:47:ab:b4:91:0e:03:95:24:4e:b7:d2:
         a5:f3:13:99:bf:85:c6:ec:cf:48:b6:97:1b:0b:de:87:b3:6c:
         a5:07:07:04:99:f3:06:72:d3:b3:70:03:ff:7a:f3:ef:2c:3d:
         13:75:9f:ef:3b:47:54:66:8a:a0:cf:bb:df:91:0c:d9:56:4a:
         50:11:c2:51:4a:44:20:8c:69:3e:eb:34:db:1a:81:82:d2:d3:
         f6:bd:ed:34:a1:a5:5b:67:c2:06:d0:ba:fc:30:ab:b0:b6:24:
         51:2d:dd:e0:35:d3:30:d8:a8:9a:88:57:65:87:2e:56:54:ab:
         ef:9a:0c:7a:3c:27:fb:76:e5:05:d6:91:77:e4:67:57:b4:50:
         9d:0c:f7:b3:df:71:4f:95:19:4e:1a:55:ff:f3:a9:c2:d1:32:
         ae:04:76:bb:0c:a3:5c:65:c0:5d:3d:1e:e3:8f:65:70:79:fd:
         57:5c:85:db:c3:ce:e8:3f:22:71:30:2b:2a:fb:49:74:16:27:
         18:6d:22:5a:62:0f:ff:42:84:a5:f0:e5:92:9f:44:78:b8:23:
         e6:90:9a:e3:dc:da:fd:ca:40:b8:ce:9f:33:9f:6d:15:a4:1a:
         ce:25:dc:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----