Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
File:                     1IVV-aUnJ_a89xXLR1CipKbDUWE.mft (raw, json)
Hash identifier:          b5mOuALG080sn8+HELFA+ajqOjTvf1uzpfM2p6AGO+Q=
Subject key identifier:   7B:DD:1A:68:82:0B:AB:F7:28:13:04:F3:95:D0:EE:A5:6F:CD:ED:93
Authority key identifier: D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61
Certificate issuer:       /CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
Certificate serial:       01962E61F983490B94F03E0566F4A60CA0B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:34 +0000
Files and hashes:         1: 1IVV-aUnJ_a89xXLR1CipKbDUWE.crl (hash: i/hpfsz1/2iLNALhlc2uvc1QW5RsvpH71xxAaGPuwE8=)
                          2: 65gUyds3oCUaNZo7VomV4lVYduk.roa (hash: 8+W1K2P2HsFJ7cNqOL/cIv584zWJzkLDjqA3phgWH8k=)
                          3: q0f1k5cWGTNBB6sr_OG4msQd7iY.roa (hash: 0ETx8QIfDrUgHdlw++HTyLQZKu+EyPer5KYC9N7tzIc=)
                          4: u_9bExtD3dKmpG7MbV9XCNNSbhc.roa (hash: A6Ah4cscvQSZmmj47ZDhKi6/GjDHBt3LAd3FqHRi8Dg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:f9:83:49:0b:94:f0:3e:05:66:f4:a6:0c:a0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d48555f9a52727f6bcf715cb4750a2a4a6c35161
        Validity
            Not Before: Apr 13 09:01:34 2025 GMT
            Not After : Apr 14 09:01:34 2025 GMT
        Subject: CN=7bdd1a68820babf7281304f395d0eea56fcded93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0a:9f:38:96:6d:18:bd:b8:cf:15:d7:99:a5:
                    8a:69:f3:4e:09:7b:59:f1:a7:24:f6:6e:0d:f2:98:
                    fa:a7:5c:7f:fb:55:57:87:3f:0c:25:2c:3e:5f:fc:
                    08:83:95:3b:91:5c:3f:6f:58:44:40:70:c2:e6:1c:
                    05:ca:14:dc:e6:13:63:7b:21:0e:9f:6b:0c:36:08:
                    d6:4b:31:64:ba:73:e2:bc:c1:e7:cd:93:be:28:e1:
                    2a:c4:de:68:66:39:03:70:0e:77:7e:19:f4:1e:ac:
                    a2:2c:16:a7:e4:80:78:6f:aa:eb:08:2d:78:69:7e:
                    bf:4c:1e:94:eb:94:c9:9c:35:60:ee:f3:e8:e6:9c:
                    b7:84:39:a0:e2:03:49:bf:aa:ce:5f:ba:b8:55:bc:
                    b5:4f:95:b1:0f:c3:be:d7:13:00:05:2f:4e:c2:69:
                    76:72:dd:dd:6d:27:7b:ea:02:de:63:0a:5b:bb:f4:
                    2b:22:01:88:b7:89:74:46:5d:47:28:ae:d5:81:2d:
                    d6:df:5f:6d:dc:06:3e:7d:5b:72:aa:ad:b8:11:99:
                    68:2d:83:a1:fe:83:16:97:31:c0:a5:2a:9f:09:6f:
                    8d:bc:2f:e1:0d:5e:e1:22:be:ba:cc:c0:84:81:38:
                    66:5e:7b:cc:8c:c3:c8:03:a8:68:a3:4b:75:0e:be:
                    fd:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DD:1A:68:82:0B:AB:F7:28:13:04:F3:95:D0:EE:A5:6F:CD:ED:93
            X509v3 Authority Key Identifier:
                keyid:D4:85:55:F9:A5:27:27:F6:BC:F7:15:CB:47:50:A2:A4:A6:C3:51:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1IVV-aUnJ_a89xXLR1CipKbDUWE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/e45577-65b1-4d43-853a-02abf8572fcb/1/1IVV-aUnJ_a89xXLR1CipKbDUWE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a4:6a:60:13:8b:28:49:68:22:51:89:8a:6e:bf:c7:d2:cf:
         e6:5a:85:57:ba:64:57:65:38:03:ee:4d:3c:50:20:ae:59:7d:
         01:43:7f:99:ac:93:12:03:cc:dc:9f:58:cc:b9:0a:6d:68:39:
         1a:23:4c:98:62:9a:b9:1c:c0:05:9d:fd:60:99:bc:00:88:24:
         cf:9c:d2:19:79:20:7f:9e:e9:cc:1a:c4:3f:91:95:0c:43:22:
         4e:03:be:d2:ad:e0:4f:ba:4a:33:f6:8b:81:ab:50:66:f6:af:
         76:2d:3a:fd:1e:ba:ed:e8:6a:88:6c:82:8a:0d:1c:81:87:7f:
         8a:2d:d5:3d:93:fe:88:73:23:23:6e:a8:41:5f:a4:4f:9e:35:
         49:5e:d0:44:58:62:32:47:6d:66:10:35:95:67:8d:6b:6c:32:
         76:dd:5a:67:c8:ca:a8:3e:f2:88:be:50:05:d2:fa:91:b0:f5:
         b8:46:15:c7:43:63:fc:c8:cf:6f:45:2c:aa:4f:5f:bc:ee:73:
         c7:43:d7:56:53:3e:d6:cf:bb:eb:23:b3:b2:3d:aa:41:f6:df:
         df:fe:14:84:78:db:29:7d:e0:7c:5c:61:cf:82:11:e3:76:27:
         5e:56:ca:1b:d9:5e:10:b9:40:bb:6e:42:b1:c5:3a:77:1c:ca:
         2f:e3:26:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----