Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
File:                     I15QLDFNUQT3xgzNaXicuEj_Xgc.mft (raw, json)
Hash identifier:          VIdG7zWX5YSMOFOaBAG9e4D++pS/WRDxmU7USDYPwP8=
Subject key identifier:   9A:2A:4A:00:B9:A4:29:D8:0D:10:CF:39:66:CC:16:5B:54:15:31:AC
Authority key identifier: 23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07
Certificate issuer:       /CN=235e502c314d5104f7c60ccd69789cb848ff5e07
Certificate serial:       01962F74613A6A96CA42DA36C9EF7FAEA33D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft
Manifest number:          10
Signing time:             Sun 13 Apr 2025 14:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:18 +0000
Files and hashes:         1: GLkcEMe4eneYkegJdDsN96p2G5w.roa (hash: a+Y+AIr4ILwMbtFOtGWppkOOeW987wrq4kOZaYCKOMI=)
                          2: I15QLDFNUQT3xgzNaXicuEj_Xgc.crl (hash: DUoj49616r7YMkDcphaCCyMgoCpd/hlrNeEOTWWpk60=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:61:3a:6a:96:ca:42:da:36:c9:ef:7f:ae:a3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=235e502c314d5104f7c60ccd69789cb848ff5e07
        Validity
            Not Before: Apr 13 14:01:18 2025 GMT
            Not After : Apr 14 14:01:18 2025 GMT
        Subject: CN=9a2a4a00b9a429d80d10cf3966cc165b541531ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:76:87:15:76:d9:70:e1:bd:70:c6:c2:3e:4d:
                    51:f9:65:04:e6:8a:d1:3e:e5:77:e9:56:c9:f3:7c:
                    d8:c4:05:bf:02:af:72:68:28:7d:1f:40:2b:ea:bf:
                    76:0f:af:7d:86:9f:4b:57:93:52:9d:fb:49:45:76:
                    f2:99:f5:50:49:e8:ad:8a:b6:5a:e4:6c:26:a7:e6:
                    99:c7:08:a2:ad:9a:20:3e:c1:bf:c5:e7:67:9f:42:
                    7e:f7:b6:54:5e:d2:14:58:33:db:7b:e3:8a:79:6f:
                    ac:ee:21:10:74:8e:10:29:0d:cf:2b:49:89:5d:42:
                    95:47:c3:f7:5e:8c:09:fd:70:24:f4:5a:85:0c:13:
                    b9:f4:e2:fd:5d:c0:a5:d2:52:be:0a:b6:a0:89:60:
                    b3:df:95:95:af:e9:b7:44:9a:4b:89:90:dc:ec:96:
                    b8:a2:b3:e1:30:81:19:b9:6c:92:ba:82:df:50:a8:
                    d5:d2:6f:c0:67:13:82:6a:09:48:b8:63:c0:0a:9f:
                    d6:a4:3c:65:fe:ad:32:21:c2:12:d9:f6:c1:90:db:
                    9a:21:64:cd:e0:86:1c:65:f7:6f:83:c4:b9:6b:ee:
                    98:28:22:ae:5a:8c:44:b1:69:8c:76:05:b8:80:cb:
                    43:98:39:f8:60:a1:b9:8a:b3:ee:bb:85:e6:3d:71:
                    9f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:2A:4A:00:B9:A4:29:D8:0D:10:CF:39:66:CC:16:5B:54:15:31:AC
            X509v3 Authority Key Identifier:
                keyid:23:5E:50:2C:31:4D:51:04:F7:C6:0C:CD:69:78:9C:B8:48:FF:5E:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I15QLDFNUQT3xgzNaXicuEj_Xgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fa245f-dc74-4974-82e0-a56e67848f11/1/I15QLDFNUQT3xgzNaXicuEj_Xgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:bb:84:66:cb:d9:1b:d2:26:4f:94:9b:7d:9a:1a:45:89:bd:
         dc:ce:1a:a3:3e:55:1a:81:bf:bf:2d:41:38:39:07:de:96:d8:
         d6:2c:f5:1b:ec:c9:31:ed:4b:6b:b6:12:a6:fe:3b:af:7e:64:
         4e:91:2c:71:e2:c1:4b:7c:1d:f7:3a:f8:76:b0:22:d7:f5:71:
         f1:ea:da:ee:c3:86:c3:a8:60:ec:ea:00:10:71:a4:5a:89:b8:
         8e:2c:d7:11:45:40:7f:8e:da:c9:13:68:7e:07:61:ea:f8:83:
         38:65:f1:1d:98:e9:cc:fd:eb:23:0a:e5:94:a5:64:2d:e4:1e:
         f6:fe:dd:a1:22:7f:39:ff:99:9c:e5:4d:88:50:91:24:83:5d:
         6d:96:3d:58:e7:21:65:30:28:b3:47:39:21:c9:65:75:ea:9d:
         e8:a0:d7:e6:0f:8d:e0:5f:32:a0:8c:56:12:a8:82:7f:84:d8:
         73:c9:0d:bd:6d:1d:84:c7:6c:b8:50:27:d2:88:01:93:60:fc:
         f4:b1:06:f7:85:5a:16:83:39:c0:9f:c5:18:c9:56:d8:93:53:
         9b:5c:12:c6:f1:54:2f:2a:34:51:81:df:e1:b3:d5:23:00:8b:
         a8:97:a9:71:32:aa:33:56:69:00:35:2f:4a:68:45:e9:f6:16:
         30:80:1c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----