Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
File:                     I8Aq9PWPETIK8xlpRuH86dBQyQY.mft (raw, json)
Hash identifier:          U8bijACphpYIz6okFqk7bR72VeteILlr1Xer8Czj0wI=
Subject key identifier:   FF:E9:72:FF:E2:00:B1:96:EC:7C:F3:FE:FD:A1:DB:F1:D4:B9:DB:2E
Authority key identifier: 23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06
Certificate issuer:       /CN=23c02af4f58f11320af3196946e1fce9d050c906
Certificate serial:       01962ECF92411A4AAFA66BCB76390304A99C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft
Manifest number:          14E7
Signing time:             Sun 13 Apr 2025 11:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:17 +0000
Files and hashes:         1: I8Aq9PWPETIK8xlpRuH86dBQyQY.crl (hash: 2APAGrd0qsL2sVW56VEPXuWOQ+3aQBKRgKxOugJAdJ0=)
                          2: L1nx6g959I4u5e_n7rqsUK0vG74.roa (hash: X8LU286M1DCtu5IfhCO2jJJ+1Cy+WsVLYYIMMfE/G4I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:92:41:1a:4a:af:a6:6b:cb:76:39:03:04:a9:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23c02af4f58f11320af3196946e1fce9d050c906
        Validity
            Not Before: Apr 13 11:01:17 2025 GMT
            Not After : Apr 14 11:01:17 2025 GMT
        Subject: CN=ffe972ffe200b196ec7cf3fefda1dbf1d4b9db2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:7d:32:ca:4d:ba:14:5e:32:37:61:7c:3c:7e:
                    01:77:68:fd:69:2c:9d:81:8e:27:33:10:33:5d:27:
                    ca:0f:be:10:19:fe:ea:47:4e:4e:a3:16:1b:0e:04:
                    e5:b0:58:cb:34:39:b3:ef:48:e4:61:2f:ff:1c:93:
                    1c:d9:49:53:e8:d1:80:44:90:25:17:3a:0f:52:bd:
                    d4:2f:0b:04:13:84:e3:e0:07:07:f1:f7:f1:88:19:
                    dc:39:28:57:0c:35:74:31:66:fa:bd:ed:51:4a:cb:
                    31:ea:d4:e5:23:05:32:72:c6:14:77:f0:bc:06:a3:
                    84:a7:fe:98:d4:f7:de:d7:4f:87:fe:b4:74:8f:0a:
                    46:30:ea:05:77:ff:02:7d:28:4b:1a:ae:02:22:fa:
                    ad:a5:5b:dd:0f:1c:1b:28:88:8c:28:1d:13:0e:99:
                    51:24:de:f3:94:66:19:a0:a0:29:4a:a2:f6:51:3d:
                    16:17:30:cb:8e:97:15:37:2f:af:2e:92:da:49:d4:
                    10:f0:9f:bc:1c:0c:78:13:06:e6:89:7d:a5:c3:b8:
                    8e:0c:73:a5:37:a3:2d:a3:7c:da:c6:6f:43:0a:40:
                    bb:68:32:fd:52:26:8c:28:18:23:4f:db:be:f1:e8:
                    a8:22:0f:6d:14:50:d0:ca:de:ba:92:ed:82:06:ad:
                    67:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:E9:72:FF:E2:00:B1:96:EC:7C:F3:FE:FD:A1:DB:F1:D4:B9:DB:2E
            X509v3 Authority Key Identifier:
                keyid:23:C0:2A:F4:F5:8F:11:32:0A:F3:19:69:46:E1:FC:E9:D0:50:C9:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8Aq9PWPETIK8xlpRuH86dBQyQY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/81068c-aed7-4127-88e4-62cb8aca9618/1/I8Aq9PWPETIK8xlpRuH86dBQyQY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:2e:90:38:7f:ef:4c:87:9c:2a:ac:d7:7f:72:79:95:56:26:
         95:69:32:09:7a:18:1a:f5:70:2a:60:ad:e4:a1:69:c5:d5:0b:
         16:ca:99:6b:a9:37:a1:23:4c:00:53:84:65:01:e1:e7:d0:4f:
         d3:1b:7e:f3:58:e2:37:80:cc:45:0e:9a:a8:cc:98:a1:a9:51:
         5c:b6:dc:28:a4:98:4f:d0:8d:c9:23:15:c7:4a:6b:7f:2d:50:
         d9:73:67:22:ce:20:96:1e:79:0c:07:f3:c4:19:a4:43:69:04:
         ca:5a:ad:40:e1:b7:bb:d6:50:3b:4c:47:a6:bf:1a:63:a9:5d:
         b6:65:07:dd:db:cf:ee:e1:03:ab:c4:fd:05:18:1b:73:d0:57:
         38:ff:52:7a:7f:9a:0b:11:21:9b:8b:85:9a:27:ab:58:74:4c:
         d6:b9:f0:f6:93:b0:db:6c:20:12:21:8c:54:0f:81:81:fd:5a:
         2f:82:c4:22:47:df:26:0c:f5:82:ff:4e:47:2a:0f:66:fc:96:
         b5:5a:7f:13:34:d1:b1:d3:52:e3:47:6a:a1:51:e7:1a:ab:49:
         aa:38:36:d6:79:bb:a4:2d:04:24:da:ff:c6:86:7a:68:8c:b7:
         d8:57:f2:a1:ec:3a:79:18:e6:b3:ea:3d:5b:7a:b7:c6:68:7f:
         fa:50:3a:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----