Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
File:                     iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft (raw, json)
Hash identifier:          CUboPR1UyA826PSSJbX9ddqiGRSydSYfxAl6spnlwp4=
Subject key identifier:   28:7B:F3:FD:C1:95:3B:16:6D:69:11:1C:F6:0E:C3:0E:66:7A:74:05
Authority key identifier: 8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1
Certificate issuer:       /CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
Certificate serial:       01962DF3CA519466C29DC59EE9DEF02BEDD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft
Manifest number:          0DB9
Signing time:             Sun 13 Apr 2025 07:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:13 +0000
Files and hashes:         1: 03mz0LQjzt1ORtulSs8-RgKcMnM.roa (hash: o7HH4upfGHhmSB89uCr8oSYNHbC8ZdA+S7MeD1sbYe4=)
                          2: 2Qr14eAD37nuU_5fo7_UeplXIWU.roa (hash: usgUNw1aFsserU4Vh7SHZUsSrOPQTJ2Wa8CALhVnFWI=)
                          3: XcS7NtVySUtUzIKZEZ4PM2dCvo0.roa (hash: RI3/B49k5u7aP42xJ7PCHqmPzqodpebWnjl4/ch5Tn4=)
                          4: iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl (hash: oOuGGwcR/LZ8t9Ksm06IP78fmBUsBVWlAELcn9wkAgo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ca:51:94:66:c2:9d:c5:9e:e9:de:f0:2b:ed:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8aa1fe9a4c03d015aec974e2d29709a979eb82f1
        Validity
            Not Before: Apr 13 07:01:13 2025 GMT
            Not After : Apr 14 07:01:13 2025 GMT
        Subject: CN=287bf3fdc1953b166d69111cf60ec30e667a7405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:14:2e:c9:92:c2:fe:58:7d:29:2e:bf:74:56:
                    98:ea:c4:4d:03:26:b5:a5:44:1b:a6:fe:00:1e:4a:
                    45:d9:cb:63:c6:18:0a:5c:20:fa:47:3d:af:42:34:
                    20:8b:74:35:0a:1d:4d:24:15:c6:5d:a1:e2:2d:04:
                    4e:d5:06:64:76:52:af:ae:39:f5:12:44:23:c7:1a:
                    e0:1b:66:41:4f:b9:bb:c6:f2:29:25:0d:9f:e9:d5:
                    36:d7:4a:ec:39:7e:7a:15:1d:72:14:2b:aa:28:d0:
                    dd:9c:5a:35:c0:b6:4a:36:74:7d:94:90:cd:09:01:
                    ef:38:8b:82:5d:26:2d:23:49:e9:ab:07:55:3b:56:
                    78:de:29:2b:2d:73:04:e7:88:02:d4:98:74:65:58:
                    44:0e:b7:5b:82:a6:c7:36:d1:d4:df:ce:e8:d3:52:
                    f3:fa:2d:83:48:76:54:90:0a:1c:1d:5b:a9:c5:5f:
                    76:d3:07:ca:1f:a0:03:e6:ae:f1:d1:c7:4a:47:ef:
                    92:03:37:af:b8:d1:7d:40:0b:e3:a9:08:0c:d2:51:
                    32:2e:b2:de:66:87:d1:a8:c2:3b:69:3d:d2:24:1a:
                    25:3b:ee:b5:5c:99:98:6e:45:97:58:99:49:15:65:
                    0a:7f:12:96:89:57:48:e0:f3:27:5d:52:37:1a:0c:
                    cd:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7B:F3:FD:C1:95:3B:16:6D:69:11:1C:F6:0E:C3:0E:66:7A:74:05
            X509v3 Authority Key Identifier:
                keyid:8A:A1:FE:9A:4C:03:D0:15:AE:C9:74:E2:D2:97:09:A9:79:EB:82:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqH-mkwD0BWuyXTi0pcJqXnrgvE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/41e9b0-62e7-4718-b966-1f9ae055646f/1/iqH-mkwD0BWuyXTi0pcJqXnrgvE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a6:de:f2:b2:24:66:f7:fd:d1:2e:69:1a:a8:2c:95:89:b2:
         d0:51:21:c3:65:05:db:e8:a4:15:47:ba:ce:80:b6:4e:ea:e2:
         94:cc:c3:ae:d3:49:00:ca:23:5d:d7:77:df:7c:26:21:27:6d:
         d9:a7:0e:87:71:cc:91:24:04:cc:32:09:a2:41:ef:15:02:25:
         82:ef:aa:26:8b:45:e9:92:e2:d5:96:45:b8:51:5e:68:87:91:
         e6:9e:b2:8b:56:fa:67:7d:83:b7:37:25:86:60:7b:1b:54:41:
         7f:5a:3e:b3:f0:09:25:21:4c:3d:99:af:da:39:09:9f:09:92:
         b5:78:0d:08:7a:cb:79:c4:95:0a:d4:3e:bf:90:36:6c:48:1e:
         3b:bf:48:64:d2:c7:27:14:c0:b3:6a:1b:82:f3:68:d8:96:fb:
         50:c9:30:ca:43:25:2a:9d:ff:45:7b:57:4c:af:f5:12:fc:2d:
         59:fc:a6:cb:11:c2:48:3a:b9:92:1f:7a:f3:5c:46:ab:5d:ab:
         7a:d2:c5:ba:ae:81:89:04:5d:b9:b9:8f:37:ab:62:a1:eb:ea:
         d7:d2:1c:dc:ff:95:f0:3d:b0:8a:e2:62:75:40:e1:c1:ea:6d:
         bc:a2:4d:01:91:5a:ca:09:a3:0e:8f:a3:43:6c:ab:86:da:71:
         44:62:bb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----