Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
File:                     I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft (raw, json)
Hash identifier:          7HjX7PhheZ99dxREhl8HqEYTeQRo0TvXykUTsqfj+Xo=
Subject key identifier:   6C:4A:79:31:2A:14:7D:11:E0:7F:7C:07:74:22:A8:8E:58:31:F0:8C
Authority key identifier: 23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39
Certificate issuer:       /CN=235163d39db88816cddc597a5db5eae707d3de39
Certificate serial:       01962ECF6EC53C779331D307F627351AC13D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft
Manifest number:          14F0
Signing time:             Sun 13 Apr 2025 11:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:08 +0000
Files and hashes:         1: 0w9FBc0vTYSPsjAWKJJCnffXw-k.roa (hash: jLDk0IcPs8Pb9A807RQu6H+l6FnV9GFyw8DjOzzYbaA=)
                          2: I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl (hash: T8nmAxDPcbqlvwAf8yXpDz8K+mWMC2xDdllxhnQkU2o=)
                          3: gKeAQqo6LHoqnf4Vl-8HYj5MieI.roa (hash: SOGNQLrBgWGkjZGYc/wKjLGsnvGnOrdebSHsTRsYQCw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:6e:c5:3c:77:93:31:d3:07:f6:27:35:1a:c1:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=235163d39db88816cddc597a5db5eae707d3de39
        Validity
            Not Before: Apr 13 11:01:08 2025 GMT
            Not After : Apr 14 11:01:08 2025 GMT
        Subject: CN=6c4a79312a147d11e07f7c077422a88e5831f08c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:bc:f5:6a:cd:7c:b9:53:1e:e0:fd:55:9b:61:
                    9f:3e:8f:70:0e:0c:12:84:f3:13:dd:3c:cb:ef:1c:
                    29:a7:cd:c1:20:c7:c5:28:1e:31:d1:cc:2b:1e:8f:
                    c7:4c:6f:9a:4f:8a:6a:49:72:37:55:21:b2:e8:d2:
                    30:33:84:5e:af:f8:15:91:a9:cb:1d:c0:f3:e0:a3:
                    38:5b:08:64:ca:9d:19:dd:00:06:27:cb:6d:59:19:
                    7c:9d:9d:7d:b2:75:df:a1:1d:8b:de:f7:19:c6:3b:
                    62:60:f4:c6:82:c7:06:eb:60:73:8d:3a:35:1c:41:
                    75:c8:6d:fa:9c:59:95:c7:5a:eb:07:36:fe:9a:6f:
                    41:76:35:7a:e0:cc:f2:59:37:e6:ad:f3:9f:2a:77:
                    81:a4:7a:7d:38:29:dc:c9:7f:70:21:a5:74:05:9c:
                    f3:44:4a:38:21:a2:b3:0b:4a:45:8f:83:d7:69:6c:
                    84:39:8e:cc:6e:e1:c4:1d:bb:83:b6:e6:12:57:63:
                    1d:8c:8d:99:72:ad:6f:12:a7:42:17:88:25:4b:e6:
                    65:8a:46:5b:7a:d9:5d:a1:10:54:d8:36:fa:a4:2d:
                    45:7d:ff:2b:7c:15:3d:df:9d:a2:43:22:38:f7:c1:
                    d8:dd:81:e4:29:76:21:2b:ed:3e:87:e7:41:b7:16:
                    fe:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:4A:79:31:2A:14:7D:11:E0:7F:7C:07:74:22:A8:8E:58:31:F0:8C
            X509v3 Authority Key Identifier:
                keyid:23:51:63:D3:9D:B8:88:16:CD:DC:59:7A:5D:B5:EA:E7:07:D3:DE:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1Fj0524iBbN3Fl6XbXq5wfT3jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d7558e-9a6c-4711-8ef8-9150296daa0a/1/I1Fj0524iBbN3Fl6XbXq5wfT3jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:4b:91:56:34:9f:e2:08:c1:dc:bc:7e:e0:10:9f:a2:02:76:
         9c:28:a5:d3:90:93:e3:ec:b3:b9:05:0e:47:98:19:83:2f:29:
         0d:f6:a3:eb:59:3a:f8:63:3b:2e:04:7a:27:e0:e0:08:22:56:
         34:32:ed:57:63:fe:27:ef:ee:6d:79:93:bf:d2:2e:b0:93:00:
         fd:ea:2d:3f:94:e9:39:9e:e9:24:fa:5c:50:1f:8f:61:44:61:
         14:20:5c:b8:0e:c3:15:f4:fb:30:a4:13:cc:70:83:ad:a0:6d:
         93:b4:a2:2b:39:47:5c:ca:df:b3:0a:ea:40:5d:fe:e7:eb:ff:
         9b:27:aa:79:fe:24:b7:9a:bd:dd:7e:eb:fc:cb:1c:08:6d:fd:
         9d:41:2e:ed:22:6a:43:12:be:c2:7d:97:d3:45:0c:db:25:4d:
         40:de:63:90:0e:1c:49:20:02:c5:f1:ed:a4:57:52:c1:a1:af:
         8f:71:6f:35:a5:08:80:32:55:51:57:e9:79:48:73:1a:5e:a4:
         55:38:72:a4:8a:9b:63:1c:61:0e:c1:e0:97:a3:fa:63:f4:4c:
         99:ea:b5:c6:17:7e:18:23:d7:31:83:93:64:73:ae:49:3e:42:
         be:8f:ac:f3:dd:60:66:b0:de:b7:c7:ca:43:78:03:c5:fd:16:
         ed:1c:95:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----