Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
File:                     IxIMamyM8XJufUjjFKFszQXvhgc.mft (raw, json)
Hash identifier:          xILGIm6xaaNwoP7g5/aZXNv0bcs9Ag6YPvVnLlxbPtk=
Subject key identifier:   73:57:7F:A8:BC:B6:A4:CB:5E:56:92:0F:6E:DA:B2:90:AC:B9:4D:18
Authority key identifier: 23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07
Certificate issuer:       /CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
Certificate serial:       01962E2B2B69A9810E16532F99883654D803
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 08:01:42 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:42 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:42 +0000
Files and hashes:         1: 3ljJaz1a5cIjZ8YC3COzHNt_p94.roa (hash: bMQghzShphucnVw2AcHoK8ZlibkBQSkRsxgVMSWXPUM=)
                          2: IxIMamyM8XJufUjjFKFszQXvhgc.crl (hash: sR+sCj7/jzIMgtgEi9YYWwVSI0xI+Im8fyUXKr4rr1k=)
                          3: PVPdjWfp5158kOXCBG02gGqvS2k.roa (hash: yHL6CrBTx/Lx7UNatKVR0PW+xHw8+FZidWVfHY4s2Bw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2b:69:a9:81:0e:16:53:2f:99:88:36:54:d8:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23120c6a6c8cf1726e7d48e314a16ccd05ef8607
        Validity
            Not Before: Apr 13 08:01:42 2025 GMT
            Not After : Apr 14 08:01:42 2025 GMT
        Subject: CN=73577fa8bcb6a4cb5e56920f6edab290acb94d18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d2:04:ab:ef:f4:be:b5:ad:43:18:f5:e7:2d:
                    2f:aa:c1:94:06:da:59:ee:af:d3:76:31:52:94:c7:
                    23:b9:06:e8:cb:25:ed:bd:07:6d:4d:ea:88:69:71:
                    9c:6a:9a:9b:30:63:5f:44:13:4b:f3:c4:7b:f6:7b:
                    70:23:2f:0d:98:a2:75:83:37:77:ad:a2:96:93:93:
                    7d:9b:ff:9d:2a:d6:c0:f9:00:92:2f:3a:11:bb:ef:
                    9b:de:4f:cd:ae:2e:78:ac:41:04:2a:e3:44:75:f6:
                    f8:57:2f:29:4b:90:cb:d3:e8:71:15:9f:5e:cc:ff:
                    55:3d:7d:4a:9e:e0:e5:82:02:71:03:fc:25:0c:18:
                    b7:62:49:f7:37:fe:32:ef:da:a5:01:1f:c6:d2:b2:
                    05:b7:9c:78:c1:3c:ee:cd:9c:98:8a:c1:b8:6d:bf:
                    df:08:ed:f4:54:d6:c1:a2:3a:d5:88:4b:f5:15:3e:
                    16:6c:0d:82:39:8f:5a:60:0f:1d:87:12:d3:c2:92:
                    14:94:10:88:ea:7a:7c:9f:91:1e:3e:a3:fd:b2:08:
                    5d:bb:f2:23:92:1d:90:5c:34:fc:b5:fd:bb:e7:11:
                    2f:ca:72:ca:c0:e2:93:bb:6a:e6:13:55:8b:8e:f2:
                    fc:c4:b9:06:5d:a3:dc:9c:c8:b9:90:40:a3:07:f3:
                    20:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:57:7F:A8:BC:B6:A4:CB:5E:56:92:0F:6E:DA:B2:90:AC:B9:4D:18
            X509v3 Authority Key Identifier:
                keyid:23:12:0C:6A:6C:8C:F1:72:6E:7D:48:E3:14:A1:6C:CD:05:EF:86:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IxIMamyM8XJufUjjFKFszQXvhgc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/1fadce-7fa7-4c4c-bded-e4b702f16116/1/IxIMamyM8XJufUjjFKFszQXvhgc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:56:5d:be:ef:c3:5f:c3:61:91:73:de:84:eb:7d:d8:a8:57:
         2a:94:52:00:70:f5:f7:28:c8:03:c7:37:b9:3a:c5:ff:15:2a:
         28:14:d1:40:83:d3:df:4d:76:23:15:24:4d:77:03:65:68:16:
         d4:61:7a:1c:9b:01:ec:fc:d4:00:da:9e:6e:22:7d:ee:bc:d6:
         5a:3b:c0:34:64:f9:9a:53:ac:3e:40:64:47:1f:84:1c:61:4d:
         b7:8f:41:92:88:e7:d8:b5:3b:d6:22:80:b4:0d:63:a4:6c:ba:
         cd:85:62:56:13:28:9c:9d:46:7c:a8:4d:53:88:ff:94:c3:3a:
         3d:ef:e1:d5:65:bc:fa:1e:75:c0:cb:d8:cc:32:d0:6c:cd:dd:
         7c:df:9b:e4:d4:8c:43:19:88:9b:4c:c7:a1:8c:d0:34:f8:a3:
         79:15:9d:eb:9c:4d:9e:80:4a:ce:af:23:e1:e8:b9:52:f6:15:
         fc:01:81:de:2f:38:1d:92:f6:cd:72:80:be:f2:e7:fd:b9:fe:
         3e:88:0d:f3:fa:20:0d:ef:d4:cf:51:2c:36:a8:f8:75:56:d9:
         e9:5f:26:dd:39:86:eb:bd:61:42:f2:ba:e8:ac:69:f9:c4:da:
         78:8c:49:e9:d9:a3:73:9b:5d:c1:4d:1a:a8:2a:8e:1a:2e:11:
         44:cc:e9:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYuKytpqYEOFlMvmYg2VNgDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMTIwYzZhNmM4Y2YxNzI2ZTdkNDhlMzE0YTE2Y2NkMDVl
Zjg2MDcwHhcNMjUwNDEzMDgwMTQyWhcNMjUwNDE0MDgwMTQyWjAzMTEwLwYDVQQD
Eyg3MzU3N2ZhOGJjYjZhNGNiNWU1NjkyMGY2ZWRhYjI5MGFjYjk0ZDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndIEq+/0vrWtQxj15y0vqsGUBtpZ
7q/TdjFSlMcjuQboyyXtvQdtTeqIaXGcapqbMGNfRBNL88R79ntwIy8NmKJ1gzd3
raKWk5N9m/+dKtbA+QCSLzoRu++b3k/Nri54rEEEKuNEdfb4Vy8pS5DL0+hxFZ9e
zP9VPX1KnuDlggJxA/wlDBi3Ykn3N/4y79qlAR/G0rIFt5x4wTzuzZyYisG4bb/f
CO30VNbBojrViEv1FT4WbA2COY9aYA8dhxLTwpIUlBCI6np8n5EePqP9sghdu/Ij
kh2QXDT8tf275xEvynLKwOKTu2rmE1WLjvL8xLkGXaPcnMi5kECjB/MgcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHNXf6i8tqTLXlaSD27aspCsuU0YMB8GA1UdIwQY
MBaAFCMSDGpsjPFybn1I4xShbM0F74YHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8xZmFkY2UtN2ZhNy00YzRjLWJkZWQt
ZTRiNzAyZjE2MTE2LzEvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8xZmFkY2UtN2ZhNy00YzRjLWJkZWQtZTRiNzAyZjE2MTE2
LzEvSXhJTWFteU04WEp1ZlVqakZLRnN6UVh2aGdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAolZdvu/D
X8NhkXPehOt92KhXKpRSAHD19yjIA8c3uTrF/xUqKBTRQIPT3012IxUkTXcDZWgW
1GF6HJsB7PzUANqebiJ97rzWWjvANGT5mlOsPkBkRx+EHGFNt49Bkojn2LU71iKA
tA1jpGy6zYViVhMonJ1GfKhNU4j/lMM6Pe/h1WW8+h51wMvYzDLQbM3dfN+b5NSM
QxmIm0zHoYzQNPijeRWd65xNnoBKzq8j4ei5UvYV/AGB3i84HZL2zXKAvvLn/bn+
PogN8/ogDe/Uz1EsNqj4dVbZ6V8m3TmG671hQvK66Kxp+cTaeIxJ6dmjc5tdwU0a
qCqOGi4RRMzpWA==
-----END CERTIFICATE-----