Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
File:                     I6xIaAc5isHO7Akh0E1Amk9_R5s.mft (raw, json)
Hash identifier:          u3yux+ohNeyn3owFt3WLgi6ZNd1/Cj0eL70rqm7rxe0=
Subject key identifier:   54:F6:D7:3F:28:8A:D9:CB:27:88:AF:F1:8A:DF:20:64:37:A3:32:F5
Authority key identifier: 23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B
Certificate issuer:       /CN=23ac486807398ac1ceec0921d04d409a4f7f479b
Certificate serial:       01962E61BEE902D0B7BF6E1616E7B48074B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 09:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:19 +0000
Files and hashes:         1: I6xIaAc5isHO7Akh0E1Amk9_R5s.crl (hash: eMJ2FlgSBded08YIWgIt9s4KqiV2xXPsHBnuenUGFQ0=)
                          2: bjCXA7rp-GRMTkdMkg_zXfKYrW0.roa (hash: FxnvNnw+IOeKtHJC0KTXpxkTr4pA05J6vavAi4HV2BA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:be:e9:02:d0:b7:bf:6e:16:16:e7:b4:80:74:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ac486807398ac1ceec0921d04d409a4f7f479b
        Validity
            Not Before: Apr 13 09:01:19 2025 GMT
            Not After : Apr 14 09:01:19 2025 GMT
        Subject: CN=54f6d73f288ad9cb2788aff18adf206437a332f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ac:df:20:59:7e:03:9b:47:3f:de:27:96:36:
                    a3:10:c9:fb:93:5a:6e:da:53:46:65:f6:3c:f4:06:
                    fd:0f:40:1c:86:ad:a9:18:70:8d:f8:f1:fc:1d:60:
                    c0:d0:35:fe:a5:8f:db:5f:af:51:a5:5a:f6:6d:76:
                    ca:da:50:45:00:fa:8b:e3:d5:67:7c:b3:a9:83:a8:
                    a9:5f:07:03:f6:5b:cf:25:bd:37:bf:3a:fa:c5:9f:
                    e3:c6:6f:68:6f:20:29:1e:4a:86:92:89:94:30:6a:
                    56:38:69:b9:81:15:7e:d8:4a:c0:61:34:17:ed:b7:
                    4a:db:1a:d5:37:eb:3b:bb:3a:7e:99:29:0a:eb:d2:
                    e9:ab:21:e1:1c:46:17:0c:1c:0b:e5:e7:69:c2:1f:
                    a7:93:38:5f:a2:28:10:93:79:2b:7e:8b:f7:49:d1:
                    d3:94:b0:9c:c9:5c:00:d2:79:9d:de:98:57:d9:c4:
                    78:f2:fd:b1:a9:35:e0:d6:c7:2c:e9:b0:db:87:af:
                    2a:7a:eb:85:9d:3f:0f:28:55:4f:61:de:cd:65:a2:
                    ec:1f:db:c3:58:9f:f8:cf:d4:ef:be:46:44:d9:7e:
                    74:3a:46:56:92:14:1a:20:47:53:86:4d:1d:06:63:
                    8a:83:15:2f:1b:5b:60:48:7e:cd:1a:5f:6a:32:72:
                    4a:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F6:D7:3F:28:8A:D9:CB:27:88:AF:F1:8A:DF:20:64:37:A3:32:F5
            X509v3 Authority Key Identifier:
                keyid:23:AC:48:68:07:39:8A:C1:CE:EC:09:21:D0:4D:40:9A:4F:7F:47:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I6xIaAc5isHO7Akh0E1Amk9_R5s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/a31b82-d7ea-4f0b-863d-61605b26f82d/1/I6xIaAc5isHO7Akh0E1Amk9_R5s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:74:21:be:1d:93:ef:5c:27:f7:4f:f4:44:ce:bf:86:22:82:
         b9:36:50:59:b0:83:6a:b6:34:f3:14:67:d2:85:1a:94:c8:97:
         54:41:12:3a:b0:bd:de:6d:ff:55:bd:75:42:40:c8:41:19:28:
         f3:01:23:bc:92:70:3f:38:c1:23:f3:ec:f3:53:27:37:2c:8d:
         c6:91:49:96:ed:a2:83:67:2f:02:92:a9:96:31:bd:10:6b:e8:
         a9:f2:a5:f1:d5:d1:96:7e:47:0d:63:c9:a7:f3:b0:fc:12:b8:
         90:bf:8c:2f:7e:39:69:a6:60:38:81:be:c8:81:d0:cf:a6:37:
         eb:4e:cd:c2:99:ed:b6:94:5a:37:63:fe:68:bb:84:64:99:e8:
         42:9c:c0:91:6d:81:18:9d:60:73:20:08:cd:70:d8:31:85:c3:
         9f:7c:99:9c:72:5a:c4:ff:cf:7f:39:c3:8a:62:54:50:fa:b1:
         fb:9d:6d:48:f7:62:51:ae:3d:6d:61:46:60:f7:50:95:36:34:
         0a:58:81:fe:8d:de:24:85:f5:17:54:88:3a:fd:71:30:36:ec:
         52:22:aa:00:6e:21:cf:d4:fc:8b:06:d6:c2:80:69:5e:7a:85:
         a5:62:d4:bb:a8:28:da:04:c2:e0:8a:18:c7:0b:b6:2e:67:a0:
         6f:67:52:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----