Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
File:                     ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft (raw, json)
Hash identifier:          HzkMx1M6lslk81OR+ELaglxeMQ1lzt4FPw0NQUFWqU0=
Subject key identifier:   DC:8D:C1:2D:B9:B5:27:CA:E4:19:1E:39:8A:F6:5E:71:4D:07:70:BC
Authority key identifier: 89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB
Certificate issuer:       /CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
Certificate serial:       01962F3D5CF3FFD7C424FEBF9767473B3BFE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft
Manifest number:          0C9F
Signing time:             Sun 13 Apr 2025 13:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:12 +0000
Files and hashes:         1: ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl (hash: 8Xf0HGYIx96ORTooCJGhBiLKtVOvK9UCqk0/Gth21Fs=)
                          2: qmO8Fiuuh9KuRm81yMzephu_U-o.roa (hash: JTX7Cj1zPyi8sR8Cn5QR+pzD+tvVds3MwvVGO5fjdhw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:5c:f3:ff:d7:c4:24:fe:bf:97:67:47:3b:3b:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89ae220b4768da6e276e6a62edd6746d8fc3c1fb
        Validity
            Not Before: Apr 13 13:01:12 2025 GMT
            Not After : Apr 14 13:01:12 2025 GMT
        Subject: CN=dc8dc12db9b527cae4191e398af65e714d0770bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:23:52:58:92:00:d1:72:fe:2f:4b:9a:0e:f3:
                    bd:77:92:7c:43:96:d4:9f:80:1c:80:24:15:b8:ae:
                    7b:0b:49:e7:16:43:5e:f0:b4:6f:fc:90:e8:11:35:
                    a3:ac:e5:62:3e:70:32:ef:23:d4:6f:ea:17:e7:18:
                    32:e7:d6:d5:9a:86:07:a6:ee:1a:57:71:42:a8:3c:
                    91:0c:25:cb:cf:2f:91:e5:a0:05:12:dc:02:70:57:
                    21:ad:11:b0:4c:de:db:fc:df:e7:9c:35:c4:9d:5a:
                    6f:18:f8:83:cf:65:f3:4f:1b:15:0f:7d:b1:7e:bd:
                    5a:d0:98:8a:f9:54:f4:2b:3b:cd:3f:27:18:2d:7b:
                    4d:0f:4f:cd:94:95:16:94:22:c1:a8:53:6a:1f:d6:
                    5d:f4:26:3b:4f:24:4e:df:4c:03:08:1a:5f:6e:0b:
                    1e:28:f6:fb:d5:84:b6:fd:c5:60:e3:d7:d9:c7:73:
                    02:82:cb:70:0e:a7:2f:e2:dd:cc:da:d8:7e:c7:6c:
                    8f:a9:7c:32:d2:a9:29:dd:67:41:26:a7:f6:b1:f7:
                    10:31:89:1d:68:99:2a:08:11:b9:f1:a7:d4:18:da:
                    7c:17:5d:58:7e:f5:36:0b:33:5f:04:4c:a5:b2:78:
                    0c:fe:d0:6f:93:65:7c:b5:8b:f6:79:12:7d:2f:8b:
                    c9:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:8D:C1:2D:B9:B5:27:CA:E4:19:1E:39:8A:F6:5E:71:4D:07:70:BC
            X509v3 Authority Key Identifier:
                keyid:89:AE:22:0B:47:68:DA:6E:27:6E:6A:62:ED:D6:74:6D:8F:C3:C1:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/3b8a40-7610-4e4d-9b37-741fa4e10e36/1/ia4iC0do2m4nbmpi7dZ0bY_Dwfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:c1:25:49:10:b3:93:5d:4a:cb:1c:b4:fe:9d:1e:02:38:01:
         83:60:7a:e9:b9:c4:e7:34:c1:fe:1c:b0:5f:45:25:a2:d1:1d:
         d5:46:8a:5a:ba:3d:69:df:7f:f3:fe:93:ba:c5:52:16:98:7f:
         27:61:e7:d5:2a:38:de:f0:7f:52:9e:88:8c:50:da:72:27:72:
         27:3d:98:ae:36:17:1e:e8:8a:8a:78:77:c0:29:e4:10:9f:58:
         2d:8e:4a:4b:97:5f:c7:0b:9d:1a:27:04:78:96:6e:90:06:f4:
         30:49:a7:2e:50:28:f6:de:75:d3:f8:93:7b:17:c7:25:fb:1f:
         c3:88:e6:66:f4:7a:fd:e1:95:6b:06:df:3c:8b:73:c0:be:c2:
         ff:13:bf:67:4c:6b:39:62:75:3a:11:c4:4a:44:15:6c:c4:cb:
         75:c5:97:46:1b:f5:95:5f:e1:eb:80:07:ac:58:a1:b6:68:8f:
         a8:93:66:1d:9f:fc:5b:1d:14:81:6a:0a:48:bc:73:4b:81:a4:
         2a:94:6a:20:84:1d:5e:be:52:4f:b8:fc:0a:dc:9a:18:db:39:
         d1:36:b5:6f:60:0a:66:03:9d:95:bc:4c:2f:b7:70:ed:62:a8:
         84:2b:57:b1:7c:ad:58:f2:ad:43:30:6b:94:a0:9b:56:f6:a9:
         02:04:89:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----