Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft
File:                     i8EWjaFgICh-6h_eygVBkwqdNok.mft (raw, json)
Hash identifier:          bGpfHZnXcXm22oUMa0zx3uqM7m06Uq2lZ5uaNTcSO/w=
Subject key identifier:   E4:0E:F5:7B:AD:C2:6F:48:E8:B1:A0:82:31:43:C6:4F:14:C5:14:09
Authority key identifier: 8B:C1:16:8D:A1:60:20:28:7E:EA:1F:DE:CA:05:41:93:0A:9D:36:89
Certificate issuer:       /CN=8bc1168da16020287eea1fdeca0541930a9d3689
Certificate serial:       01962DF43238871C309C4DE0BC63EE623FBF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft
Manifest number:          016D
Signing time:             Sun 13 Apr 2025 07:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:40 +0000
Files and hashes:         1: M8dNAav4bGEdssIavf8xkWsYnhg.roa (hash: XQuy4W50mLmkvV791/MW+gWfWSh1bhqASgHVJ90pFyY=)
                          2: i8EWjaFgICh-6h_eygVBkwqdNok.crl (hash: NaVgYFciSySx2BtR5pS4cP6aPjryDN7Te7RqjgDvcSU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:32:38:87:1c:30:9c:4d:e0:bc:63:ee:62:3f:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bc1168da16020287eea1fdeca0541930a9d3689
        Validity
            Not Before: Apr 13 07:01:40 2025 GMT
            Not After : Apr 14 07:01:40 2025 GMT
        Subject: CN=e40ef57badc26f48e8b1a0823143c64f14c51409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:d5:a4:8e:c9:52:83:d9:18:03:db:ea:9d:fe:
                    9d:25:3f:ed:2d:06:30:aa:0e:f1:a4:56:9b:bc:f0:
                    95:49:31:32:03:e9:87:ac:fb:81:20:66:3b:f3:42:
                    a1:2b:36:33:f4:8e:a4:1b:82:2b:b8:e0:da:1e:13:
                    5c:b3:66:05:53:dd:f0:98:67:21:37:ad:7a:2d:0c:
                    e4:7e:e2:9c:1a:f9:78:6b:13:52:94:8f:14:16:ab:
                    1a:2f:4b:22:74:27:24:ea:f5:e9:35:11:1c:f2:e7:
                    18:c8:1e:d3:77:6d:1e:84:f1:0a:a1:db:0f:7a:cb:
                    bf:e8:78:83:79:b1:98:3e:47:a1:3c:89:2e:c3:43:
                    d4:9b:15:2d:19:bb:73:56:11:ab:24:7c:ac:04:d9:
                    77:1f:57:3c:18:47:aa:81:0c:1e:bb:b9:89:07:fb:
                    9a:c6:fb:65:f1:c9:99:1b:15:63:df:a3:29:b5:b4:
                    54:53:7e:37:5e:ac:ef:fa:4d:41:53:eb:52:bb:94:
                    b6:2b:db:ae:23:a3:43:5e:0f:01:73:c8:c4:17:3f:
                    8c:5b:a1:fe:61:43:29:2b:84:6c:cd:95:81:e3:69:
                    1c:80:de:8b:f7:4b:6f:c9:8f:e2:2d:b1:9b:ce:40:
                    07:68:2f:40:c6:4e:a2:91:0c:b8:30:01:cb:90:6d:
                    20:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0E:F5:7B:AD:C2:6F:48:E8:B1:A0:82:31:43:C6:4F:14:C5:14:09
            X509v3 Authority Key Identifier:
                keyid:8B:C1:16:8D:A1:60:20:28:7E:EA:1F:DE:CA:05:41:93:0A:9D:36:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8EWjaFgICh-6h_eygVBkwqdNok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/18bc60-eca6-48dd-ae99-26ce071b0c36/1/i8EWjaFgICh-6h_eygVBkwqdNok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:61:9b:8f:0f:79:95:93:07:4d:08:26:6b:f7:32:9c:e6:0e:
         6f:f5:af:1a:e6:5c:b9:48:2a:7d:cd:a5:ea:58:03:01:52:e7:
         ed:5e:61:f1:c0:2d:32:16:6d:8a:1d:c8:a5:97:b6:bf:ca:76:
         ce:09:11:f1:1a:01:e9:b3:8d:71:a0:26:30:1d:0c:f6:e0:32:
         25:28:e9:a4:8f:63:a9:3e:d6:d7:97:74:c1:82:9e:7f:02:c8:
         df:35:af:d3:1f:7b:50:33:67:ab:83:3e:25:7e:37:2b:da:c4:
         de:6a:32:2e:23:ca:b4:aa:6d:28:bd:92:e1:07:b6:4f:00:42:
         67:c1:52:47:c2:e4:59:30:1c:d6:6c:6d:6f:64:c1:40:a5:2e:
         da:ce:83:45:49:01:dc:bc:38:70:65:bf:8c:da:d9:ec:7c:c6:
         e6:0f:b2:fd:ad:48:ac:ec:34:40:23:40:36:25:b0:02:38:82:
         a8:1d:43:21:17:f1:fa:d8:6c:c5:40:02:ef:f8:72:95:7a:2c:
         d2:bc:b9:7c:9f:62:3a:20:8d:fe:a2:4c:79:26:89:70:94:a9:
         43:5b:c1:a4:cc:ef:59:5f:4c:3b:2c:3e:3d:9e:2f:7a:65:93:
         df:a2:03:00:26:3b:8d:4a:f2:f6:f5:4b:de:29:5c:01:fe:36:
         b8:ee:f6:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----