Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
File:                     iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft (raw, json)
Hash identifier:          tKjxRspug+Vo+tFl40SYW/7KncAzIqwSp8Rq26q1nro=
Subject key identifier:   F2:F8:D1:E1:7B:E2:8F:CA:5C:23:C5:6B:9D:D1:06:F2:42:A0:4C:95
Authority key identifier: 88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E
Certificate issuer:       /CN=886faf1820074b79b6025ddffab25cb3f774424e
Certificate serial:       01962F3D460735A0FBC4563F6432C6926DFC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft
Manifest number:          6C
Signing time:             Sun 13 Apr 2025 13:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:06 +0000
Files and hashes:         1: iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl (hash: vDb4+yLzIPAYX2aT+pupOiQmWNEXsLIeUfBZz/vPTTY=)
                          2: pBOV7_scguiJteXj3vNSqNhNc5U.roa (hash: vCrIj0wpM69dzNSkAC34US2sC7UYedyyZzr33rt/1E0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:46:07:35:a0:fb:c4:56:3f:64:32:c6:92:6d:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=886faf1820074b79b6025ddffab25cb3f774424e
        Validity
            Not Before: Apr 13 13:01:06 2025 GMT
            Not After : Apr 14 13:01:06 2025 GMT
        Subject: CN=f2f8d1e17be28fca5c23c56b9dd106f242a04c95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:19:22:5c:ab:2d:86:72:49:75:4c:e4:5a:4d:
                    02:6e:48:0e:fa:5b:b3:60:c0:aa:92:d4:19:62:bb:
                    fb:c7:a9:38:32:d9:14:7a:a1:2f:1a:30:92:0e:fb:
                    c3:33:54:f2:1b:02:e1:1b:a6:83:3e:6d:77:c5:5d:
                    27:fb:e3:8d:12:2d:ef:b3:15:d3:21:99:8d:47:f2:
                    ee:71:de:11:0c:0a:ad:7f:2b:b8:19:bc:b9:0e:26:
                    65:b4:83:cc:43:03:a3:a7:ab:11:7a:50:10:8c:75:
                    12:28:ec:2b:7f:cf:c2:77:5e:f3:cd:9e:56:76:b9:
                    60:fc:09:d2:e6:25:68:c9:c0:e6:ba:c9:e1:15:77:
                    e4:04:12:6f:e6:68:11:f6:4a:f2:f3:a8:38:70:d4:
                    0f:18:4d:16:6f:5e:ce:4a:94:a0:ff:7c:b9:c8:46:
                    02:8c:52:00:ca:71:6c:d2:03:2d:7d:d1:b1:95:1d:
                    f0:57:62:f8:84:41:d3:1c:1a:86:91:82:f0:c8:f3:
                    88:26:a7:8b:3c:01:c0:6b:ba:87:63:61:2b:6a:da:
                    38:02:2f:aa:d5:a1:ec:53:51:9f:1e:1a:4b:d5:53:
                    1f:62:ce:d0:dc:0f:86:82:74:4b:92:7a:fa:b3:c8:
                    59:e9:d1:b7:74:88:39:6b:e0:7d:99:c5:8a:95:14:
                    83:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F8:D1:E1:7B:E2:8F:CA:5C:23:C5:6B:9D:D1:06:F2:42:A0:4C:95
            X509v3 Authority Key Identifier:
                keyid:88:6F:AF:18:20:07:4B:79:B6:02:5D:DF:FA:B2:5C:B3:F7:74:42:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/06d0ea-1967-4cff-93b7-a58f8cec4b51/1/iG-vGCAHS3m2Al3f-rJcs_d0Qk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:9a:52:a7:5f:a2:b8:ad:10:57:c5:31:4e:3e:db:1c:f3:f0:
         70:70:02:95:1b:a9:d6:23:32:c1:57:c8:ae:02:fc:44:1e:9a:
         db:62:d9:42:a6:70:1e:a4:c4:4f:a2:98:9c:d5:54:b8:1a:b6:
         c4:0a:c2:27:9d:9e:15:66:d6:1b:e1:ba:c0:5b:88:3c:79:88:
         76:2a:5e:46:1c:70:13:c5:a2:71:c9:56:98:e5:24:64:9e:98:
         a5:df:8f:6c:67:50:2b:ee:a1:50:37:cd:96:72:13:40:86:69:
         a7:ee:86:78:da:99:1a:db:0a:2e:3c:0b:8b:8d:68:31:5f:c9:
         28:d5:7b:9e:2b:c2:c9:b9:f1:11:20:fc:aa:57:8e:f3:9f:9f:
         c2:e5:8f:fb:c3:f5:0b:21:84:03:d8:1d:61:50:7a:1b:01:60:
         31:9f:6e:9e:58:e8:6c:af:e1:b0:c8:ca:12:f0:d4:2b:cf:e2:
         7e:a2:5c:59:be:2a:47:7d:7c:2c:44:51:91:c1:8f:48:66:6e:
         08:75:51:53:21:70:39:cb:a2:5d:9d:73:46:07:27:e9:3b:fe:
         5e:d7:ed:d4:37:b8:fe:0a:2b:64:80:f4:3f:c5:da:8c:6d:fd:
         16:b1:51:cc:7c:ce:97:41:78:d4:62:52:8f:19:73:79:3a:f9:
         aa:2b:a0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----