Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
File:                     ItAo8bo877DevVG-naxoyc5Ww9U.mft (raw, json)
Hash identifier:          6FHVbW6aztUl9xKlHNot2Ab3/8HHmjcgkBmtLhjVE1U=
Subject key identifier:   18:DC:8B:37:AC:52:36:41:EC:14:71:85:D9:68:9E:98:21:18:E9:2B
Authority key identifier: 22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5
Certificate issuer:       /CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
Certificate serial:       01962F74D1A2E5EEFA99B2B17D6CB3E9BC3E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft
Manifest number:          125C
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: ItAo8bo877DevVG-naxoyc5Ww9U.crl (hash: mJz+2OWQHsq6+HPQkXXSk84ZYfSIaXh5GZs2dfgFOMA=)
                          2: oaSNmQwuRc13PpOWxQF_tD88Wuk.roa (hash: 6Dyr5RV9WiwC/4aDAUVY0pqnb50f1qBljbybKJ6z/iI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d1:a2:e5:ee:fa:99:b2:b1:7d:6c:b3:e9:bc:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22d028f1ba3cefb0debd51be9dac68c9ce56c3d5
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=18dc8b37ac523641ec147185d9689e982118e92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4d:63:77:1a:10:de:27:d8:47:2c:a8:02:12:
                    0b:ce:4e:ce:99:ef:5c:70:f5:96:2b:3b:48:fc:17:
                    08:c1:5c:ec:49:06:f0:f0:12:ec:59:04:59:e9:e1:
                    1d:f2:e4:d1:48:4a:60:a1:90:85:ba:bb:b9:09:fd:
                    99:46:6c:1f:5e:0d:3b:0c:06:b8:40:7b:bf:05:5a:
                    b8:83:e6:13:82:f7:c9:84:2c:9a:1d:76:ab:7b:8e:
                    9c:fd:8b:4b:14:f4:a9:37:0c:97:b3:d4:2e:01:19:
                    d1:21:b2:91:12:97:c2:ae:07:d9:eb:0e:36:75:1d:
                    36:03:69:6b:24:a8:2d:af:9d:8a:7b:84:55:13:0a:
                    b4:3e:93:20:69:99:25:f3:a2:e2:2d:f5:39:4d:71:
                    1e:13:ce:fa:32:2b:26:0f:d8:24:25:85:5f:3e:ac:
                    7f:80:eb:c5:3d:60:f6:3a:1c:95:ee:af:3c:13:6c:
                    5f:3f:57:bc:7f:02:8b:35:60:0d:39:96:84:e7:ce:
                    ff:0b:c0:b3:c7:d5:bc:4b:12:46:90:d4:5a:7b:b6:
                    99:f4:8d:52:39:38:fd:87:51:7a:29:cd:e2:72:4a:
                    cc:eb:0f:3d:de:a4:14:82:cd:98:80:d7:a2:6b:16:
                    73:fe:2b:b5:b0:a7:45:7e:f2:40:e3:be:55:f6:c3:
                    68:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DC:8B:37:AC:52:36:41:EC:14:71:85:D9:68:9E:98:21:18:E9:2B
            X509v3 Authority Key Identifier:
                keyid:22:D0:28:F1:BA:3C:EF:B0:DE:BD:51:BE:9D:AC:68:C9:CE:56:C3:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ItAo8bo877DevVG-naxoyc5Ww9U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/63a402-a56a-4a89-a745-946817b59148/1/ItAo8bo877DevVG-naxoyc5Ww9U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         e7:6e:fe:5a:9d:7f:6c:e1:e6:10:52:52:67:95:13:7d:40:42:
         0c:89:68:a9:21:30:ac:b8:f0:64:9f:62:00:22:30:00:ff:07:
         6a:fa:8b:e8:bc:83:3d:9f:f0:5a:33:f4:71:c8:da:db:61:45:
         cf:ab:33:36:92:0d:71:e9:90:3c:3c:c0:42:82:c3:d2:39:c1:
         45:4d:e9:05:77:c1:b9:37:cc:3c:33:93:e8:dc:ea:62:7c:01:
         99:d5:9d:ca:b5:77:68:5b:3b:77:a4:f3:a9:c1:0a:ab:8e:51:
         1f:72:c0:07:f0:8c:96:0a:83:6f:81:c3:aa:be:af:17:b0:d0:
         8f:40:2d:d6:34:30:7e:e3:07:65:88:a0:59:ad:51:af:e1:ff:
         6e:00:01:d0:a5:84:99:75:27:07:43:04:1a:43:a5:76:e4:8c:
         cb:71:81:56:8b:64:e3:c8:3d:a8:6c:e7:5c:9f:b9:23:b1:5e:
         79:97:98:fa:34:ba:72:46:d6:3d:b9:b8:49:76:3d:10:cc:d4:
         27:bf:14:65:5d:36:cc:0e:48:53:1f:27:b4:f6:5f:92:56:db:
         85:78:c2:3a:39:56:56:1f:4a:d3:ac:56:a5:39:e2:d1:7a:fc:
         0e:12:a6:36:de:f3:3b:93:3d:d6:88:a2:5d:00:df:cc:08:58:
         79:33:5c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----