Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
File:                     I-Ivi97cvhm7M_zhT8HbauOkDpA.mft (raw, json)
Hash identifier:          4+PNSm/7FU3NIKMDfKpxgxOgKcgbqY7QbUi2tWsxPOo=
Subject key identifier:   55:A3:26:33:ED:AA:30:90:AA:21:29:59:A5:5D:F6:68:FF:E2:E9:C9
Authority key identifier: 23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90
Certificate issuer:       /CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
Certificate serial:       01962F74D5666C99C9B62964988F701879A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 14:01:47 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:47 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:47 +0000
Files and hashes:         1: BSo6esZVhXizhr6rXIY91M7Ycb0.roa (hash: rDl9FCgKvio+Um9dNVGYTCS6mmU9eKk7X7/TBLZ4IMU=)
                          2: I-Ivi97cvhm7M_zhT8HbauOkDpA.crl (hash: CKAiNEFYi6EfBbVHZS88bQW6H6cm89/es4bOyr9PXsc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:d5:66:6c:99:c9:b6:29:64:98:8f:70:18:79:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23e22f8bdedcbe19bb33fce14fc1db6ae3a40e90
        Validity
            Not Before: Apr 13 14:01:47 2025 GMT
            Not After : Apr 14 14:01:47 2025 GMT
        Subject: CN=55a32633edaa3090aa212959a55df668ffe2e9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:98:0e:88:5c:49:6d:57:76:db:92:fa:9c:38:
                    12:dc:1d:e9:62:c4:d1:83:f8:c3:50:a1:61:06:37:
                    02:17:87:b8:fc:68:93:24:f5:a7:5f:f9:f4:95:5c:
                    b8:73:4f:a1:51:e5:6d:39:81:a4:16:41:6f:71:38:
                    c8:e3:0e:86:c4:dc:e8:6d:f3:02:20:61:32:c6:3f:
                    17:64:14:6f:eb:80:7c:f6:68:9a:e5:44:32:16:d3:
                    98:a0:34:5d:4b:62:40:55:23:be:9f:89:fe:1a:12:
                    b6:49:2c:5d:6d:7d:21:5f:f6:29:bd:0b:45:5f:4f:
                    af:41:1d:5f:24:1c:a1:6a:9e:2c:dc:1a:a0:0a:76:
                    fd:2f:51:7b:47:93:8b:39:ca:36:a3:f2:97:d0:62:
                    fe:e9:cc:12:f5:55:0f:99:25:d6:36:0f:07:9c:bf:
                    52:da:ac:a9:5e:87:c9:8a:84:9f:ba:0d:e9:0a:bd:
                    50:9a:25:7a:95:6c:00:15:76:79:fe:a4:f5:25:21:
                    9c:14:00:ea:1b:5b:c7:d5:e2:ec:f4:41:79:01:53:
                    d1:29:20:8c:b2:1c:7c:56:00:40:65:d8:2e:ec:94:
                    41:5b:8f:e4:b4:6d:59:a1:d5:55:68:72:77:90:ed:
                    7c:22:20:4f:eb:c3:dd:69:50:a6:8b:c9:3d:f4:5d:
                    0d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A3:26:33:ED:AA:30:90:AA:21:29:59:A5:5D:F6:68:FF:E2:E9:C9
            X509v3 Authority Key Identifier:
                keyid:23:E2:2F:8B:DE:DC:BE:19:BB:33:FC:E1:4F:C1:DB:6A:E3:A4:0E:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-Ivi97cvhm7M_zhT8HbauOkDpA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e6a0db-c766-4991-b72c-74bd045b2af7/1/I-Ivi97cvhm7M_zhT8HbauOkDpA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:f2:22:17:1e:7d:e0:57:29:b0:9f:f3:61:e2:0c:75:14:1e:
         e6:af:eb:29:d1:d2:72:8a:b2:7a:b0:1e:e1:90:66:40:6f:f2:
         cc:e6:2d:ff:58:bf:16:cf:b1:7d:d1:31:09:7f:3f:d4:5b:26:
         ff:bb:8b:cd:54:ce:34:59:51:e2:71:f2:fa:8a:d5:71:e5:6b:
         0c:83:9b:be:2d:f9:c8:71:34:9c:65:26:7e:63:0b:68:22:4f:
         43:b4:ac:6a:a2:1b:8f:84:1c:bc:53:8e:a6:14:77:50:31:d4:
         da:37:1c:08:74:10:89:da:8b:e2:8c:d8:8c:ec:99:0c:f8:cc:
         4e:69:fe:c2:72:a3:d3:a7:30:c8:31:c1:3f:85:be:e3:16:cf:
         d5:d0:90:20:9d:5e:50:91:bd:7c:91:f0:3c:6c:1f:c4:7a:56:
         a6:6b:bc:04:38:73:e4:4e:9c:5e:51:57:a4:61:23:0a:2d:9f:
         f0:40:a9:43:52:16:3f:b7:27:a1:92:98:ab:9e:fd:83:98:60:
         03:4b:e8:7f:c2:e8:89:96:55:f2:48:f8:17:35:26:44:64:48:
         c8:48:2a:b7:90:45:52:d3:30:ef:8a:3f:e2:1c:ab:2c:1a:e8:
         77:9d:20:ca:55:03:6c:b9:be:14:2f:16:c2:75:74:28:7a:26:
         fc:8d:c9:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----