Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
File:                     iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft (raw, json)
Hash identifier:          dqouOQNGHI2hDRYGezp6OoT4oWItb5MBxx+S2TlqfKM=
Subject key identifier:   D7:DE:1C:D7:F8:9D:28:78:5C:D1:2A:CF:51:A4:ED:BA:12:31:A3:51
Authority key identifier: 88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7
Certificate issuer:       /CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
Certificate serial:       01962F74C75DFBB430165EF90A280310982C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft
Manifest number:          0884
Signing time:             Sun 13 Apr 2025 14:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:44 +0000
Files and hashes:         1: 11w9K2dCR0A6XsEVx-Vg9m7G5bM.roa (hash: hj3QFv3Y2FaAu9Oijuk6KKEMBTD9UQTUqjejPr1gs7c=)
                          2: MR9ZuC-IL_jZ4767dS-IkZgCrJw.roa (hash: Vi7lFCDHTrpEyk68a6k87cSkUHM4wyPXzIO5RtGzU1U=)
                          3: iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl (hash: zGJx8UBg6CnEqokiMXyrcYHH7uGb9N8/9Ota6QGmbWc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c7:5d:fb:b4:30:16:5e:f9:0a:28:03:10:98:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88ff4ee623d8fab73c901d0cbdc93a321e9ccfb7
        Validity
            Not Before: Apr 13 14:01:44 2025 GMT
            Not After : Apr 14 14:01:44 2025 GMT
        Subject: CN=d7de1cd7f89d28785cd12acf51a4edba1231a351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:29:27:f1:26:21:e3:d1:e2:53:26:d1:50:47:
                    2b:da:a2:80:89:df:a4:ae:40:01:72:bf:6e:15:19:
                    ce:a7:5c:1c:d5:50:a4:4c:1b:7e:3d:e5:bc:a2:d6:
                    14:46:77:4b:b1:90:86:86:6e:f8:9e:b9:30:40:59:
                    e3:f9:17:99:9f:6d:fb:3e:58:55:2c:0f:00:b3:0f:
                    3d:d4:d7:be:a7:e9:ea:62:e1:9a:ca:c6:79:c3:0e:
                    55:53:4c:49:63:00:1c:1d:79:93:e3:8c:2e:29:ff:
                    9b:29:05:7c:d8:60:e7:89:4b:e7:93:07:df:0b:2d:
                    2c:0e:a9:a2:53:6d:b2:5a:f0:13:08:79:1c:70:dc:
                    58:40:cd:75:f1:7b:ef:9b:b1:b9:fd:2e:dc:53:8f:
                    7b:e4:58:ac:14:70:7b:12:2c:3c:e6:65:56:a1:13:
                    50:a3:eb:31:7f:44:99:52:4c:89:20:53:d7:29:18:
                    43:48:03:24:94:7d:63:7d:bf:a4:bb:87:e8:ad:e3:
                    65:f1:06:3b:e8:1b:79:ec:55:2f:d5:08:67:29:47:
                    e3:e3:6f:a0:83:1e:b0:0d:a3:d4:0b:85:e5:9d:49:
                    a1:64:d9:64:5c:71:25:21:67:bf:5c:30:ba:3f:c1:
                    f5:c8:93:14:ec:36:1b:1a:67:06:53:11:a2:e8:17:
                    15:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:DE:1C:D7:F8:9D:28:78:5C:D1:2A:CF:51:A4:ED:BA:12:31:A3:51
            X509v3 Authority Key Identifier:
                keyid:88:FF:4E:E6:23:D8:FA:B7:3C:90:1D:0C:BD:C9:3A:32:1E:9C:CF:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/eaf2e2-1817-40a8-9be8-2507db32c1c4/1/iP9O5iPY-rc8kB0Mvck6Mh6cz7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:7b:22:b7:68:0b:31:71:e2:4d:8a:7d:c3:5a:7a:6c:0c:74:
         97:ed:56:40:f7:24:60:e2:b3:0d:c6:5d:ff:35:36:72:0f:9e:
         8a:39:f3:5b:4f:d5:3c:cc:77:74:df:93:26:1c:40:ca:34:79:
         df:38:1e:ed:20:12:71:28:14:50:b7:eb:8d:23:48:ab:17:9c:
         ca:9e:ef:40:8b:ce:45:96:f3:f8:25:74:bf:fc:ce:0c:94:f4:
         15:88:ed:1a:7c:7e:04:bc:6c:3f:ff:67:49:01:04:f0:fe:55:
         33:0e:9c:46:17:4b:35:ed:89:01:ab:53:c3:ac:ff:42:a7:10:
         90:e3:a4:83:67:27:a3:9d:19:bc:32:0a:6d:e4:e7:07:d3:e9:
         ad:f3:85:06:b5:7d:22:74:e8:3c:ef:aa:bb:12:8e:5b:5e:8d:
         0e:4e:6c:39:76:83:ac:f2:23:e5:a0:93:8e:57:54:ea:8a:6f:
         f6:0c:b5:8a:f3:c4:e2:ea:06:5b:38:01:8f:76:45:09:4e:c5:
         30:ea:1a:58:56:54:e0:ab:69:59:4c:f0:0d:33:30:06:56:5e:
         e1:ce:08:a7:83:75:0c:36:7f:ce:8a:97:41:02:41:c3:20:af:
         c2:45:51:71:da:65:98:af:20:4f:ce:2c:98:0e:65:2e:73:53:
         e8:fa:09:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----