Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft
File:                     IYCTB4hvuv261Th2Eu_-dxOHowA.mft (raw, json)
Hash identifier:          GWThMhtc7LWy/nq9tUS2Jw5lRY5a/VjWnimnS1ZMR3w=
Subject key identifier:   85:A1:1E:02:6D:FD:CB:8A:09:95:69:EC:F4:4F:66:66:15:85:DD:6D
Authority key identifier: 21:80:93:07:88:6F:BA:FD:BA:D5:38:76:12:EF:FE:77:13:87:A3:00
Certificate issuer:       /CN=21809307886fbafdbad5387612effe771387a300
Certificate serial:       01962E998E03925131768974DFF7510A87E6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IYCTB4hvuv261Th2Eu_-dxOHowA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft
Manifest number:          062E
Signing time:             Sun 13 Apr 2025 10:02:17 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:17 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:17 +0000
Files and hashes:         1: IYCTB4hvuv261Th2Eu_-dxOHowA.crl (hash: TUx4nPeedwsSOBbNmVhCQmjlzcYh3IU2TTbdVKxDqn4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:8e:03:92:51:31:76:89:74:df:f7:51:0a:87:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21809307886fbafdbad5387612effe771387a300
        Validity
            Not Before: Apr 13 10:02:17 2025 GMT
            Not After : Apr 14 10:02:17 2025 GMT
        Subject: CN=85a11e026dfdcb8a099569ecf44f66661585dd6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d5:d5:13:ec:80:aa:d7:be:f9:ae:8a:cb:45:
                    75:b0:20:9c:c4:7e:84:38:a6:b1:78:67:f0:5d:2c:
                    cf:cc:f1:0d:3a:5c:e6:4c:52:5f:a7:df:71:e2:cc:
                    35:16:91:72:1f:66:4f:90:91:04:a8:a4:fd:79:54:
                    c1:74:33:48:f1:05:14:48:00:55:77:8a:36:b7:25:
                    ac:be:7c:29:f6:1b:23:d8:2f:29:84:40:55:9e:58:
                    54:e1:eb:c7:4c:66:4c:64:aa:44:2a:40:7e:98:c7:
                    4b:07:fd:de:37:b0:56:6c:07:e1:9c:c8:8b:82:b1:
                    e1:b4:d6:e6:a3:00:6f:11:bf:29:c5:04:fa:74:c2:
                    d1:d8:1a:e6:31:7f:17:4a:60:14:60:8c:30:17:80:
                    30:77:63:ad:cb:7e:d7:d1:fa:24:d0:75:a9:3d:3f:
                    71:66:24:f6:78:1e:53:a9:7c:96:14:29:49:5e:4e:
                    ed:a3:d2:29:61:ae:36:34:a9:24:d5:6a:5b:9b:fb:
                    cb:0f:df:f9:60:64:00:7e:ef:56:78:34:be:c3:a2:
                    5d:10:57:61:5f:f5:3a:e2:81:d6:27:2a:23:2d:76:
                    31:4c:bd:a1:3a:55:f2:c9:8a:64:73:e3:0a:21:63:
                    62:f8:be:fd:b0:0d:9c:d6:9e:e8:5b:b3:e5:43:7c:
                    e4:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A1:1E:02:6D:FD:CB:8A:09:95:69:EC:F4:4F:66:66:15:85:DD:6D
            X509v3 Authority Key Identifier:
                keyid:21:80:93:07:88:6F:BA:FD:BA:D5:38:76:12:EF:FE:77:13:87:A3:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IYCTB4hvuv261Th2Eu_-dxOHowA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/a7cbaa-bb9d-47f5-922d-f708dad0eeca/1/IYCTB4hvuv261Th2Eu_-dxOHowA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:4d:36:b2:fb:0b:b8:ac:a0:da:21:8a:fa:d5:bb:22:bc:82:
         a2:85:10:24:a8:a4:bd:fb:7b:bf:91:63:f5:27:50:13:95:bd:
         2e:28:3c:fa:15:0a:7e:57:07:e5:48:bd:8a:c8:23:79:f9:fb:
         9e:db:93:1d:5d:dc:a4:da:63:cc:96:b8:0f:04:b9:a6:fa:ad:
         77:4e:7d:40:69:97:79:2f:79:55:0d:ba:c1:4d:62:89:44:85:
         ee:34:8b:74:90:e3:06:65:84:9e:ac:23:f7:f4:da:4e:60:fc:
         e5:79:4f:d4:0b:53:ad:b8:f6:06:93:e6:39:bb:5c:06:6e:e2:
         dc:31:8f:fb:45:7d:17:b0:1a:a2:80:06:28:c7:d3:f6:ee:cd:
         ad:91:29:0f:62:27:1d:dd:db:f2:01:aa:73:d4:96:a2:65:71:
         3f:5f:2f:10:1a:9b:77:d5:41:95:d4:0c:0f:dc:cc:6f:cc:7f:
         d4:e4:9b:b7:4c:77:d3:5e:e1:c7:dd:5f:ff:d5:a2:ef:d7:a3:
         85:56:8a:4f:97:ef:5a:be:45:a2:99:85:4a:37:42:f1:ec:1e:
         85:92:a5:96:89:8c:52:61:8c:22:52:28:b8:58:df:fb:71:16:
         15:bb:b8:e3:88:69:3f:85:09:85:75:3a:56:31:82:5c:29:3b:
         24:a2:ff:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----