Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
File:                     iWkzRGOKywU2WC-rCJh2V472vFY.mft (raw, json)
Hash identifier:          EzF0f5dIEV2wDe38N9MQ7REyKAS9HXlOIr339ZxEvK0=
Subject key identifier:   F3:08:B9:D4:BF:2F:38:A5:39:D4:86:C9:B1:97:4D:4C:F1:B7:E4:72
Authority key identifier: 89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56
Certificate issuer:       /CN=89693344638acb0536582fab089876578ef6bc56
Certificate serial:       01962E99AC7A512CB553428E5C9979AD18ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 10:02:25 +0000
Manifest this update:     Sun 13 Apr 2025 10:02:25 +0000
Manifest next update:     Mon 14 Apr 2025 10:02:25 +0000
Files and hashes:         1: fCZrKI-6j3JypnfEm5_gs1n5dFw.roa (hash: iZ/p7v8ZHeoQxTyUiH1KnvRb3hj8zk8sCV0wmzxeW2k=)
                          2: iWkzRGOKywU2WC-rCJh2V472vFY.crl (hash: AU6Zn2jkAYix7LBczrxUB8dF7Y5WXhGpNE/7ONvWNX4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:ac:7a:51:2c:b5:53:42:8e:5c:99:79:ad:18:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89693344638acb0536582fab089876578ef6bc56
        Validity
            Not Before: Apr 13 10:02:25 2025 GMT
            Not After : Apr 14 10:02:25 2025 GMT
        Subject: CN=f308b9d4bf2f38a539d486c9b1974d4cf1b7e472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a5:fa:14:55:71:c0:4a:90:3f:ed:38:0d:db:
                    74:25:f2:03:80:1f:79:70:38:bd:f5:7f:86:c1:30:
                    6f:bb:76:a4:60:d1:1a:b4:9d:52:4c:d9:9f:ed:bd:
                    e1:00:3c:0d:3a:83:27:d6:cf:1f:30:bd:ec:42:df:
                    5d:8b:d0:85:4c:d4:f3:e1:13:8f:a5:ff:0a:a1:e5:
                    a2:86:74:57:f7:c8:de:1b:ce:a9:ec:d5:9d:80:e9:
                    47:9c:14:12:b4:61:81:4b:bf:e7:ba:ce:c7:d3:51:
                    be:c6:c7:44:42:02:81:2d:91:9f:12:76:29:04:96:
                    d9:bb:58:c7:f0:1d:f4:81:40:f4:16:95:67:b7:65:
                    4b:0e:7d:24:83:e4:f6:40:a9:b0:d2:a0:46:f1:fb:
                    15:ac:c4:42:13:31:98:75:fa:2a:f6:b6:93:60:a1:
                    9a:0e:cf:b5:73:55:30:5b:c1:95:89:cc:89:61:a8:
                    00:3f:be:5c:16:3d:b3:28:67:4d:65:ba:22:0d:93:
                    74:81:9f:4f:d8:34:14:51:22:b5:87:da:02:25:b7:
                    94:f5:9c:dc:b5:d8:36:c7:f4:a0:2a:7a:8e:23:75:
                    88:10:d4:d1:d5:2d:6b:75:c6:15:df:23:69:1e:53:
                    3c:03:28:13:29:23:ac:69:55:8c:ff:8f:bb:4b:3d:
                    a5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:08:B9:D4:BF:2F:38:A5:39:D4:86:C9:B1:97:4D:4C:F1:B7:E4:72
            X509v3 Authority Key Identifier:
                keyid:89:69:33:44:63:8A:CB:05:36:58:2F:AB:08:98:76:57:8E:F6:BC:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWkzRGOKywU2WC-rCJh2V472vFY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7d8900-be76-40e2-8c99-70f943eac4db/1/iWkzRGOKywU2WC-rCJh2V472vFY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:e5:3c:c5:01:47:ed:ad:8b:2d:ac:35:69:0f:d3:a0:44:19:
         23:c5:13:78:6b:2c:46:73:5f:36:4b:96:e3:51:a5:00:ee:06:
         f3:37:c1:c3:87:0c:b6:2b:dc:db:69:65:40:b2:83:ae:f6:fc:
         3e:e5:b0:b4:44:e1:7b:6a:05:03:5e:31:a1:ba:0b:45:4b:c9:
         36:2e:9a:7d:f5:64:0e:fc:71:ce:dd:f6:2c:7e:a9:d1:e3:f2:
         06:2a:38:ac:37:f9:f0:55:57:cb:79:b2:3c:ad:2a:b4:2f:b5:
         1d:ee:9c:73:65:c6:6e:e8:e5:89:55:fc:9b:b3:fa:9a:26:a2:
         83:33:87:15:7f:a9:4c:15:99:99:2e:f1:d6:13:93:75:98:6b:
         e1:32:6a:2d:8d:e4:55:53:d1:10:f7:95:e9:99:3c:45:38:86:
         b6:a8:31:2f:34:38:ee:75:1f:61:60:8b:82:76:20:99:6d:a9:
         77:89:31:67:f2:f7:e4:af:b2:cb:59:1d:61:9c:40:c6:aa:39:
         fa:59:4c:3d:51:b9:8a:74:b7:60:c5:ef:d0:61:63:7c:ad:c0:
         20:07:60:3c:40:7b:cd:73:6c:2d:75:f8:31:aa:57:5f:8a:0b:
         56:d9:1c:5d:f0:ec:cc:29:aa:ae:7d:0a:c2:92:24:1f:d3:e8:
         5d:b5:e0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----