Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
File:                     io0ZrTHISnSFawprPMEA5HorKqw.mft (raw, json)
Hash identifier:          QzEtnZaVMo8trXjh2l+21gCNCA0SYF3F1rGmNcnmgT4=
Subject key identifier:   26:60:31:1A:CF:9C:A6:E2:DA:26:DB:9A:87:DD:B2:8C:FD:48:53:24
Authority key identifier: 8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC
Certificate issuer:       /CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
Certificate serial:       01962F06A38BD3C66C4EDC365D6B39D43A16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft
Manifest number:          08E3
Signing time:             Sun 13 Apr 2025 12:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:26 +0000
Files and hashes:         1: io0ZrTHISnSFawprPMEA5HorKqw.crl (hash: /CjiO/Ha8U5wRco5bqzIBcPXWsj0UXiYrH7vfq54nGM=)
                          2: mXq5imVatjJhnnG6SsoqA-p0UNQ.roa (hash: 8CJwggTE1PoL2jvcGBTOZHCwbyGaj586VEqXhjgdUvg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:a3:8b:d3:c6:6c:4e:dc:36:5d:6b:39:d4:3a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8d19ad31c84a74856b0a6b3cc100e47a2b2aac
        Validity
            Not Before: Apr 13 12:01:26 2025 GMT
            Not After : Apr 14 12:01:26 2025 GMT
        Subject: CN=2660311acf9ca6e2da26db9a87ddb28cfd485324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ca:fa:0e:c7:04:93:14:49:25:82:af:70:0c:
                    e0:75:bc:05:a9:33:ca:8e:1c:f9:2e:dc:ff:42:b5:
                    12:25:fb:ed:ab:d6:b9:b2:dd:bf:f1:c1:5d:ec:58:
                    27:90:4a:c7:7d:47:7e:50:a2:02:3a:3a:c7:2a:aa:
                    07:1c:70:8c:fa:04:40:5d:96:0c:19:77:f9:60:f8:
                    b0:83:87:e3:b7:4e:16:ee:fd:40:73:ea:b2:5c:94:
                    ba:84:51:41:56:3d:2c:bc:5c:46:cf:fe:2b:39:bd:
                    4e:da:d8:16:55:9e:9d:68:e5:14:80:b9:27:ce:20:
                    2a:3e:f8:db:3d:39:28:b5:7e:fc:8f:e9:70:c6:60:
                    33:49:9e:ff:9d:8e:b2:f0:f0:57:ba:b5:b1:d2:fb:
                    c1:56:d2:83:92:21:34:1a:54:0c:f2:a2:dd:db:05:
                    55:81:b4:ef:c0:3e:3f:2b:35:43:46:a6:a9:77:fd:
                    34:6d:71:07:75:18:a7:46:57:2b:a7:42:fb:db:b9:
                    71:cd:b9:52:eb:3f:85:d5:9a:63:26:16:4e:fa:6f:
                    aa:ab:3f:4e:5d:0a:b0:e9:3f:2e:67:c6:7d:78:6a:
                    37:14:34:f3:b7:cd:af:63:a2:a1:b7:57:24:86:ce:
                    81:41:3d:64:54:55:c6:21:e6:4d:3f:75:6a:fa:0b:
                    6f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:60:31:1A:CF:9C:A6:E2:DA:26:DB:9A:87:DD:B2:8C:FD:48:53:24
            X509v3 Authority Key Identifier:
                keyid:8A:8D:19:AD:31:C8:4A:74:85:6B:0A:6B:3C:C1:00:E4:7A:2B:2A:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/io0ZrTHISnSFawprPMEA5HorKqw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/ff63a8-974c-4ccc-8cd8-24023403bb0c/1/io0ZrTHISnSFawprPMEA5HorKqw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:53:9f:52:ca:1b:98:24:88:89:a3:94:ae:5b:ab:f0:ef:a1:
         85:d8:2d:46:ec:48:de:c1:3d:98:16:68:3b:82:f7:7f:95:5c:
         3f:f8:60:f5:19:38:43:83:f9:e1:0d:78:c2:57:ec:55:14:f1:
         62:53:9a:23:71:0c:4d:dc:58:55:06:6b:86:f4:a2:ce:e2:da:
         ea:78:32:40:3a:54:6d:23:b5:35:fa:84:29:38:ca:f3:4a:9a:
         b9:ba:d9:8f:1f:39:91:71:21:95:dd:2a:72:8a:39:d1:b4:2b:
         57:4b:eb:78:84:84:f0:2c:bf:88:b2:68:d7:0b:69:89:39:63:
         10:6d:59:99:fa:c3:7e:7e:a4:a7:04:58:98:d3:eb:ab:ea:58:
         60:c7:15:38:b4:1c:22:c8:57:21:d3:1f:48:fd:0b:dd:0f:47:
         ce:3c:87:05:cb:d2:bc:f2:d9:16:db:98:18:84:dc:28:85:5b:
         7e:1d:c3:27:b9:b2:f2:3e:01:2d:5d:8e:d1:8e:7c:e1:75:07:
         09:08:3f:16:ed:92:7f:b7:78:4b:40:88:79:e5:bd:1e:28:2e:
         99:37:60:dd:dd:ca:25:09:89:28:f8:49:67:b0:ca:af:61:c8:
         5f:1b:16:a1:c1:03:79:e8:64:bb:c3:64:e3:58:d8:34:5d:e5:
         9c:50:c4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----