Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
File:                     iP4ZBc16825jraY2bBR7Ydhcnys.mft (raw, json)
Hash identifier:          nZWW0iGSUDcU7pvQGz6pa9L21dm1jpcxqBVGixnFOcM=
Subject key identifier:   FE:B4:22:C7:EF:2A:92:79:1A:D4:3F:C6:E3:6D:8F:37:D1:58:6E:57
Authority key identifier: 88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B
Certificate issuer:       /CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
Certificate serial:       01962ECF572B509C62094FA8E0FB439DBDA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft
Manifest number:          062C
Signing time:             Sun 13 Apr 2025 11:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:02 +0000
Files and hashes:         1: DSjiByReVAFtGenTha4D-8dSQJA.roa (hash: LTaqsJLmNorNuR9w6MCAPY47C39e6eSxiN8KzBSficg=)
                          2: N3Ms1tO5Rc3q58ZodMbwcW3QRxA.roa (hash: QeEjLFu1bfyi8L5wOE2F/BxSn3Wihpq/1jEicr1OiIU=)
                          3: iP4ZBc16825jraY2bBR7Ydhcnys.crl (hash: /EBe64evXgs2TNnqccIoIpJ8D8nphy45hSrChIu17IA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:57:2b:50:9c:62:09:4f:a8:e0:fb:43:9d:bd:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88fe1905cd7af36e63ada6366c147b61d85c9f2b
        Validity
            Not Before: Apr 13 11:01:02 2025 GMT
            Not After : Apr 14 11:01:02 2025 GMT
        Subject: CN=feb422c7ef2a92791ad43fc6e36d8f37d1586e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1b:3a:d4:cb:88:51:ee:26:04:79:8b:93:60:
                    a9:51:a6:41:7d:7d:44:a8:95:8f:8a:86:6e:57:11:
                    90:fe:d0:8d:92:29:cb:c4:bf:28:ac:c3:9b:0a:38:
                    79:0f:c7:aa:16:76:a9:61:73:35:49:f6:88:38:b8:
                    0c:25:18:78:fd:ae:bc:c1:78:92:f7:8b:3e:f2:34:
                    f3:0e:62:30:90:f1:d4:d1:50:62:db:31:f8:39:09:
                    88:0a:d9:09:51:e3:94:c3:c4:59:0f:eb:2d:3e:8c:
                    7d:66:48:1f:ee:70:60:b2:d7:b2:f7:38:62:19:aa:
                    ef:55:ca:2b:fe:1d:00:6e:e4:e8:36:f9:cd:87:a9:
                    5f:98:c0:e4:86:e9:14:53:ce:4f:c1:64:1c:86:8d:
                    b2:2c:8a:dc:5c:5b:7c:de:6c:f5:7d:0a:99:d8:ba:
                    c1:fc:f6:70:e7:e9:e5:fa:3d:0c:6a:73:00:df:55:
                    ac:34:96:56:a8:c0:71:5f:de:ed:ea:70:2f:13:cd:
                    c4:2d:6d:15:4a:41:09:a6:dc:26:9d:83:c6:cd:7c:
                    1d:ae:b6:0d:f2:0b:1b:5c:ff:12:2c:f7:95:6c:cd:
                    dd:9c:f1:ea:3d:ab:77:0c:86:4c:fe:2e:90:64:c1:
                    fb:f9:80:9d:3f:5d:b7:54:0a:7d:92:5d:e2:bf:d6:
                    fd:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:B4:22:C7:EF:2A:92:79:1A:D4:3F:C6:E3:6D:8F:37:D1:58:6E:57
            X509v3 Authority Key Identifier:
                keyid:88:FE:19:05:CD:7A:F3:6E:63:AD:A6:36:6C:14:7B:61:D8:5C:9F:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iP4ZBc16825jraY2bBR7Ydhcnys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/31952a-608c-468e-a00e-d633aa70dd66/1/iP4ZBc16825jraY2bBR7Ydhcnys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:2e:eb:1b:e9:e6:e3:e0:95:5f:d6:a8:94:80:86:e1:3e:e2:
         07:8f:43:b7:8d:40:16:df:07:77:b6:ea:19:33:1e:8b:ad:80:
         a8:85:6f:e4:6f:95:ce:1f:98:f3:bd:ce:ad:d1:b6:ff:24:d2:
         93:14:2f:a4:ef:71:99:a9:0f:12:a0:63:9e:3a:6a:59:dd:df:
         43:93:e9:5c:ef:e7:b2:80:3d:78:c2:39:e2:78:94:86:ce:b1:
         a5:f7:bb:11:99:b5:b8:94:82:6f:5c:35:e6:63:06:17:15:fa:
         10:af:3c:3a:e6:7d:0d:9b:85:38:83:fe:b0:e3:41:f0:aa:b1:
         07:a1:76:78:21:43:5d:d2:bc:70:0f:55:55:76:94:48:dc:ff:
         b9:37:7b:c6:79:2f:3b:75:90:55:5e:8a:c9:ba:4f:7f:65:e0:
         ce:7c:4f:d5:75:e0:65:5b:a9:1b:19:01:5d:00:af:cc:b5:e1:
         17:3d:80:c1:d4:3e:39:04:79:80:d4:f5:b3:05:10:a4:56:17:
         e1:47:39:56:53:60:b5:10:8e:50:1b:0f:16:5f:bb:ad:88:a0:
         70:a2:2e:3e:ca:36:73:20:d2:fe:dc:83:10:25:a2:9b:4c:c5:
         ab:0d:4a:7b:da:b9:65:cb:03:9b:7e:dd:76:a9:f8:d3:32:ea:
         d8:94:97:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----