Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
File:                     IVBgNbMswzrwWJxVvoSXdeksRpM.mft (raw, json)
Hash identifier:          AaSwrCKlyqXsbiGnwR2HqeiJiHoApeLIjvkm0r0yHZk=
Subject key identifier:   41:AE:10:7A:EC:9E:BC:F8:B6:61:67:08:59:58:A9:09:C4:AA:C8:E2
Authority key identifier: 21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
Certificate issuer:       /CN=21506035b32cc33af0589c55be849775e92c4693
Certificate serial:       01962DF405F48CA3D927411F41835212F607
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft
Manifest number:          11F8
Signing time:             Sun 13 Apr 2025 07:01:29 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:29 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:29 +0000
Files and hashes:         1: I1R3to4OG_lNOOBtkQLneyBTnz8.roa (hash: FMbiRiL06k35Wxnm+65HlWTTvYTK4mOLvCtx0FDCwp4=)
                          2: IVBgNbMswzrwWJxVvoSXdeksRpM.crl (hash: 6hfDSvue6mYb6xnrl9Mg6kIapx7L1q9c+xKc60FQCs8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:05:f4:8c:a3:d9:27:41:1f:41:83:52:12:f6:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21506035b32cc33af0589c55be849775e92c4693
        Validity
            Not Before: Apr 13 07:01:29 2025 GMT
            Not After : Apr 14 07:01:29 2025 GMT
        Subject: CN=41ae107aec9ebcf8b66167085958a909c4aac8e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:47:cf:93:34:a8:f3:78:24:5a:37:7a:d4:e1:
                    d1:cf:6c:4f:65:6f:f4:4a:cc:46:a1:48:f2:86:66:
                    fb:37:26:d1:46:c1:06:2b:df:f2:f6:d2:98:3f:ae:
                    fa:aa:47:97:48:10:81:ed:fd:bf:93:e5:f4:5d:61:
                    c0:b0:7f:d2:18:11:de:d6:73:d0:2f:9e:89:23:85:
                    20:a4:a2:4b:f4:21:39:f1:c2:cc:b6:3e:2a:41:cb:
                    61:13:59:2f:da:db:2f:d4:69:30:b3:c7:05:ca:0e:
                    44:21:2c:a4:f4:46:50:0c:01:dc:c0:cb:4c:cd:02:
                    b9:28:24:c7:ff:49:6c:3a:b2:79:2c:b8:7b:6e:41:
                    ea:e5:8e:ca:08:ab:b5:f7:c6:76:34:43:e3:f5:36:
                    86:b6:7b:64:09:89:04:3a:d5:da:d3:a1:68:8b:12:
                    39:a6:f0:d8:3c:cb:41:30:d1:6e:58:55:e7:4d:98:
                    94:00:cd:00:d5:db:c5:d9:05:1f:b3:8c:e1:61:e9:
                    83:47:48:1c:78:46:76:4f:07:49:a2:7d:09:ac:b4:
                    6c:cf:0f:9a:a2:20:5f:9a:25:a1:e4:75:ff:30:34:
                    dc:86:7f:0d:54:2b:1d:76:f0:a4:4d:19:65:5a:4d:
                    80:d1:f6:ad:e4:fb:16:60:dd:26:b4:5b:d2:19:c1:
                    b8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:AE:10:7A:EC:9E:BC:F8:B6:61:67:08:59:58:A9:09:C4:AA:C8:E2
            X509v3 Authority Key Identifier:
                keyid:21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:93:d5:30:b5:2b:93:13:ca:90:cd:1f:07:2b:f0:ad:a7:79:
         b1:9f:ca:0c:5a:66:da:a5:22:49:8f:a2:35:31:44:59:47:f7:
         90:d4:05:6c:15:64:b6:b4:04:00:ad:06:d1:21:6c:4e:cb:44:
         7f:27:a4:b2:f7:d8:78:81:7d:aa:d6:86:3c:01:4d:64:2e:7c:
         33:65:c4:0c:c2:2d:87:fb:5b:bc:1d:5c:c5:5b:d0:10:98:1e:
         dd:fe:c3:da:7f:c7:d7:0e:1f:90:0a:1e:06:3e:2c:ac:e0:e5:
         8f:e7:15:d3:4f:47:ec:ee:bd:3e:eb:26:24:2d:44:9a:6b:84:
         84:e1:ee:7e:2f:83:34:83:a2:d2:99:4d:f7:2c:e8:29:38:cf:
         18:6d:cd:7e:d8:ca:14:21:a2:c6:a4:e2:cb:3f:98:08:e0:a9:
         d2:8d:94:a0:d1:3e:07:ad:c4:30:db:20:3a:a5:31:65:f6:dc:
         ba:1b:3f:04:25:fa:46:06:23:18:39:41:2b:3a:0e:28:70:27:
         3b:54:1a:46:de:a6:14:d5:48:a1:55:8e:99:a1:b3:66:6c:9d:
         e1:50:0e:10:f8:c8:2c:3a:25:ad:e2:98:cb:81:92:8c:b0:b9:
         6a:a1:c1:29:ba:e9:ad:a3:7c:f2:40:60:6d:3c:ed:6e:2c:71:
         fc:14:49:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----