Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
File:                     igjCi-FVFikLnaUTXlj1X7uA_7Q.mft (raw, json)
Hash identifier:          8dRIZCP0gw9nHkz+oaVWFbGsumjxE7eYMVjrbUHCyPs=
Subject key identifier:   4D:24:C6:94:B8:44:B8:A4:1E:28:4B:90:EB:83:E1:98:37:C4:09:CF
Authority key identifier: 8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4
Certificate issuer:       /CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
Certificate serial:       01962E98696115C2DB059EDE725254204541
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 10:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:02 +0000
Files and hashes:         1: K1ZIbWVMCfOW-sru8Cq6hfagUF8.roa (hash: rL+dt6lYtJBORwZR6VP2yFNbGPaQQW0srIcKRe9EHMc=)
                          2: W5c6_2upbADmq1K-psylJktpo-8.roa (hash: D7dJaOoXdffWdL/3wJFJkqGRbSD4Xs0mdOEO0fMkEro=)
                          3: igjCi-FVFikLnaUTXlj1X7uA_7Q.crl (hash: T0TDoPRFxPVzcyPxVR6RLhE/vAoZs6Kd4O276UOXAvk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:69:61:15:c2:db:05:9e:de:72:52:54:20:45:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a08c28be15516290b9da5135e58f55fbb80ffb4
        Validity
            Not Before: Apr 13 10:01:02 2025 GMT
            Not After : Apr 14 10:01:02 2025 GMT
        Subject: CN=4d24c694b844b8a41e284b90eb83e19837c409cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:b7:c7:b2:96:85:fa:75:eb:67:9d:8d:03:f1:
                    cb:4a:89:ff:2a:98:cb:28:fc:69:51:dc:cc:83:c5:
                    4a:9e:4c:f5:c2:53:e9:31:cc:f3:9c:72:7d:0e:b4:
                    8c:91:6c:27:f3:f7:f7:d9:3e:9e:72:c1:44:2d:5f:
                    af:1a:66:c1:1c:97:bf:d4:f0:b7:3b:8f:00:79:a0:
                    07:0b:01:73:3e:70:50:e6:db:6f:8f:da:d4:61:64:
                    5a:22:6f:e2:e4:81:84:f8:bb:7f:66:31:65:29:d0:
                    65:91:b1:0e:7b:03:f9:03:96:36:c1:d3:43:99:0a:
                    16:4b:9b:e9:31:b6:15:d7:2c:28:6d:5c:f5:03:7d:
                    bd:38:c2:b2:ec:db:d5:93:24:3c:b9:1b:2a:41:bd:
                    0a:da:71:10:94:1a:5b:e8:05:7c:e2:64:77:b5:35:
                    33:f5:bc:4b:2f:33:e5:c3:c1:62:33:71:16:a2:ae:
                    c4:1e:c5:9f:c8:f4:cb:e8:d4:20:0c:01:87:a5:36:
                    28:be:d3:d8:ba:29:27:91:b6:3d:d5:c4:68:03:88:
                    46:0c:0b:03:b3:23:e6:a5:27:55:ff:fb:cf:77:c6:
                    6e:b7:17:9a:29:39:67:8c:73:5f:a4:b0:18:e5:25:
                    db:c2:ad:54:e7:5d:d7:10:a2:c8:18:97:03:9f:e9:
                    2e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:24:C6:94:B8:44:B8:A4:1E:28:4B:90:EB:83:E1:98:37:C4:09:CF
            X509v3 Authority Key Identifier:
                keyid:8A:08:C2:8B:E1:55:16:29:0B:9D:A5:13:5E:58:F5:5F:BB:80:FF:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igjCi-FVFikLnaUTXlj1X7uA_7Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/672af8-3348-4213-b47c-0618c9a8cac4/1/igjCi-FVFikLnaUTXlj1X7uA_7Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:12:3a:37:d1:05:9e:01:3e:2e:87:c7:2e:21:5b:ce:e9:d7:
         09:9a:a3:49:76:81:b7:81:85:3f:b3:ee:f5:b0:ad:a9:4c:64:
         90:54:45:fa:77:7a:53:a7:18:a4:91:45:2c:9f:87:c6:cb:d1:
         f1:d4:01:ff:31:35:a7:5d:c6:45:4d:ca:b7:44:db:90:8f:59:
         2b:02:b0:2a:73:0e:58:0c:6d:ec:6b:1d:fb:38:1c:32:fa:db:
         e5:49:74:ae:c3:92:b7:d5:15:41:30:af:37:a1:ee:cb:ad:5a:
         30:c1:a6:3f:e4:ab:8d:c3:e9:5f:8e:bd:64:e0:b8:7f:fc:d8:
         b6:87:3e:10:9f:ca:30:58:d7:80:e5:96:c6:6a:69:76:ff:c4:
         7f:9e:ba:e3:f3:ca:8b:cf:12:9a:e4:a1:b9:d7:55:33:82:4f:
         50:ba:0d:b8:72:f6:6e:a1:d6:df:88:c7:0c:57:8d:b0:72:06:
         36:58:58:d8:c2:55:4c:8e:96:f8:5f:37:93:dc:e8:21:52:c7:
         7c:77:e1:a5:74:de:51:04:c0:38:ae:59:3a:a1:8b:21:8c:9b:
         00:a5:9b:e5:ab:45:f2:9d:df:18:26:74:47:6f:56:ce:9d:6d:
         0c:37:75:0c:75:44:2b:91:23:4c:f6:f1:63:21:a2:46:23:ae:
         a6:49:5d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----