Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.mft
File:                     IyYoKFK1RzuXS_-ersILA6XyAQ4.mft (raw, json)
Hash identifier:          uQE6ZPvFrgh6AXI9yEQPMqOoW6u+PfsYZCz12r13xXw=
Subject key identifier:   04:CB:8E:CD:97:E5:61:E1:90:93:60:EC:89:6F:BF:95:5D:F8:AC:32
Authority key identifier: 23:26:28:28:52:B5:47:3B:97:4B:FF:9E:AE:C2:0B:03:A5:F2:01:0E
Certificate issuer:       /CN=2326282852b5473b974bff9eaec20b03a5f2010e
Certificate serial:       01962DF3DD89BEAA6AC5384766EF438E72D1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IyYoKFK1RzuXS_-ersILA6XyAQ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.mft
Manifest number:          01E8
Signing time:             Sun 13 Apr 2025 07:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:18 +0000
Files and hashes:         1: IyYoKFK1RzuXS_-ersILA6XyAQ4.crl (hash: q+Ws+PAGh1Nr69T2tZZtk6NLzhc56QDRyXzIMH4pTZo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:dd:89:be:aa:6a:c5:38:47:66:ef:43:8e:72:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2326282852b5473b974bff9eaec20b03a5f2010e
        Validity
            Not Before: Apr 13 07:01:18 2025 GMT
            Not After : Apr 14 07:01:18 2025 GMT
        Subject: CN=04cb8ecd97e561e1909360ec896fbf955df8ac32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e0:4f:78:cc:70:dd:42:75:90:d7:29:3e:70:
                    27:e6:01:4b:9c:80:f2:bc:fc:e5:04:69:13:d3:03:
                    93:08:95:ab:e9:d5:fc:8d:ea:28:bd:53:2f:95:db:
                    ff:cf:1d:cb:44:f0:0a:7e:41:e9:75:39:25:55:76:
                    be:2e:e6:27:99:b7:a3:eb:f3:57:8c:46:9b:dc:3c:
                    27:7a:1e:a4:41:78:d3:ee:ca:59:08:33:c2:e5:3b:
                    bb:ca:bc:50:9a:e3:a4:c0:4f:2b:11:6c:ae:de:d3:
                    fd:17:c2:47:07:cd:3b:42:7e:73:ef:c0:2d:5f:6a:
                    61:7d:2f:1c:0f:19:3e:66:c6:d3:cd:8c:3d:ad:17:
                    99:26:38:5a:28:44:89:1d:c8:06:ec:b1:80:00:16:
                    7b:56:ca:e2:77:cf:b5:53:b4:0d:af:10:e4:99:41:
                    03:3b:7b:d3:7c:7a:03:4e:62:20:43:7c:1b:84:89:
                    fe:17:37:2d:40:10:a0:b9:ac:df:41:88:d1:c9:86:
                    a0:f5:cb:cc:43:7e:59:a3:86:0d:d7:a4:4a:eb:c9:
                    dd:56:38:fc:35:2a:92:0e:98:6e:ab:7e:8f:8e:ef:
                    36:c1:8e:46:f3:87:ab:a5:1e:7e:06:a5:c8:22:59:
                    c7:fa:66:ee:56:53:73:fc:95:bc:79:0e:ef:01:74:
                    ba:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:CB:8E:CD:97:E5:61:E1:90:93:60:EC:89:6F:BF:95:5D:F8:AC:32
            X509v3 Authority Key Identifier:
                keyid:23:26:28:28:52:B5:47:3B:97:4B:FF:9E:AE:C2:0B:03:A5:F2:01:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IyYoKFK1RzuXS_-ersILA6XyAQ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/8901b4-a821-4fc6-943a-f769e5426d20/1/IyYoKFK1RzuXS_-ersILA6XyAQ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7f:f2:e6:c0:51:d3:c2:34:31:da:f3:b1:5f:d0:30:c8:0a:
         06:71:c4:58:82:87:55:f8:46:0a:1a:da:54:48:7d:89:98:46:
         8e:73:33:00:f0:cd:e4:2f:5b:59:13:98:7e:6c:5a:b1:90:a5:
         14:4e:89:ca:04:53:d8:a2:72:6c:c9:fb:69:e6:e7:35:09:8c:
         90:ea:8f:06:b3:35:fe:51:a2:7c:b1:78:f1:4b:0b:75:73:9b:
         86:69:e8:c8:34:bd:fb:cf:20:37:11:fd:c9:e9:6b:f0:08:9e:
         f9:9b:9d:d1:01:f9:00:4a:b5:7b:d6:86:97:f7:b3:9a:f0:c5:
         ab:38:08:22:3b:3b:fe:6f:ef:a5:8c:f5:6b:e2:ee:d1:30:b3:
         15:4a:c6:8a:d8:62:f7:bf:60:21:97:43:88:ed:7b:a5:fd:f9:
         24:98:c9:29:ad:1e:c5:37:a2:92:27:68:56:6b:0a:97:3e:db:
         d9:6b:c5:cc:19:41:22:1d:54:30:af:b2:49:19:77:23:b0:da:
         2e:e6:0f:0a:ad:81:cf:94:06:b9:e6:bf:6a:6b:6f:bd:96:c7:
         7d:5d:71:09:d2:84:0a:ce:be:41:35:1b:1e:bb:a1:be:20:d0:
         41:ed:1c:56:e8:2c:28:67:75:d6:38:9e:c2:33:cb:02:8a:b2:
         be:05:85:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----