Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
File:                     1vrDln6phZIn2fe-dE4qbqSG4Rc.mft (raw, json)
Hash identifier:          qXSQbLLVXSJgd1XgtSlPMeB2P7B/EQVx27pj2LZzFyM=
Subject key identifier:   1E:BF:34:C7:B5:0F:50:12:E3:42:89:73:59:EA:55:68:06:99:51:1F
Authority key identifier: D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17
Certificate issuer:       /CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
Certificate serial:       01962F74813430B3678ABE4E701CED641ED0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft
Manifest number:          1422
Signing time:             Sun 13 Apr 2025 14:01:26 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:26 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:26 +0000
Files and hashes:         1: 1vrDln6phZIn2fe-dE4qbqSG4Rc.crl (hash: j+alKBctnHi28KEXdmb1q26arCQbPmGqh7RKP6BUhY4=)
                          2: DiY5VK-6JORpLYohOA3eEOX0gEg.roa (hash: tPQ07ahlxA30mMATuVo2hJ+wEmf9vgItJrH9Fyn7bOk=)
                          3: qaZi9O_cl0MumDzO9hU8yRiyop0.roa (hash: KJX3Yemun4G/B+fGxAEnLDKmtV4r8cWB99Xh182dcB4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:81:34:30:b3:67:8a:be:4e:70:1c:ed:64:1e:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6fac3967ea9859227d9f7be744e2a6ea486e117
        Validity
            Not Before: Apr 13 14:01:26 2025 GMT
            Not After : Apr 14 14:01:26 2025 GMT
        Subject: CN=1ebf34c7b50f5012e342897359ea55680699511f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:06:ce:88:8f:44:70:57:dd:2e:f2:69:9b:ec:
                    01:2c:3a:85:d1:f4:1a:04:23:ff:e0:9d:de:4c:24:
                    aa:47:2a:9e:7a:ac:ec:e2:14:55:a6:8f:41:5a:bf:
                    b0:2e:2e:31:79:91:b0:cc:4f:a6:f2:52:c3:82:b7:
                    84:14:20:5c:d4:7f:25:6a:49:c3:f8:e8:0f:a7:59:
                    8d:a7:fa:b0:88:73:40:66:54:d1:54:17:52:46:67:
                    ad:18:41:47:5b:c7:f2:89:9a:87:92:15:ec:c1:91:
                    85:bd:4c:9a:c2:bd:00:24:a6:3a:a3:9a:7d:80:9a:
                    17:57:46:f8:a3:b8:a6:69:29:92:73:17:ed:80:f4:
                    af:48:1b:f9:9a:a2:f3:a7:cb:fa:6d:eb:2f:bb:02:
                    62:38:4c:6d:5b:4a:33:7a:da:dc:d2:e3:43:43:a1:
                    25:79:98:04:5c:94:c1:19:20:9d:ed:e1:8c:38:d1:
                    ef:8f:f2:2e:1f:9a:f2:d2:69:33:0f:4e:64:16:26:
                    8e:2a:4d:d1:1b:1b:7e:7a:00:4e:f4:8c:18:88:95:
                    c3:45:c5:76:01:9c:ba:d7:db:3a:d7:74:29:95:3e:
                    a0:80:27:41:6e:36:ce:b8:ac:53:ac:80:62:c6:ae:
                    d5:6c:58:ad:ab:1e:3a:8f:44:5a:48:3f:33:10:0a:
                    ee:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:BF:34:C7:B5:0F:50:12:E3:42:89:73:59:EA:55:68:06:99:51:1F
            X509v3 Authority Key Identifier:
                keyid:D6:FA:C3:96:7E:A9:85:92:27:D9:F7:BE:74:4E:2A:6E:A4:86:E1:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vrDln6phZIn2fe-dE4qbqSG4Rc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/16fb84-fa29-41b2-8dbb-59decd8d5a0c/1/1vrDln6phZIn2fe-dE4qbqSG4Rc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:cd:23:fe:4a:39:3e:d0:37:d3:c4:75:db:de:7f:f1:6c:ee:
         28:d2:6e:d9:86:ec:26:b4:87:de:ac:14:e6:a3:30:f8:72:c8:
         42:17:f2:55:7a:6c:56:b4:5e:99:dd:54:54:c4:9c:a2:6b:44:
         2c:11:d3:4c:1c:1a:02:f2:0d:9e:24:60:29:ce:c0:f8:3d:76:
         7b:06:00:69:85:9b:77:4c:a3:48:57:a5:ea:fb:19:ac:98:3d:
         db:ed:17:fe:7e:0b:d4:5c:ff:d7:32:9a:8c:a4:a6:75:83:92:
         3f:aa:f3:69:73:74:be:15:e5:92:c6:5f:d8:63:3d:79:79:59:
         e1:84:32:c7:b0:43:38:c3:2c:c7:66:19:40:ac:15:56:eb:27:
         70:29:28:62:64:44:3e:f4:9f:9f:3e:c0:6a:62:1a:e0:40:e0:
         b8:69:4c:c0:e9:7c:c4:e2:1b:81:26:a6:76:0a:bf:22:a6:f5:
         c0:b0:db:fb:80:93:49:53:c8:fe:3a:eb:67:87:c7:fa:7e:5e:
         54:3d:64:71:7b:4a:f4:ee:c2:04:1f:b6:92:c3:bc:4b:02:56:
         e1:4c:9c:fe:d8:73:54:e0:63:95:a6:78:ee:81:f5:8a:dd:14:
         a1:5f:0b:3d:f2:f5:4d:81:93:47:7d:5f:c0:49:9b:d7:e7:7d:
         30:d7:3a:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----