Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft
File:                     iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft (raw, json)
Hash identifier:          vksbID2G7Q4JKoZ5mdTbymzT0Uy3hI40uDCvIlXsv+w=
Subject key identifier:   1B:A2:97:CD:02:63:C1:C9:AE:DF:AB:9F:D3:1A:8E:EB:7F:EA:D0:3E
Authority key identifier: 89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08
Certificate issuer:       /CN=896a82a725ed22bb46847ae568912078de25c108
Certificate serial:       01962DF3E7525EC3E54FCB0BA17ECA77034F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft
Manifest number:          14F5
Signing time:             Sun 13 Apr 2025 07:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:21 +0000
Files and hashes:         1: 1DkWoYQm2CYL8NcPditLkUCz0lY.roa (hash: WyOC+C/qv1YH3uRFOHpvx69KEYldJQ9ngZYV7GVibxI=)
                          2: 6qHqGf1lu-fFKG9vb1_H15ADuJo.roa (hash: gDMApq50Y9wGQLSLp13vWrDWiuCmDUvoHVz6wC2AjEE=)
                          3: LSo0XxjpXr0DzXCFwSii4YX0VQQ.roa (hash: 2mkDU8WQtOKRRgS6azU91vya8dzOKN960jNf5zxA1Jo=)
                          4: YVY9nIlUnxzvYvUHcuswYdgv-5c.roa (hash: de7Nhke3BR4RbsVq7LgDRBaPDz0mhJShPdisp8UZut0=)
                          5: YaHy853da93BgH6RfguxUPJfVLo.roa (hash: 0j9KCyGYrKnVsUjih9K2QETrLLFsgZaBmann0nAUaSU=)
                          6: _PDfqiydgAhxO9j0sxCdFKtIkKc.roa (hash: YOuCdaiFwxVca+9zs4xrpramJM629b4/EHiWgyL8CG0=)
                          7: h5s-RrqHnVtybQpFRQ5VYLEm6yM.roa (hash: /wt/zGlyKyo5yBKQsxdlAjFg6RgIZkpoAWM7K7t2AFA=)
                          8: iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl (hash: XGTUATA0h9t9cmvgNb9t/HZBl5pjN97KXzGS+sQS7Bk=)
                          9: kA7t86VhHLfxpZem9_pfnrfA8Jw.roa (hash: JdzmdB6Yw1EEixYlbi2OlJNyDFF6uk/A+LWmVNqQ7XY=)
                          10: w9tecX0WpG6EBeEQV6lN7pOizZM.roa (hash: r56/6xcnyNBLy2vRf5p/uK/JECPQgO4M3DafNXdoW0g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:e7:52:5e:c3:e5:4f:cb:0b:a1:7e:ca:77:03:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=896a82a725ed22bb46847ae568912078de25c108
        Validity
            Not Before: Apr 13 07:01:21 2025 GMT
            Not After : Apr 14 07:01:21 2025 GMT
        Subject: CN=1ba297cd0263c1c9aedfab9fd31a8eeb7fead03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:17:8a:e5:98:8a:bf:96:b1:4a:11:56:fc:
                    e3:79:2d:d8:19:49:41:e3:3e:66:38:b7:73:1e:c1:
                    c9:c4:73:87:1f:69:a8:4f:6d:e1:fb:dd:7b:1e:67:
                    63:e5:98:72:07:82:43:9a:5d:53:ad:94:4d:66:1a:
                    0e:6c:d8:3e:6e:1b:47:49:60:5a:88:ea:08:77:f1:
                    a2:94:f6:77:42:af:0a:ec:5c:52:44:eb:35:6b:97:
                    a1:0f:e2:31:96:98:e1:0b:0b:74:90:23:6e:ee:ae:
                    03:ef:1a:01:da:84:e3:cc:a4:92:2c:91:6c:09:9e:
                    ce:eb:f4:3f:a7:dc:94:ca:a0:5e:eb:b7:99:d4:02:
                    3b:58:aa:a2:25:2d:41:14:ff:21:fd:97:a9:62:a3:
                    6f:45:cf:30:6b:c6:4d:96:95:d8:9e:2e:53:9e:9f:
                    05:da:6d:ce:63:05:7b:3b:90:a7:ef:4a:5a:da:52:
                    1e:b2:5c:24:ff:c6:49:13:e7:7e:de:60:47:8b:2d:
                    4a:5a:f3:c8:be:97:ea:89:ba:1c:99:9a:3c:45:f7:
                    ed:11:2a:93:b7:89:73:4e:c4:b1:05:90:84:6e:bb:
                    40:f5:06:1c:37:b4:4e:a0:3a:f4:c9:e1:c3:07:40:
                    b4:1e:13:99:21:72:42:63:55:4c:42:92:a9:14:a3:
                    a3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A2:97:CD:02:63:C1:C9:AE:DF:AB:9F:D3:1A:8E:EB:7F:EA:D0:3E
            X509v3 Authority Key Identifier:
                keyid:89:6A:82:A7:25:ED:22:BB:46:84:7A:E5:68:91:20:78:DE:25:C1:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqCpyXtIrtGhHrlaJEgeN4lwQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/3fc8da-3515-434d-9f0e-040127102209/1/iWqCpyXtIrtGhHrlaJEgeN4lwQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:d7:30:78:76:13:73:63:ae:b2:61:b9:5b:6d:9e:d8:e9:7e:
         ab:9a:11:36:96:74:0c:aa:8c:e0:d8:7f:d4:bd:00:fc:60:b3:
         64:1d:51:7d:ae:a0:1a:16:15:5e:4c:86:b2:3b:eb:03:98:4c:
         50:2e:10:f7:c2:80:26:f3:70:99:81:ff:a3:ce:9e:94:ce:aa:
         65:52:bc:1a:87:8d:79:7b:2f:74:74:e4:dd:dc:51:7b:4c:93:
         fd:99:66:50:ab:83:ed:98:59:02:fd:e7:ca:44:36:4a:3b:39:
         62:dc:31:ca:cc:84:2c:2a:2a:af:46:18:12:4e:5c:94:2c:66:
         b2:14:da:0f:86:7e:1c:ae:c9:e3:5b:d3:90:c5:50:0f:e3:7d:
         6f:32:f6:12:e2:7f:82:79:af:8b:92:50:7b:26:98:21:41:be:
         c0:d7:39:ba:1b:e3:37:5a:ba:f9:a9:23:8a:24:d5:f1:2e:bf:
         56:ac:78:19:78:c1:6d:11:0d:8b:3e:d5:e2:6f:86:8a:b4:67:
         f5:ec:7f:09:c0:3b:2c:fa:25:51:69:e0:36:83:e2:4c:be:41:
         5c:92:f7:63:08:96:0b:49:98:6d:fc:53:82:50:ae:95:ec:3c:
         01:46:77:6a:75:09:8c:68:1d:8e:13:b6:d0:ef:d3:7d:12:de:
         a0:ea:1e:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----