Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
File:                     IC9MGjfpMTzdLup3UK4CjRjNWq4.mft (raw, json)
Hash identifier:          JihxYaPtry5Rg/cFNdUMDk5okLZozHVcWTTAy+KNNFI=
Subject key identifier:   76:24:F0:84:21:55:55:BF:BD:65:C6:B2:66:C2:00:68:E8:40:D4:98
Authority key identifier: 20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE
Certificate issuer:       /CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
Certificate serial:       01962E2B26DCCFFB5BCA5C6C6FC68C8D3E3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 08:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:41 +0000
Files and hashes:         1: IC9MGjfpMTzdLup3UK4CjRjNWq4.crl (hash: ivLM0dSHmZpMv2SB/1mJkUm2Zvqx2LtHUsBjPL1hYY8=)
                          2: IpCJGLN8WNm4ASMIxNnGZPuEtp4.roa (hash: nrrSBtVL1+LxQy+ccPed0KobnXytQAq3RiSJBLbBVIg=)
                          3: NfNd6pjqYOF2P-1csZDDcYiiQ28.roa (hash: iQWQfc6lD74rDEabgsCAVeBcixywrixRVP1KpMFN48o=)
                          4: PJBAejzPvEvF3ZoupzGWVEj1Og0.roa (hash: BFJtqcfNldj6Jrfn0Y0+mOBk6xT0n483gTjn5ogYiu8=)
                          5: dSYYIsgqOPsPCWRb8n6bjaKooRw.roa (hash: Pvqr/OOkaqypvOSknbbOn2J0oHNnn5WhmVz2GaH3aXU=)
                          6: quZyu716dxS9mdBeGNCJZ1sGIZM.roa (hash: MPvLxa0c+riXjzyelLJV18hBBvFNCarL2WtEM/bk6Os=)
                          7: sx8Ag2ZkbPORNb5IpKGaIu2_Dqo.roa (hash: ZFFpoBJ2SvC/bg4XtAEwmcSclBY/i+xRWcdnLVCOAss=)
                          8: wUsJ3Y8bKRlwOlXMA6Qttd1Brps.roa (hash: zuU1UQuoYfDo2IQVUCO8dMMln85NIWVqpAhKwg/ayj8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:26:dc:cf:fb:5b:ca:5c:6c:6f:c6:8c:8d:3e:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=202f4c1a37e9313cdd2eea7750ae028d18cd5aae
        Validity
            Not Before: Apr 13 08:01:41 2025 GMT
            Not After : Apr 14 08:01:41 2025 GMT
        Subject: CN=7624f084215555bfbd65c6b266c20068e840d498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:42:8f:f5:75:93:1a:7f:2c:fd:43:74:2a:ee:
                    f6:b3:32:c5:53:e1:30:5f:4a:c8:56:5c:b2:d4:0e:
                    34:0a:1e:45:86:a9:15:72:e9:a2:7a:fb:d8:44:ef:
                    13:67:64:be:27:66:6c:da:5b:a3:d4:bd:ec:d4:d8:
                    f4:ce:ec:e5:d3:2f:a4:94:6a:85:e5:eb:88:85:ea:
                    9e:4a:52:bf:48:48:ac:97:96:2d:7c:af:8a:3d:91:
                    c7:1c:bf:dc:e5:58:06:f5:a3:92:b3:c2:7d:33:24:
                    8d:df:1d:ab:b0:78:0a:91:45:ad:d8:f2:cc:76:28:
                    c5:f3:b6:45:52:e3:fc:ea:3b:3e:44:91:20:06:8a:
                    05:3b:72:99:81:37:71:7b:21:64:50:e1:8d:a5:f0:
                    66:ef:55:2f:e1:e2:2b:bd:42:28:99:f7:0d:41:64:
                    f3:62:2f:92:c1:47:e2:c7:27:24:2c:3b:9a:a4:0e:
                    1f:64:e3:f3:f3:3f:ac:a1:2e:c9:9d:39:7e:ca:ad:
                    ec:b3:6f:f0:d9:83:ef:f9:f5:fb:85:63:77:3a:39:
                    a8:55:9b:eb:f9:5a:d5:6b:d5:7e:25:57:d1:5b:8e:
                    17:32:35:95:e0:5f:eb:47:1d:8e:12:86:6b:e9:4e:
                    c9:12:7a:a9:12:5d:46:47:1f:f7:2d:11:10:51:30:
                    da:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:24:F0:84:21:55:55:BF:BD:65:C6:B2:66:C2:00:68:E8:40:D4:98
            X509v3 Authority Key Identifier:
                keyid:20:2F:4C:1A:37:E9:31:3C:DD:2E:EA:77:50:AE:02:8D:18:CD:5A:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IC9MGjfpMTzdLup3UK4CjRjNWq4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/edb8cd-003d-483a-906a-f6b78e2b17a1/1/IC9MGjfpMTzdLup3UK4CjRjNWq4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:3b:2d:0b:73:7a:ba:1c:45:5f:ab:ba:3e:e6:0a:7a:52:36:
         c1:9b:5a:c7:4d:fa:46:4f:0f:d2:86:fd:c0:54:9a:03:6a:7d:
         24:0f:2f:ce:f1:59:44:a0:1e:ae:3a:55:b9:29:42:50:b8:4f:
         ab:fc:79:54:11:b6:61:e5:53:40:57:c4:6b:fa:6c:e5:3c:02:
         3b:b5:e3:0e:3c:11:57:79:31:88:e5:3a:d9:97:00:5e:f5:fd:
         eb:ef:7b:4a:d5:b0:a0:31:76:91:9d:41:4e:4a:98:86:2c:87:
         fb:60:eb:88:ca:e9:e9:cf:8a:89:1e:ed:f1:fc:93:07:6c:99:
         33:44:be:f3:18:52:7d:f9:73:a8:4a:4a:0f:50:74:66:f2:e6:
         a1:88:93:62:1f:68:aa:f4:26:c0:9b:4b:3a:e3:80:24:04:bd:
         f1:cd:9e:f1:0d:c0:07:c8:b3:e5:22:5a:cf:f3:18:36:db:f0:
         ef:22:a8:5f:0c:fd:a3:c4:fc:46:0e:a7:be:0c:41:6c:e5:9e:
         6b:11:1c:71:31:ce:00:fc:57:c9:03:43:f6:7b:df:ef:7a:2c:
         35:f7:12:94:31:17:39:94:c6:3e:e0:aa:37:02:73:71:57:df:
         08:a9:ff:2a:a0:7d:7f:90:b4:bb:16:a5:d1:23:94:11:66:3e:
         a6:36:d0:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----