Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
File:                     IQIbJSIimXv-M7fksxWsjV4GeVQ.mft (raw, json)
Hash identifier:          ei3fVK7YyDzLfej2JkZYuMVSRTvSDaOHAiNRnIqzRA8=
Subject key identifier:   A8:D4:D5:59:B2:02:58:CF:89:5B:BA:BB:04:D2:5D:B0:EB:D3:56:60
Authority key identifier: 21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54
Certificate issuer:       /CN=21021b252222997bfe33b7e4b315ac8d5e067954
Certificate serial:       01962F3D7778AC517D1B36495B0ACBCD54AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft
Manifest number:          1227
Signing time:             Sun 13 Apr 2025 13:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:19 +0000
Files and hashes:         1: 3MPX8Hgcgpj46XFJe7iOfP4Vx9k.roa (hash: X8ItFNiHsxzuYcCwG/t6V7CD4qgVaZVjCW5JDwwvo1k=)
                          2: 6n6eBKfvBliO2E4gkLt3eFYs114.roa (hash: RH+pf4eZP9zTs6UNzlcLIEdcDd3ZwVvqZYyWYbfqbRQ=)
                          3: BxuNK2XBHdo88OQyiW_5v_yfc5A.roa (hash: MFlUpzcLU82WlS9U/NlO4CgGrVyG4i0P38/lEf9NP58=)
                          4: IOSFPx8A8l-pe0og_vxIgYl_NBY.roa (hash: KLjHQhBVtLRCltNJ+XqJhMVg3V2m+fHC9ZN7NVjvtDY=)
                          5: IQIbJSIimXv-M7fksxWsjV4GeVQ.crl (hash: KixjjBX3w4T35O+odP2UkmpZn4GLisMkkPHBZPJJx8M=)
                          6: J5ajMdCsK_xzfbhWxoAV2iRMcqc.roa (hash: i0rnl2YK8VurUbtxqh46jYu42vj9ovnjrsY7s0Ha76E=)
                          7: VbRKF62krl-KA_0dr7N8i46qs_A.roa (hash: PCEcpmBvUl37S6P9+HKjvTq2SZP3pF9GPHCRb88sRNw=)
                          8: W6gW_k4PAlDXWNXHj-7uVtaEhUo.roa (hash: 2GGe0Av8ayGGsSV+o4FXLrtSMr3LqMsV0faDwoshubs=)
                          9: y_nsYj5ukmuGHg1FwnghygZPNtE.roa (hash: Z3btILynrnMXwAKpX0v9pTVp5I1JWRzLRy4WUkLzYaI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:77:78:ac:51:7d:1b:36:49:5b:0a:cb:cd:54:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21021b252222997bfe33b7e4b315ac8d5e067954
        Validity
            Not Before: Apr 13 13:01:19 2025 GMT
            Not After : Apr 14 13:01:19 2025 GMT
        Subject: CN=a8d4d559b20258cf895bbabb04d25db0ebd35660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:98:98:7e:e3:d2:5c:cb:3f:b8:48:5a:fa:d6:
                    33:16:36:fa:44:e5:03:f0:58:38:5e:95:95:6c:b2:
                    23:2e:3e:1c:85:e5:52:86:1d:dc:eb:e0:57:f7:8a:
                    f2:bc:3d:33:9a:b5:28:bc:75:11:62:33:c1:2f:87:
                    52:cf:22:da:19:1c:a5:38:03:50:67:d4:87:47:23:
                    cd:41:93:5f:89:a0:dd:42:36:bf:69:e4:f5:20:1d:
                    7f:07:32:0d:3a:6a:dc:ab:a3:76:38:7d:a7:f3:60:
                    a3:fd:37:85:53:3d:09:f7:9f:e9:e2:b8:02:28:91:
                    fd:3b:cc:5e:17:96:12:1b:47:12:e3:c3:27:f9:e4:
                    76:7e:11:18:90:58:ea:16:89:59:70:55:99:8a:16:
                    d0:5e:d2:fa:7c:98:14:bd:72:86:3f:2f:ea:8e:5a:
                    02:79:31:c9:d9:67:27:5b:02:fb:7a:ee:f0:37:8a:
                    e4:f1:e9:8b:12:fa:8c:64:2a:82:4a:c3:67:86:e4:
                    db:d2:84:fa:7a:de:7c:54:eb:78:26:c8:f9:eb:70:
                    60:f5:45:09:99:b2:17:42:c8:e6:52:1b:d9:95:a5:
                    4b:a4:6e:46:8e:d6:f0:f9:23:0a:82:f5:de:80:ba:
                    b6:3a:ba:f6:fb:f7:31:ff:8c:b7:a4:1f:cb:00:c2:
                    99:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D4:D5:59:B2:02:58:CF:89:5B:BA:BB:04:D2:5D:B0:EB:D3:56:60
            X509v3 Authority Key Identifier:
                keyid:21:02:1B:25:22:22:99:7B:FE:33:B7:E4:B3:15:AC:8D:5E:06:79:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQIbJSIimXv-M7fksxWsjV4GeVQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/59294c-0f24-40c5-b5c3-6eac62e60df7/1/IQIbJSIimXv-M7fksxWsjV4GeVQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:1f:2d:cc:fc:94:b1:09:4f:b6:34:07:a0:0f:6f:bc:87:09:
         be:31:00:52:e4:84:7b:10:f6:86:6c:c5:ad:82:78:07:db:18:
         b1:b3:35:71:93:6d:fd:6d:dc:ae:48:db:a9:b3:cc:e9:f8:5f:
         a3:7c:90:7a:93:6b:8b:02:b8:0d:ec:71:7b:d6:be:07:36:75:
         ac:93:8c:a9:1d:e9:2e:8a:59:b9:37:d5:d5:dc:12:3b:7d:74:
         04:d0:90:e2:3f:62:e8:aa:56:b0:0e:ed:bd:73:9b:6a:53:fe:
         18:11:1a:a8:ab:ed:cf:e5:e8:04:07:93:d2:07:a0:92:75:42:
         17:a0:17:4d:cb:f1:00:4b:64:6b:ec:ee:46:c7:88:45:ac:14:
         21:b6:aa:d6:c0:78:1d:34:f4:c5:39:f5:46:10:8e:e9:93:8d:
         d7:c0:3a:79:b5:84:1d:79:03:a5:95:dc:af:62:40:b3:dc:ca:
         a3:6a:df:1a:c1:33:d7:25:f1:1b:da:24:82:0f:62:ee:01:02:
         52:be:37:fb:ae:43:68:3b:be:bf:cb:5b:d0:c7:a9:7f:c9:eb:
         61:ae:d3:88:3a:5e:05:3b:de:5c:88:9c:99:62:8f:ba:79:d1:
         ac:2d:67:dd:35:9a:7f:d7:e4:b5:4c:ae:a1:2f:92:bc:3b:a0:
         cc:97:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----