Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
File:                     x02iHagDioIFQrOvr76qqmZreyc.mft (raw, json)
Hash identifier:          GFWasvdbSJS6VNWARz9P1oH2kO9mM1aZFq9C1QEeEbA=
Subject key identifier:   49:6F:0D:1D:10:03:72:28:B6:18:52:AF:13:7F:D3:68:B0:D3:A7:53
Authority key identifier: C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27
Certificate issuer:       /CN=c74da21da8038a820542b3afafbeaaaa666b7b27
Certificate serial:       01962F749BB91F58C1004DD6D1AD70FE37A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft
Manifest number:          147E
Signing time:             Sun 13 Apr 2025 14:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:33 +0000
Files and hashes:         1: 2t0GWwoe7mmFS83bQQPX5JNcD34.roa (hash: hxRzouLeq4ys7uUoj+7mRAVC8MeKAFWBUYqAcz4n5d0=)
                          2: x02iHagDioIFQrOvr76qqmZreyc.crl (hash: QwmKWdLjHHUknCEN9MqYGuJcbD5nhBYXzO5Tlxu91wg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9b:b9:1f:58:c1:00:4d:d6:d1:ad:70:fe:37:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c74da21da8038a820542b3afafbeaaaa666b7b27
        Validity
            Not Before: Apr 13 14:01:33 2025 GMT
            Not After : Apr 14 14:01:33 2025 GMT
        Subject: CN=496f0d1d10037228b61852af137fd368b0d3a753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c8:7c:3f:58:e0:eb:02:60:62:d5:a0:96:5c:
                    24:af:47:9b:f4:66:88:c8:06:7a:17:54:9d:6d:d6:
                    d7:c4:00:ef:f9:aa:38:e3:1b:88:97:68:f7:ad:7c:
                    78:8c:60:00:30:b5:9c:20:d1:31:41:f0:b5:dd:ad:
                    f9:a3:9a:80:46:d7:b4:d7:0f:4b:43:a2:1d:d9:7e:
                    37:43:2d:33:ff:53:e0:f3:d8:69:cc:db:62:6b:73:
                    89:d8:60:5d:61:5c:72:61:48:69:27:4d:db:a0:8c:
                    cd:42:bf:37:20:be:df:79:42:2a:0b:d0:7d:16:a7:
                    c2:e8:1a:dc:7f:cd:c3:fa:9d:d1:7a:03:51:9c:7c:
                    49:81:fe:3a:7c:d0:ab:bb:fb:9c:3e:a3:f0:b5:f9:
                    0b:78:02:6e:c1:0a:07:2e:f7:65:2b:7c:8a:b8:2e:
                    b5:2f:58:46:24:aa:3e:e6:52:77:53:de:04:2f:2c:
                    f9:c8:41:0f:6a:f8:ec:5f:2c:ae:c8:23:4f:68:75:
                    e8:56:55:29:7b:72:ab:35:8e:f4:f8:7e:f2:6a:ea:
                    39:ec:43:34:b7:d2:3e:c6:8f:91:b1:35:2a:1c:4a:
                    14:58:b0:7d:e0:1a:b5:a3:36:c7:dc:fe:fb:5b:24:
                    e6:9b:66:72:33:87:d8:78:75:91:28:45:13:c6:fc:
                    99:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6F:0D:1D:10:03:72:28:B6:18:52:AF:13:7F:D3:68:B0:D3:A7:53
            X509v3 Authority Key Identifier:
                keyid:C7:4D:A2:1D:A8:03:8A:82:05:42:B3:AF:AF:BE:AA:AA:66:6B:7B:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x02iHagDioIFQrOvr76qqmZreyc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/4f8444-2c3d-4592-9458-801d89d7366d/1/x02iHagDioIFQrOvr76qqmZreyc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e7:b9:f3:c0:36:c1:8a:96:2f:e5:dd:4d:c6:e1:26:49:9d:
         97:65:ba:5f:f3:79:cc:39:4f:a3:7b:f5:f8:4e:01:3f:37:30:
         09:80:fa:92:a0:7f:88:f1:fe:8c:2a:d4:28:85:3f:22:11:7f:
         3f:09:e4:54:54:15:8c:fb:2b:1f:14:ae:ba:42:d6:50:74:7b:
         85:e9:b4:7c:b0:f1:15:f5:8b:db:70:7a:6a:28:60:04:c8:7b:
         7f:99:a5:6c:a0:e5:93:d6:d7:62:c9:a4:a6:6c:8e:b8:ac:5a:
         0d:6e:a7:44:bb:9c:d6:49:ed:dd:09:a3:9d:e1:39:a9:2e:a0:
         83:f8:c9:e7:d1:1a:b0:19:7b:36:80:b1:05:54:09:ae:1b:80:
         b8:23:74:ea:73:3c:d5:27:d9:ab:d9:8f:b0:8a:d1:0e:6c:8a:
         25:4e:89:41:8f:df:28:f8:fa:a8:d5:bf:f9:e3:6d:88:29:00:
         d4:33:9a:f5:23:d7:0f:16:35:c1:1d:8a:63:b7:2f:a5:4c:c0:
         b7:32:0c:87:fa:30:d9:40:55:af:27:96:52:73:29:03:2c:8e:
         0c:b0:c8:ac:ca:29:8a:6f:5f:d5:32:a0:41:e1:b7:36:6a:ce:
         02:af:5c:f7:31:8b:58:43:ea:9f:8e:93:7b:bc:ed:cd:02:04:
         cd:61:a7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----