Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
File:                     IQ2p568B3nVEj0kGqsQb0pZOiEc.mft (raw, json)
Hash identifier:          GMKBMV/lAql4/tFfRDEYbYiLmPzOZ3HciSBKMTug+As=
Subject key identifier:   6D:1A:29:2E:D3:B2:77:CF:CF:C7:D4:83:40:65:15:65:25:C1:CC:66
Authority key identifier: 21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47
Certificate issuer:       /CN=210da9e7af01de75448f4906aac41bd2964e8847
Certificate serial:       01962E98BE5409F1FB61D864676D86C4DA67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: 84db03xfYelGerORYCPaE18sIuY.roa (hash: mGsmynBl7jLseJdNkmqKYTcle2kapG2/B7E0rIACZPM=)
                          2: DWb6WF8DjwRTU0qXDx46BO4zwgA.roa (hash: CzOBQqTqajUkprVoUPDiYGmEDab6x3jR9YCHnFVJudw=)
                          3: IQ2p568B3nVEj0kGqsQb0pZOiEc.crl (hash: WMwEp5Byr2u4H/yio2w/Ra/PJBXexhYT+uY5cMBY1W0=)
                          4: xnynb6ZbVphY17eL44tNUD6FdtM.roa (hash: aGjCMZd441gHskLtab8MXJtzSfVKNikkX0711IjLPWE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:be:54:09:f1:fb:61:d8:64:67:6d:86:c4:da:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=210da9e7af01de75448f4906aac41bd2964e8847
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=6d1a292ed3b277cfcfc7d4834065156525c1cc66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c4:96:d1:ce:f1:03:13:0b:86:bc:34:2a:93:
                    9f:29:31:b2:0e:11:16:5b:33:e4:15:99:2f:db:ea:
                    d9:66:73:48:0f:85:6d:6b:3a:df:7d:ba:19:41:7c:
                    81:e7:fd:2d:bb:4e:cc:64:89:5a:74:cf:47:d6:93:
                    13:b3:a0:70:b0:50:9b:77:04:7c:5d:ee:a2:c1:31:
                    db:0b:4b:47:d5:99:b2:25:30:32:c3:54:26:6a:b3:
                    d5:c2:cf:24:10:fd:b9:b6:99:fd:06:6c:1c:fb:8f:
                    b4:f4:ed:5d:0e:43:44:7e:57:cc:74:a6:39:2d:ef:
                    57:2f:a4:f0:5f:74:a7:1c:00:21:02:09:6e:80:10:
                    21:57:d5:3c:67:a4:22:84:9b:cf:03:6e:73:32:c8:
                    db:25:93:b1:a2:1a:1b:68:2b:24:53:22:27:8a:c8:
                    01:7d:64:1a:c6:f5:ef:37:7b:d2:f1:57:c7:38:d9:
                    6b:78:6f:22:c8:64:57:d2:26:d7:20:68:37:3a:2a:
                    08:e8:7b:4e:dc:14:21:2b:da:47:3b:fb:7d:18:5e:
                    e1:59:39:37:43:e4:2f:9c:5a:b5:b9:bf:cb:69:0c:
                    7d:5a:74:d1:6b:63:45:fd:c3:79:c0:ea:9e:87:57:
                    ae:84:2d:30:06:9a:62:16:4a:9e:c1:c3:18:fe:92:
                    96:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:1A:29:2E:D3:B2:77:CF:CF:C7:D4:83:40:65:15:65:25:C1:CC:66
            X509v3 Authority Key Identifier:
                keyid:21:0D:A9:E7:AF:01:DE:75:44:8F:49:06:AA:C4:1B:D2:96:4E:88:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQ2p568B3nVEj0kGqsQb0pZOiEc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f27821-4ccf-4d2e-8b15-6e12774f851e/1/IQ2p568B3nVEj0kGqsQb0pZOiEc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:b8:44:34:b1:07:7a:d7:07:a9:c5:e3:85:60:47:74:35:8c:
         03:08:2e:8a:0b:90:c9:68:19:ab:62:2b:23:6e:47:89:f8:96:
         2e:2a:e5:53:4d:c9:6d:92:fb:07:dc:57:3f:65:df:4d:29:ee:
         48:b9:60:58:34:d8:39:32:24:fa:62:ae:10:00:6b:71:60:5e:
         84:c2:18:07:09:31:54:a4:3b:7a:8e:19:a0:4a:21:cd:15:64:
         ac:e3:41:4d:69:c2:eb:e1:9f:46:78:01:a5:93:8d:b5:b8:a8:
         e1:d9:f0:d2:be:5e:06:12:37:ae:1b:7c:61:e0:19:d9:68:7f:
         b5:55:18:d7:d4:fe:ec:bb:b7:7a:59:50:f7:a1:cf:60:ca:7d:
         f7:15:f3:d1:a6:f4:82:23:95:39:06:f0:c0:33:e7:9f:d5:6e:
         bf:d2:bc:a9:13:e8:3e:d8:4c:6d:65:ce:3f:6d:cb:e6:97:20:
         93:b6:03:3a:7d:a2:85:25:fe:4c:6a:e2:2d:86:f2:1c:98:78:
         40:72:0a:4b:7a:ef:32:f2:20:eb:41:dd:ed:d5:52:0f:96:02:
         35:42:6a:30:54:02:f7:2d:ce:a4:0b:26:e8:b0:b1:7c:a5:c0:
         e4:82:6a:50:e6:bf:5d:7c:3d:8a:d4:1d:ea:38:6b:3c:57:d9:
         f6:ac:76:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZYumL5UCfH7YdhkZ22GxNpnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMGRhOWU3YWYwMWRlNzU0NDhmNDkwNmFhYzQxYmQyOTY0
ZTg4NDcwHhcNMjUwNDEzMTAwMTI0WhcNMjUwNDE0MTAwMTI0WjAzMTEwLwYDVQQD
Eyg2ZDFhMjkyZWQzYjI3N2NmY2ZjN2Q0ODM0MDY1MTU2NTI1YzFjYzY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsSW0c7xAxMLhrw0KpOfKTGyDhEW
WzPkFZkv2+rZZnNID4VtazrffboZQXyB5/0tu07MZIladM9H1pMTs6BwsFCbdwR8
Xe6iwTHbC0tH1ZmyJTAyw1QmarPVws8kEP25tpn9Bmwc+4+09O1dDkNEflfMdKY5
Le9XL6TwX3SnHAAhAglugBAhV9U8Z6QihJvPA25zMsjbJZOxohobaCskUyInisgB
fWQaxvXvN3vS8VfHONlreG8iyGRX0ibXIGg3OioI6HtO3BQhK9pHO/t9GF7hWTk3
Q+QvnFq1ub/LaQx9WnTRa2NF/cN5wOqeh1euhC0wBppiFkqewcMY/pKWSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG0aKS7TsnfPz8fUg0BlFWUlwcxmMB8GA1UdIwQY
MBaAFCENqeevAd51RI9JBqrEG9KWTohHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUt
NmUxMjc3NGY4NTFlLzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mMjc4MjEtNGNjZi00ZDJlLThiMTUtNmUxMjc3NGY4NTFl
LzEvSVEycDU2OEIzblZFajBrR3FzUWIwcFpPaUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkrhENLEH
etcHqcXjhWBHdDWMAwguiguQyWgZq2IrI25HifiWLirlU03JbZL7B9xXP2XfTSnu
SLlgWDTYOTIk+mKuEABrcWBehMIYBwkxVKQ7eo4ZoEohzRVkrONBTWnC6+GfRngB
pZONtbio4dnw0r5eBhI3rht8YeAZ2Wh/tVUY19T+7Lu3ellQ96HPYMp99xXz0ab0
giOVOQbwwDPnn9Vuv9K8qRPoPthMbWXOP23L5pcgk7YDOn2ihSX+TGriLYbyHJh4
QHIKS3rvMvIg60Hd7dVSD5YCNUJqMFQC9y3OpAsm6LCxfKXA5IJqUOa/XXw9itQd
6jhrPFfZ9qx2Sg==
-----END CERTIFICATE-----