Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
File:                     IacXNhMJ0pOTUcnYuiFz24MZqI8.mft (raw, json)
Hash identifier:          V50ZahPuDyQubkaZdKoHfCyTxwifNDc6MDXQGsti2r8=
Subject key identifier:   63:DB:DD:DA:C5:61:6F:41:E9:B3:F2:C8:96:27:E5:CF:25:12:38:11
Authority key identifier: 21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F
Certificate issuer:       /CN=21a717361309d2939351c9d8ba2173db8319a88f
Certificate serial:       01962F3D4DAA4A303E131A257797622B74B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft
Manifest number:          0D07
Signing time:             Sun 13 Apr 2025 13:01:08 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:08 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:08 +0000
Files and hashes:         1: IacXNhMJ0pOTUcnYuiFz24MZqI8.crl (hash: 5W5cCtgvHJ1pmlqSoqSoUZT3JV287h2eE9eraiZ/Nzo=)
                          2: PeD0qOPxUYxeVA81pP9--xNVIzU.roa (hash: fJvgODfg2m2y6FUhDf+GL6D88mfLwM4rg59sQSq2L84=)
                          3: qwmmpmJft8mwuiEXYTlzhJQuep0.roa (hash: Q0Z/E8v8Q7W2fm0rXhwdPc4pFVbeDlufQTIsqxx5ZeE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:4d:aa:4a:30:3e:13:1a:25:77:97:62:2b:74:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a717361309d2939351c9d8ba2173db8319a88f
        Validity
            Not Before: Apr 13 13:01:08 2025 GMT
            Not After : Apr 14 13:01:08 2025 GMT
        Subject: CN=63dbdddac5616f41e9b3f2c89627e5cf25123811
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:53:81:66:59:ea:57:f5:e1:65:89:2b:b9:da:
                    2d:de:4c:a1:33:23:8e:c6:8e:f8:5c:82:46:bb:8e:
                    d0:20:c8:fb:85:f0:7e:fa:2e:c9:12:76:e9:1b:e8:
                    ee:66:3a:5f:4c:ee:0a:99:a3:7a:65:3c:95:23:60:
                    f1:64:9c:49:f0:d4:d5:15:d2:81:41:88:01:58:16:
                    09:39:06:da:9c:f5:6b:6b:6a:00:c7:e9:37:da:97:
                    66:0b:ad:07:08:b3:4f:8b:21:46:94:51:4d:49:2f:
                    60:46:5b:7b:78:76:6b:f0:6e:a5:63:3d:30:a7:40:
                    93:5b:68:03:72:2c:4a:a6:65:9d:d9:3b:0d:46:f8:
                    1b:72:46:db:39:9d:b4:67:10:91:f0:f8:6d:a9:c6:
                    72:69:35:dd:47:17:44:2e:03:27:47:0e:8d:19:93:
                    f7:2b:86:9a:f3:49:b2:25:84:81:25:69:f2:71:1b:
                    1b:4f:38:d9:aa:71:06:6f:72:02:e2:0e:4a:ab:00:
                    28:a4:c6:75:75:f7:09:92:aa:0f:04:51:58:28:8a:
                    12:3f:52:d7:36:ab:91:51:89:f0:e5:b4:39:97:3b:
                    23:10:64:8e:75:77:36:f7:18:ae:9f:06:43:1e:14:
                    76:f6:75:66:5b:a0:db:ef:e0:b8:65:8a:d5:c5:ec:
                    93:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DB:DD:DA:C5:61:6F:41:E9:B3:F2:C8:96:27:E5:CF:25:12:38:11
            X509v3 Authority Key Identifier:
                keyid:21:A7:17:36:13:09:D2:93:93:51:C9:D8:BA:21:73:DB:83:19:A8:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IacXNhMJ0pOTUcnYuiFz24MZqI8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/7fb381-fc44-44f6-a385-f8a469d4e2b2/1/IacXNhMJ0pOTUcnYuiFz24MZqI8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:79:dc:89:12:68:d9:de:fd:ef:03:f1:99:27:94:36:71:8e:
         3a:c4:fe:31:8e:a3:6f:e0:b6:dc:f7:12:7c:e3:f5:28:09:85:
         1d:94:c0:3f:fc:25:11:6c:f7:54:7c:c0:ff:c2:62:21:b6:3f:
         b6:6a:d9:78:cb:65:da:f4:e5:e1:86:3f:71:3b:3e:fc:bc:36:
         20:86:4d:06:92:73:ea:33:53:75:5b:2f:7e:86:82:0d:ae:08:
         95:23:de:02:5e:7f:77:eb:24:f5:bd:52:c8:35:75:ba:aa:a0:
         4f:47:93:a3:c9:47:c0:52:15:2f:c6:ed:fc:60:0e:f0:42:90:
         80:f9:35:58:aa:1a:3a:0d:c1:73:6f:ad:44:b8:cf:c0:39:92:
         01:89:a6:11:3a:4f:8a:5e:fe:dc:d4:34:32:75:3d:42:f0:a4:
         fb:d1:ef:30:2d:c6:f5:5e:0b:8e:83:4e:47:0b:f9:c1:d7:6d:
         83:6b:50:cb:99:96:b2:6b:e7:93:96:5d:0d:c3:83:18:8c:d0:
         6e:e0:08:97:42:f5:3f:d5:85:14:a6:1f:93:68:45:b2:f2:a0:
         5b:ff:79:f1:a7:9b:75:f9:21:3d:93:d6:9c:30:9a:34:c1:bb:
         6a:f3:56:da:06:15:bb:89:9d:35:bf:17:e0:86:97:62:30:ff:
         97:37:a7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----