Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
File:                     IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft (raw, json)
Hash identifier:          5X8mxB43HrXCTw+2GZ2iBPXfxGlcWb8Line7EpM3mIs=
Subject key identifier:   28:EA:2B:39:23:D1:FE:19:A2:44:47:E4:46:DC:33:16:57:91:DF:32
Authority key identifier: 21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3
Certificate issuer:       /CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
Certificate serial:       01962E2AE86969AA68E00E01B29607BB1397
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft
Manifest number:          0D51
Signing time:             Sun 13 Apr 2025 08:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:25 +0000
Files and hashes:         1: IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl (hash: b3LY4VT/Fv4ITWSLSR9jxEoi96FbDxchyeDpe+wBoK8=)
                          2: OmRgq5feW-kx9jvx4AAFdyevf30.roa (hash: AB8XLVSpCXGmgkqlgUf55sAgLfrFZhXp5WrR9S6Xa20=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:e8:69:69:aa:68:e0:0e:01:b2:96:07:bb:13:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21077355df11cdbf992f90d67eaab9109ab8ebf3
        Validity
            Not Before: Apr 13 08:01:25 2025 GMT
            Not After : Apr 14 08:01:25 2025 GMT
        Subject: CN=28ea2b3923d1fe19a24447e446dc33165791df32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:68:cd:13:15:65:03:9b:80:36:18:6a:4f:b2:
                    6d:e6:31:4f:b3:f9:4b:03:aa:3d:37:6b:bf:e8:d0:
                    f7:4b:ab:08:bf:bb:06:76:22:0d:f8:08:b6:d2:40:
                    0e:ef:ad:f6:c7:b0:d6:0a:94:17:fb:9d:79:c5:86:
                    14:65:13:82:aa:87:7a:11:46:cb:b9:07:5f:f9:f2:
                    8d:b3:e9:f4:5f:ce:8d:4a:6f:b4:a9:cd:fd:10:96:
                    ca:95:aa:32:89:15:94:05:69:f1:d2:28:91:c0:df:
                    7b:b1:93:1a:64:52:1b:cc:d7:04:41:fa:ea:9b:9c:
                    fc:2e:44:5c:f7:fc:c5:ee:e9:ed:2a:43:0b:d5:04:
                    02:e5:83:b4:45:52:79:63:0b:d1:21:7a:39:0d:59:
                    35:9f:6c:70:83:74:b0:0e:aa:26:03:d6:54:93:64:
                    0b:4f:bb:f7:96:0e:59:c6:2c:4c:54:13:af:fd:50:
                    6e:5d:e5:fa:f2:44:4a:22:8c:42:a4:2e:a1:e6:c3:
                    99:12:72:d9:98:dd:f0:62:b1:e6:34:5b:62:5e:39:
                    8a:40:40:e8:78:2b:34:cb:04:b9:a0:a2:fc:53:94:
                    eb:df:9e:e9:5d:18:39:5d:e3:0b:26:e0:0a:94:02:
                    b4:25:2d:91:7a:50:28:48:b8:56:32:25:1d:99:bd:
                    68:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:EA:2B:39:23:D1:FE:19:A2:44:47:E4:46:DC:33:16:57:91:DF:32
            X509v3 Authority Key Identifier:
                keyid:21:07:73:55:DF:11:CD:BF:99:2F:90:D6:7E:AA:B9:10:9A:B8:EB:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f2da78-2d98-4081-9d67-43bf655f3365/1/IQdzVd8Rzb-ZL5DWfqq5EJq46_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:0e:df:46:91:d2:5b:79:05:ae:c6:80:f8:3f:3d:bf:3a:19:
         b3:f9:81:51:69:df:c7:9b:10:42:90:0b:c4:11:34:5e:07:3a:
         aa:fb:d1:d9:39:05:9c:7a:7a:05:7d:60:d9:76:7d:3f:9f:50:
         10:84:3a:80:93:4d:a1:c7:91:2c:16:64:b1:9c:f9:21:62:7e:
         43:97:19:f9:da:ff:34:e7:90:4e:52:d5:c0:28:41:da:96:1e:
         a3:b4:7f:e3:f6:ae:5e:fb:49:aa:35:ee:53:30:37:c1:54:44:
         dd:fb:4e:c3:26:16:05:be:3e:a2:cb:57:b0:2d:ae:31:1f:14:
         a2:62:05:51:31:60:bb:61:ed:b7:1d:bd:41:f1:25:c9:c9:2f:
         dc:82:9d:45:e4:7f:25:3c:31:79:91:c9:7f:8c:cf:7f:13:64:
         3b:9c:1f:93:6a:9b:46:ba:12:2b:ac:ed:bd:e8:17:99:ef:fb:
         65:86:f3:9e:6b:f9:8a:d5:7a:97:ac:fd:a9:ec:09:3a:73:b0:
         b0:12:06:60:78:0d:74:02:ef:1a:01:30:2d:af:0d:d5:1c:92:
         d6:ff:59:29:1d:01:97:f7:56:83:af:3d:40:f2:ee:ec:e4:3f:
         81:9e:b4:46:40:32:be:c2:da:e3:07:d7:3a:a7:14:a4:84:56:
         1c:4e:f2:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----