Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
File:                     IodymNrl1aO-q8oW6S0aFB6Uhic.mft (raw, json)
Hash identifier:          LIQGt73IwW9VJhFX/i878sbnF7dbvcrWPd4lp/3F3bg=
Subject key identifier:   B8:6B:2C:1F:B9:B4:7A:B6:AB:10:07:CB:C7:30:2B:6F:80:47:F2:DB
Authority key identifier: 22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27
Certificate issuer:       /CN=22877298dae5d5a3beabca16e92d1a141e948627
Certificate serial:       01962FAB541646FCC9973DF127C02F760AF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft
Manifest number:          030C
Signing time:             Sun 13 Apr 2025 15:01:19 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:19 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:19 +0000
Files and hashes:         1: Gx7WZJ-NdyF04pUk4gdMYoHuQzk.roa (hash: t6M0KFjILBRmG74F5TahE0UmVDYYLhcbj+iOGjxmViM=)
                          2: IodymNrl1aO-q8oW6S0aFB6Uhic.crl (hash: GpRBjWlyBclbxajEPX6SgoI71T0rsXc816qs6nL89xU=)
                          3: PuJtE5_KWvLzwKg-Mgv8nDiZBNg.roa (hash: 8P5RiewFjkqd/eRXG3pkKovd5qsr2E75hTvmlDKbDK4=)
                          4: TzrbKsWWc5ntNZrK15cj-JJEJ58.roa (hash: RQ/89mGjpo+vMKngRW92R9jY7f/Z1DigzUFyYoUKxXI=)
                          5: VVORpSs2avN7LB4Mow7a1En91F4.roa (hash: yZQKa4XavWNRZD1+bUj1AOYorZS8ADmIAXXZ5FIRTC0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:54:16:46:fc:c9:97:3d:f1:27:c0:2f:76:0a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22877298dae5d5a3beabca16e92d1a141e948627
        Validity
            Not Before: Apr 13 15:01:19 2025 GMT
            Not After : Apr 14 15:01:19 2025 GMT
        Subject: CN=b86b2c1fb9b47ab6ab1007cbc7302b6f8047f2db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:40:dd:02:83:34:92:c9:62:09:df:f1:3e:06:
                    d4:6a:5c:b5:5f:b2:3a:9d:0c:6c:f8:8e:ad:66:08:
                    4e:a2:dd:3b:82:8b:4a:3e:67:f0:1f:b3:e0:19:7d:
                    9c:31:b4:b6:be:8c:0e:ec:8b:85:31:78:19:bc:73:
                    27:51:35:ba:e0:a1:b5:6c:9f:d0:9b:51:82:bb:a5:
                    fb:d0:ff:d6:63:47:a1:dd:aa:2d:e1:d7:6a:29:ee:
                    18:52:19:bd:6f:d7:32:3f:29:5b:1f:41:fc:61:44:
                    ba:99:08:19:ad:40:6e:f8:23:18:6c:02:5f:bd:74:
                    d7:7f:c2:cf:17:00:3f:d8:3d:ea:3d:20:82:b2:c1:
                    d0:50:fe:a6:3a:c8:d8:f5:75:d7:f2:db:b9:36:8a:
                    66:5c:b1:2a:3c:5d:6d:79:58:7a:77:40:93:91:be:
                    75:3f:00:98:6c:a6:22:02:e2:5e:fc:cd:24:92:27:
                    3e:36:1d:7d:74:f2:de:e6:c1:d3:f4:e2:ad:aa:6b:
                    e7:a6:09:ed:59:a4:c0:fa:ed:e6:22:c2:b5:01:42:
                    de:ef:61:f6:12:58:d2:06:59:e3:c3:0e:98:17:9b:
                    ea:37:90:cd:e4:29:34:52:e4:04:02:a9:3b:cb:b9:
                    1c:cf:1b:92:c0:31:1a:bb:6f:c5:eb:5c:2d:51:da:
                    d2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:6B:2C:1F:B9:B4:7A:B6:AB:10:07:CB:C7:30:2B:6F:80:47:F2:DB
            X509v3 Authority Key Identifier:
                keyid:22:87:72:98:DA:E5:D5:A3:BE:AB:CA:16:E9:2D:1A:14:1E:94:86:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IodymNrl1aO-q8oW6S0aFB6Uhic.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8651c5-bd77-460d-83bf-5933a09f72d1/1/IodymNrl1aO-q8oW6S0aFB6Uhic.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:54:d3:4d:3f:07:d2:a4:fb:1e:39:e7:00:0e:a7:6e:94:12:
         5c:92:22:a9:0c:63:0e:d1:13:7f:12:3f:2d:ad:2f:30:d3:43:
         04:a8:2b:2f:b9:84:78:8d:61:f0:3b:ac:62:66:9c:a9:60:7d:
         6d:07:c1:3b:4d:9a:26:b3:7a:27:02:5f:d5:52:5c:b6:3a:30:
         a9:c3:43:95:9c:6a:fb:8e:37:7f:17:f0:71:b5:2b:6b:9c:7c:
         9d:4c:06:61:1b:d2:c6:82:27:2c:f2:e8:81:3e:4a:19:07:fc:
         ed:5a:0e:0c:d7:82:d7:22:f9:a5:cb:2e:54:6b:0d:0a:fc:8a:
         a6:6c:e0:7f:8d:ff:43:4f:7a:a0:89:22:af:30:51:46:54:b8:
         38:a7:34:84:19:e7:66:74:7e:c0:83:04:89:3e:74:88:d8:08:
         fc:8c:ff:4c:e4:6e:0f:6d:f9:58:f9:a9:9f:02:2c:54:58:c7:
         81:86:fe:98:f9:20:20:05:aa:ed:01:0b:2f:b0:23:cc:1f:25:
         8f:7b:43:22:3d:73:c7:1b:9c:93:4c:24:da:2a:2f:45:b4:c3:
         6d:08:d7:f8:19:cf:b8:1d:32:df:34:e7:fa:9e:0d:c5:df:6f:
         2f:91:62:24:a6:d2:b4:e4:c3:37:d2:78:f5:9a:1e:53:16:b8:
         12:a3:24:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----