Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
File:                     IvNEpj3LcOiQV9644nYdxFFliBo.mft (raw, json)
Hash identifier:          6YWX0dEqtiBntb2TGSKUu7+GYOF35AdmiY08VS77umM=
Subject key identifier:   E8:2D:B1:14:7B:9A:D1:48:C5:11:49:5C:86:1B:DE:E7:EC:6F:55:A8
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Certificate issuer:       /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial:       01962DF40D8E59B2C9805B39DF4E74A9AFAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft
Manifest number:          10C1
Signing time:             Sun 13 Apr 2025 07:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:31 +0000
Files and hashes:         1: 1LZHe8Ty2Ecrf76DoSxkwAbV2Ec.roa (hash: z+MqJylNHYWp3NqFgOzBgiG5CjCUL0P0np/w7hgCYN0=)
                          2: 9uepVP8jCNblGgDml0purQuCeuI.roa (hash: krAEUA7J3c4hHlcNHTYBnr7lBIoDvqw3IUws2vLaSSg=)
                          3: B2yHxHbEm9GmCNVxvcrZFxarDHM.roa (hash: bgz2Ull5wnGI0goKFONDZrQdSvmkexqh99prCGIqdUQ=)
                          4: IvNEpj3LcOiQV9644nYdxFFliBo.crl (hash: tHA6hBojeBjmr9VCY/tcXtZONQhtDohJjv2lXYteDNI=)
                          5: K2GN8Q4wuI9TOv_O5rPOY6UOVuw.roa (hash: x81e2mavHKbR2e6iStjfXJXmlwyjRYwbRrSYSDYjLu8=)
                          6: Rqg6__jB0I59YqNi0V3OG_MGBp8.roa (hash: dXgwdC+H6aPwaIuzA6ajakpboy2/DkMtHCDvVma8C2I=)
                          7: Tj6608f-1a6fYqa_z-5d8FeCzjM.roa (hash: anRpP2NDSpzZ3SrjHh0tnQVCsHbMwvsJQ4PMBnavsdk=)
                          8: btDz2u-l_wj6W8KIfCMAlnW0P24.roa (hash: sfK0ptsNBV2+LnneQNYSIHQ7XVoVHUaME+qXGkJagVw=)
                          9: d-S7YgetzEwMrrxbSdTzmhWIDOU.roa (hash: 3G/Eu15jWX5wqv+LVcJ9iVdKlsYAltsvYTFwqOC6jKg=)
                          10: f6GDqb9nJIgj_F1z2AEUbY6YnmQ.roa (hash: jKya+L5/uP3Dz7PfxR54wCUY1sMiu+aWWncKs50X+nY=)
                          11: hI0tUC415NEH9XUX9W5_NYjc6b0.roa (hash: vIUGWL+jywzP4nOG3s5yRhGXD3r26uV/UoGJVBb5x6o=)
                          12: y72ioZ9vcp7DqGWY8rVyBxu728s.roa (hash: PbIGmtWe0+HcZ3GBbrnUP6pZwodFKUDC/Q3NIX5q6Jg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:0d:8e:59:b2:c9:80:5b:39:df:4e:74:a9:af:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
        Validity
            Not Before: Apr 13 07:01:31 2025 GMT
            Not After : Apr 14 07:01:31 2025 GMT
        Subject: CN=e82db1147b9ad148c511495c861bdee7ec6f55a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c0:45:ec:2f:f3:ef:80:49:71:8e:47:af:5f:
                    c6:f5:ae:a4:82:93:29:53:90:a9:2f:e4:63:6d:a1:
                    93:60:23:88:64:6f:19:29:ff:aa:8c:a3:55:ef:5c:
                    31:ef:9e:f8:da:9b:56:ab:e6:66:9b:fa:b2:72:4f:
                    b6:3a:d2:22:d5:96:e6:d6:a3:e8:22:d3:6d:8d:9d:
                    04:64:7c:fd:78:ae:11:e1:b6:0c:e5:73:f3:51:8e:
                    95:44:20:0c:c1:8d:1e:aa:dc:09:c8:5e:7c:fe:7d:
                    cf:f5:9a:3b:ab:9f:bd:83:29:51:88:32:2e:df:35:
                    1f:82:bb:35:6c:f7:a2:9c:83:a9:c1:ef:50:f3:87:
                    2d:70:1d:44:e6:07:ed:a2:65:63:04:d9:83:fa:73:
                    c2:b7:43:60:a5:56:0c:2a:55:5d:d5:9c:94:70:94:
                    67:86:c5:3f:e3:06:25:c8:38:ba:5f:de:cd:72:f7:
                    76:57:84:1e:57:3d:18:9b:23:ae:ed:a6:37:bf:bc:
                    bc:f9:5d:8b:88:41:37:cb:e5:7a:af:01:82:ca:54:
                    83:ea:d5:00:bd:4a:a3:1a:61:cc:e9:2a:3f:ca:91:
                    f5:4a:51:b5:06:32:58:da:f6:d6:e6:22:dc:88:1a:
                    3a:bf:11:04:ff:80:a0:40:46:b7:b8:02:81:63:ae:
                    9c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:2D:B1:14:7B:9A:D1:48:C5:11:49:5C:86:1B:DE:E7:EC:6F:55:A8
            X509v3 Authority Key Identifier:
                keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:c5:0d:d8:45:b5:68:0e:fb:00:26:65:71:b7:b5:46:c7:9f:
         02:bf:89:18:45:33:54:e2:ed:58:64:e0:ae:1b:35:16:40:39:
         c0:0d:f0:1a:f2:b9:5f:b4:dd:75:86:0f:32:99:f0:64:59:12:
         12:4e:a1:fd:f8:b6:92:6c:43:b2:27:b2:b0:c1:bc:ad:a4:dd:
         4f:86:72:f3:49:de:43:c2:cd:48:d0:dc:21:54:5a:2b:62:81:
         1f:28:a2:b6:7e:32:47:aa:33:7e:f4:1a:52:59:b3:ca:fd:23:
         7c:8f:c4:99:ce:9c:34:b8:fe:b6:a3:96:d4:93:02:cf:59:8d:
         82:cb:dd:b8:b5:86:04:73:63:d1:51:c6:16:e5:a5:30:ca:b9:
         55:9e:fc:4a:82:67:c1:fb:a5:d7:6a:b3:fc:70:96:87:9e:67:
         8a:29:5f:f3:42:a6:13:44:4f:0f:c0:73:59:02:2c:72:64:e5:
         24:58:ac:c1:26:4b:07:45:90:88:29:d2:f7:63:7a:ad:3d:75:
         ce:17:31:2d:53:53:ae:17:9e:0e:b7:75:2f:b3:45:f4:69:01:
         ef:6a:9e:ce:e5:b9:bf:05:b5:27:0a:66:8e:8a:d3:13:a2:03:
         b3:20:8f:d4:10:72:37:ef:5d:b7:8f:63:0e:54:ce:04:de:88:
         69:32:05:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----