Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
File:                     2scQMP4IHgK6tII9BWj_sqMyZeE.mft (raw, json)
Hash identifier:          3K7XykjElFJozcmvKQQ8zAQ1WYitWj4RSUEHsANHnBQ=
Subject key identifier:   86:52:8F:09:E2:0B:06:B9:0C:5E:69:08:28:74:D3:E2:55:FD:A7:30
Authority key identifier: DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1
Certificate issuer:       /CN=dac71030fe081e02bab4823d0568ffb2a33265e1
Certificate serial:       01962F073000F08F4BF88BFA35D39CC29E33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft
Manifest number:          0480
Signing time:             Sun 13 Apr 2025 12:02:01 +0000
Manifest this update:     Sun 13 Apr 2025 12:02:01 +0000
Manifest next update:     Mon 14 Apr 2025 12:02:01 +0000
Files and hashes:         1: 2scQMP4IHgK6tII9BWj_sqMyZeE.crl (hash: suBW9oXUPxGCCTs3aZzJ87ktn08bXpINIxECt7/tTYY=)
                          2: _aLDkeMiUI-Lqjzdkv0G6nDIZPI.roa (hash: tmIepxlUbHTd8KHj3iQSk+aTVIsaYnnddWmvrPeDuVM=)
                          3: cOPYQsOeCFDIc7qGbdrCMUud3Jc.roa (hash: BKdHxeFxd4fi3NghqoltBHVl5UTtuhA/jAVO3pAU5j8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:07:30:00:f0:8f:4b:f8:8b:fa:35:d3:9c:c2:9e:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac71030fe081e02bab4823d0568ffb2a33265e1
        Validity
            Not Before: Apr 13 12:02:01 2025 GMT
            Not After : Apr 14 12:02:01 2025 GMT
        Subject: CN=86528f09e20b06b90c5e69082874d3e255fda730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:61:51:09:72:f5:87:75:f1:a0:b6:f4:1a:9f:
                    00:7d:97:5c:68:89:c7:63:80:f4:de:ff:ef:be:27:
                    bc:82:5b:84:bc:27:ea:ff:fe:d4:c2:bc:b0:5c:3d:
                    08:be:86:39:e2:00:02:80:c5:91:92:39:4f:bf:dc:
                    96:5d:77:4d:1e:e7:48:35:1a:50:2b:fc:01:39:7f:
                    bf:a4:27:4a:c5:a8:54:4c:af:39:14:43:d7:9d:80:
                    a4:53:54:76:ab:21:37:e8:01:d9:9f:f1:3c:0e:64:
                    1f:31:1a:12:47:70:be:5f:4f:81:cf:0f:e6:06:bf:
                    70:f4:ff:18:ef:fa:f6:ca:d2:9b:8d:07:c5:d9:5c:
                    e8:d6:8e:e0:8b:81:11:e8:15:2e:79:0e:26:82:42:
                    a1:0f:e7:9d:c4:e4:1f:f2:08:95:d9:8f:7d:ab:e9:
                    b2:1d:d2:e1:0d:f7:aa:0d:06:fb:75:10:e9:eb:53:
                    73:82:46:a5:13:c0:d9:88:ce:54:ea:9e:46:49:02:
                    48:e1:6b:4b:97:07:ab:e4:92:69:83:f3:73:05:bf:
                    d5:5f:72:2e:4b:70:ea:e8:9c:3e:ce:e7:8d:7b:2d:
                    b6:95:d4:2f:4e:1b:32:6c:97:22:c0:56:d3:87:80:
                    62:d0:bb:6e:bc:86:4c:bf:36:a7:fe:0d:c4:a8:3f:
                    94:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:52:8F:09:E2:0B:06:B9:0C:5E:69:08:28:74:D3:E2:55:FD:A7:30
            X509v3 Authority Key Identifier:
                keyid:DA:C7:10:30:FE:08:1E:02:BA:B4:82:3D:05:68:FF:B2:A3:32:65:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2scQMP4IHgK6tII9BWj_sqMyZeE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/25e6d8-4e72-4ac2-b6e5-c8201b91aec3/1/2scQMP4IHgK6tII9BWj_sqMyZeE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:cd:6d:63:4f:34:39:30:5f:f1:7f:ca:03:fc:c7:25:9a:3c:
         04:38:47:62:a1:46:8b:b5:07:69:b6:74:1a:32:3a:81:39:95:
         a8:74:f3:ce:ff:16:8c:3b:bb:8c:ba:f1:39:cd:e1:d6:f8:40:
         1a:b3:69:b6:25:03:b9:50:5a:82:e6:95:5f:21:3c:bc:2c:30:
         79:99:3f:8f:d0:1d:7e:f1:74:c0:2c:fb:a5:e5:1f:ac:5d:f1:
         02:f8:c5:a5:20:c6:e0:d3:d1:f2:ed:99:9e:c1:0e:76:62:4b:
         16:e5:c9:02:60:fb:e9:5c:77:80:3c:1f:49:b4:0d:1a:ac:3f:
         92:c7:66:77:06:b6:ca:c4:dd:97:b5:2e:f5:2e:26:f2:f8:d2:
         19:6b:ae:d8:e0:96:10:7e:53:a5:45:ac:0d:f7:3d:21:fc:1c:
         1c:fe:ed:c6:cd:9c:a8:e0:79:b1:83:b7:80:db:7b:bc:fc:9c:
         0e:8d:85:3b:6b:81:84:6e:df:5d:0a:05:03:de:d2:91:f1:84:
         ef:c7:a8:fa:d4:81:e3:7f:43:4e:1d:48:a5:7c:49:ba:54:eb:
         90:e0:10:dd:24:ae:f2:05:7d:eb:f0:17:e5:42:a9:ce:d7:f8:
         7f:45:fb:60:51:df:5b:1c:92:99:fd:eb:48:d4:8b:df:0e:13:
         41:80:04:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----