Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
File:                     IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft (raw, json)
Hash identifier:          ODM4XdyGoPbQoXS3U2Mgc9nNvwK7qxAwAsPCm2SG7A4=
Subject key identifier:   1D:3E:C0:6F:8C:50:BE:E5:6F:50:49:90:5E:BB:9A:36:BC:8E:7F:A5
Authority key identifier: 21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90
Certificate issuer:       /CN=2101b6388d6435f54990905382b41dc9675fd490
Certificate serial:       01962F065431C75B5736D028D6B485DC2DE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft
Manifest number:          037A
Signing time:             Sun 13 Apr 2025 12:01:05 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:05 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:05 +0000
Files and hashes:         1: EAD0diuoZK02qxxsVWWiclAVX5I.roa (hash: kzXgijoQ+OFnt0McFOmyH17ijOy9UUEek/dQbYMoKFU=)
                          2: IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl (hash: fH3bG00ZwBuRbS/FgJggeNS0M95ZUiTzJh9N6+MgEcM=)
                          3: nyGLR8VZWMaY-kU1NUM_fc4iRjM.roa (hash: voylSjHlayiNYZNWUzC6whbKd8QLUjoGC1qGpaQazoM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:54:31:c7:5b:57:36:d0:28:d6:b4:85:dc:2d:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2101b6388d6435f54990905382b41dc9675fd490
        Validity
            Not Before: Apr 13 12:01:05 2025 GMT
            Not After : Apr 14 12:01:05 2025 GMT
        Subject: CN=1d3ec06f8c50bee56f5049905ebb9a36bc8e7fa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2d:ea:36:fe:07:a8:50:13:d2:34:e2:48:92:
                    35:ab:55:aa:84:95:68:2c:50:18:5d:0b:d1:7b:64:
                    07:8b:d3:8c:94:96:95:f6:e0:25:c7:a1:fc:a3:74:
                    23:86:5a:a1:f8:91:ca:07:a6:97:f5:eb:7d:c0:7b:
                    2b:0e:03:ad:4e:87:9a:ad:ff:f5:fd:c5:9e:3d:24:
                    67:03:16:38:c0:97:d1:46:c5:07:c8:f5:03:c2:40:
                    84:30:3c:e9:1e:31:de:6b:33:db:dc:d3:03:c8:86:
                    5a:cc:ff:b1:c3:90:65:be:af:90:c3:b4:e5:14:6f:
                    fc:eb:98:90:c7:89:cf:ef:e6:b7:86:0d:c2:de:bb:
                    77:87:03:86:6d:50:4c:c8:8b:af:09:0e:65:25:7b:
                    dc:36:86:b6:ed:10:bf:bd:82:8b:ab:5c:4a:ab:6e:
                    24:5d:32:ea:7a:22:1f:23:7b:85:c8:6e:86:ec:dd:
                    04:03:44:f5:53:fe:fe:e0:a6:be:28:c2:90:b5:a9:
                    89:3d:72:5f:f0:d6:04:88:96:fe:34:f7:d5:40:7d:
                    78:6a:bc:6b:e9:19:b2:6b:8c:9b:3d:36:d8:44:14:
                    74:82:18:8a:3e:a1:a8:b8:e1:17:94:c1:2c:ae:8f:
                    8a:d2:2f:98:17:aa:f6:fa:e1:e0:bd:13:51:48:d1:
                    aa:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3E:C0:6F:8C:50:BE:E5:6F:50:49:90:5E:BB:9A:36:BC:8E:7F:A5
            X509v3 Authority Key Identifier:
                keyid:21:01:B6:38:8D:64:35:F5:49:90:90:53:82:B4:1D:C9:67:5F:D4:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IQG2OI1kNfVJkJBTgrQdyWdf1JA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/c2095a-3b3d-4ac4-9c32-4df8912188f7/1/IQG2OI1kNfVJkJBTgrQdyWdf1JA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:54:60:c5:e9:f5:d7:3a:88:89:37:fc:8c:af:e4:22:0e:4a:
         dc:83:92:5f:9a:75:ac:ba:dd:5c:91:2c:85:ab:94:04:86:9b:
         b0:26:4f:d2:49:c2:1e:e4:03:23:16:2a:21:cd:f6:a3:3e:2c:
         8d:c0:af:45:8b:25:da:50:c6:62:60:62:07:76:09:db:79:da:
         1c:44:8d:8d:89:ff:31:f8:8a:b5:e1:d2:98:c1:8d:36:95:9d:
         6c:ec:0d:20:b5:4b:00:20:93:d2:57:1a:db:6b:78:df:46:8b:
         e8:a5:fe:75:4e:a3:10:05:b0:ec:65:74:56:9f:85:aa:00:76:
         ef:39:aa:0c:a4:38:0e:45:33:a3:b3:2d:84:98:07:5e:f3:b5:
         5f:6a:8a:63:1b:4c:78:7f:87:82:2b:07:ce:d5:5d:49:dd:e1:
         19:33:46:96:21:39:bb:80:91:6b:a5:20:43:65:1b:96:f4:6c:
         02:ec:06:01:e2:a4:f1:22:20:c9:8a:25:8a:b7:db:0a:f6:e0:
         2e:e3:47:1a:ef:06:88:9d:7d:a3:51:2d:10:d9:5b:96:d7:ef:
         36:3e:b3:f1:07:7e:89:eb:d4:85:9d:fa:c7:87:06:b1:77:d4:
         a8:fc:a7:c4:4c:2f:45:9c:dd:1e:14:65:40:d5:36:39:2a:3f:
         3f:e2:70:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----