Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
File:                     imBgNTuY9TMW0CL6AdKZ11__ItY.mft (raw, json)
Hash identifier:          BwRD9IRoS17k70VlurCKqQjT4SI953ppLaiZEnNA5iY=
Subject key identifier:   62:67:68:67:58:39:32:DB:D7:B1:B4:61:AA:84:C9:5A:39:FF:5E:C0
Authority key identifier: 8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6
Certificate issuer:       /CN=8a6060353b98f53316d022fa01d299d75fff22d6
Certificate serial:       01962ECFB9EBF2CB3E820EB32FFB38338067
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft
Manifest number:          0219
Signing time:             Sun 13 Apr 2025 11:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:27 +0000
Files and hashes:         1: MWQs7smLM41JWlrIEwmzhqUHVf8.roa (hash: OX5LMdPBdAQfYd3SzSOK+sDVxi0rfkwg65wGbyodCfs=)
                          2: imBgNTuY9TMW0CL6AdKZ11__ItY.crl (hash: 4qoeU9tH/6QTUATudCaio9e277CqxDyjOelhAu5pCf8=)
                          3: sY_8uI_Vy_Kyk6ImGlPdHmVKVYk.roa (hash: NexMNxJOVKLfI4XsOD08LdcHHjE/wZ9FYtwH9p7yFUI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b9:eb:f2:cb:3e:82:0e:b3:2f:fb:38:33:80:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a6060353b98f53316d022fa01d299d75fff22d6
        Validity
            Not Before: Apr 13 11:01:27 2025 GMT
            Not After : Apr 14 11:01:27 2025 GMT
        Subject: CN=62676867583932dbd7b1b461aa84c95a39ff5ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:4e:52:f7:73:e4:de:98:f8:34:d4:f2:4b:
                    8f:05:20:c6:a5:6e:8b:45:7c:b1:dc:fd:aa:19:e7:
                    bb:c0:a8:fc:2f:08:52:72:50:37:ff:cf:a8:d5:cf:
                    f1:88:04:c9:20:b2:c7:cf:7f:05:51:01:0e:a3:aa:
                    a5:ff:61:d2:fb:e2:83:e1:b3:a5:0f:d0:f3:52:ca:
                    66:63:05:1e:df:40:89:8f:fe:4a:7d:a0:55:52:a4:
                    f1:a5:37:fa:93:73:a1:8b:b0:9e:b7:64:25:c4:46:
                    54:99:f8:e9:ae:02:97:c0:b3:d4:4e:b3:20:5d:d0:
                    14:09:a2:56:e4:b8:ef:8e:ff:d8:79:a5:0b:7d:79:
                    2d:06:65:80:2c:58:90:51:7b:a3:10:3a:b6:13:07:
                    53:0c:b0:98:98:2e:f8:e1:eb:b1:ec:50:a2:45:74:
                    20:ab:33:69:73:e9:49:8c:b3:af:bb:01:02:9a:f0:
                    de:17:57:18:70:90:c8:7c:09:60:88:13:05:f5:ab:
                    14:ce:e2:3a:3c:3a:42:a9:64:09:69:e1:41:5d:fb:
                    a4:c8:df:7c:60:ba:4e:b4:2f:5f:ad:ba:de:da:f2:
                    24:c0:ab:b7:90:ba:54:da:e8:61:32:13:e7:36:01:
                    71:f7:97:07:dd:40:9c:5b:be:a8:54:44:0b:ea:44:
                    74:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:67:68:67:58:39:32:DB:D7:B1:B4:61:AA:84:C9:5A:39:FF:5E:C0
            X509v3 Authority Key Identifier:
                keyid:8A:60:60:35:3B:98:F5:33:16:D0:22:FA:01:D2:99:D7:5F:FF:22:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imBgNTuY9TMW0CL6AdKZ11__ItY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/969dc2-fa56-45b6-a3de-52ee43642e10/1/imBgNTuY9TMW0CL6AdKZ11__ItY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:9b:f4:87:69:cc:fc:fd:67:fb:f6:0e:da:14:8b:b9:56:7b:
         67:64:3d:ce:69:2a:28:15:9d:e7:f2:c5:71:25:af:75:a3:51:
         f7:7f:ba:00:05:2b:cf:bd:ef:c6:84:1f:b6:6d:c3:40:19:fd:
         a2:c1:bc:41:ce:95:d7:c7:ff:b5:79:f0:9d:eb:8c:ed:38:92:
         38:ac:c0:3f:31:ed:13:2e:1f:0e:33:24:98:5d:74:1d:8e:76:
         bc:9c:ab:0d:56:ea:9b:cd:1d:e3:39:e5:df:f7:0a:57:4f:5f:
         71:2f:18:05:b2:9b:21:a0:04:e1:83:13:0c:cd:44:c3:97:4e:
         d5:c8:25:08:5c:3a:c1:7a:3c:49:6a:86:35:ab:8b:c4:99:71:
         e5:22:bb:50:fe:4b:ef:9b:f3:88:7e:62:41:2c:aa:04:bd:e0:
         1a:76:68:85:52:99:cc:64:f4:77:9c:59:70:90:a7:7f:b2:28:
         94:9f:70:59:cc:2c:c0:6a:07:0d:5f:de:09:aa:28:d3:16:73:
         f5:03:f1:5c:90:c9:07:1a:3c:36:4d:4f:7a:03:fb:40:ba:61:
         57:91:6a:d5:8c:07:d4:a2:a2:a8:80:01:6c:7d:bc:4f:33:c5:
         20:04:66:98:34:c3:46:e5:47:20:e3:62:1b:8a:62:70:8d:f2:
         7c:e1:b9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----