Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
File:                     1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft (raw, json)
Hash identifier:          2XDU3mgCK5tFVFjy37d3VmtpieHasTgz/hche1TWJ6k=
Subject key identifier:   EB:EA:8F:50:EB:F1:F9:D3:A2:A7:A6:EA:7F:9C:5A:0C:F5:D3:90:9B
Authority key identifier: D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72
Certificate issuer:       /CN=d422367433765b541a37390a998997b737c46472
Certificate serial:       01962FAB18F6CC989F574413B8C5D4D8D6D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 15:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:04 +0000
Files and hashes:         1: 1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl (hash: swbOW23V8voQPewU7eYPT2AvOocoGga5QGOWN0zLKt0=)
                          2: dO1sDlUm4GNT1NLwZmfUYJ1pPqA.roa (hash: JWs3QU5N8u442ANJ16//ujHqSWgzP2/558mG+17RvNo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:18:f6:cc:98:9f:57:44:13:b8:c5:d4:d8:d6:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d422367433765b541a37390a998997b737c46472
        Validity
            Not Before: Apr 13 15:01:04 2025 GMT
            Not After : Apr 14 15:01:04 2025 GMT
        Subject: CN=ebea8f50ebf1f9d3a2a7a6ea7f9c5a0cf5d3909b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:3a:60:b3:f7:3b:e1:76:2f:b8:9a:e0:ed:27:
                    ec:7f:7a:b6:f8:e6:b4:9f:9b:77:9b:00:fd:ca:fd:
                    3e:8d:51:36:32:cd:50:7b:16:b9:d4:52:51:74:f9:
                    c0:7a:50:95:ea:91:28:17:77:3f:c5:a2:5b:9d:38:
                    29:92:68:fc:29:45:f3:19:5c:6b:f0:6e:49:c3:67:
                    34:06:e4:25:3f:ed:e4:6a:18:1a:e9:2b:3a:55:c3:
                    ad:f7:f8:44:0d:50:14:fe:60:d1:65:f7:ad:d6:14:
                    c4:74:49:ec:b8:6f:38:87:31:49:9d:87:bc:23:1b:
                    23:87:44:5a:cb:cd:e6:b0:80:6c:fc:96:82:fe:1c:
                    f5:95:8e:d9:a1:19:1a:96:64:cb:0c:89:85:fe:b6:
                    d3:23:1d:ce:38:ed:7c:92:ef:af:f5:e2:e8:1c:ef:
                    f0:30:b7:23:6b:b9:83:60:1e:78:f0:78:27:98:7e:
                    d0:9f:80:79:53:ff:1b:dd:51:8c:bd:b1:39:3b:2c:
                    bd:de:2f:26:4b:7b:f0:9b:97:32:03:99:63:7a:e9:
                    d1:b5:ef:f4:60:95:29:fa:b9:0a:20:29:6f:d1:70:
                    09:0a:01:29:7a:51:51:78:2c:62:49:8b:5a:dc:41:
                    06:d8:1f:4f:aa:26:74:80:56:bd:f2:08:b4:9a:d5:
                    79:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:EA:8F:50:EB:F1:F9:D3:A2:A7:A6:EA:7F:9C:5A:0C:F5:D3:90:9B
            X509v3 Authority Key Identifier:
                keyid:D4:22:36:74:33:76:5B:54:1A:37:39:0A:99:89:97:B7:37:C4:64:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1CI2dDN2W1QaNzkKmYmXtzfEZHI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/45be32-821f-4514-aa31-bc75466047c9/1/1CI2dDN2W1QaNzkKmYmXtzfEZHI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e3:02:f1:2f:65:5a:e8:6b:bb:87:4a:bd:74:b9:8e:26:ff:
         ec:f6:a9:d7:04:cb:f3:79:0b:17:e4:65:a9:6f:69:58:dd:06:
         46:2b:fc:8a:47:18:4e:a9:a2:cd:84:bb:0a:17:9f:67:1a:2a:
         9b:29:56:e2:cb:c7:7e:c9:50:b3:90:39:e4:96:d5:11:59:18:
         25:4e:a7:5c:c4:d6:a5:56:14:ca:87:6a:23:e5:ed:9e:38:96:
         b6:80:e6:1d:7c:3b:66:c7:48:24:d6:04:4f:06:3f:e1:8b:5f:
         01:b4:d5:a3:d0:90:5b:fb:70:75:f0:f4:09:de:3b:47:90:fa:
         da:5b:70:fa:4b:46:0c:3b:43:18:e9:61:b7:06:c0:9b:e7:8c:
         c1:3f:5b:4e:88:8e:c3:7e:c9:8f:ee:e0:8f:15:e9:4a:9e:ec:
         d7:ad:88:a7:88:cf:0d:9d:3e:bc:ca:09:ae:cf:38:31:75:a6:
         d1:23:28:9f:b0:e0:e9:f5:2d:1d:cd:95:e3:43:d4:9c:13:46:
         bf:01:d1:4f:3e:71:34:98:99:bc:2a:5d:cd:98:02:58:ed:12:
         15:a8:bf:4c:6a:d2:48:c5:02:45:f5:9e:1e:12:e1:cd:e7:bc:
         35:1b:36:e8:1d:fa:1d:d0:d8:71:10:5c:49:b7:16:a2:b1:ea:
         f6:57:7c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----