Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File:                     22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier:          Yz2akJ1jZE+D++s7IofzdJwV1e56/fYiiSb9knDKqZs=
Subject key identifier:   B4:94:09:E0:91:79:7F:10:05:14:5E:04:1C:98:6C:9A:52:87:91:7B
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer:       /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial:       01962E618E75ABE6A4F6BBC9D46E038261C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 09:01:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:07 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:07 +0000
Files and hashes:         1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: qp9mKFNJoDOk/P3uHmO/Fdm9oV407HW7e2+QZevr9DI=)
                          2: 825nFrz3u6HGU-YZ6CH8LLOr_XE.roa (hash: jl6qorIEanDMcWiaTBA0q+h0ZRVRtDHwIH2xPi3aeGw=)
                          3: 8mzSvC4v5Ni41t8FB8aiAfYjJcI.roa (hash: QyI7qjDJOZQBTsa2Xsr+TTNwnCK4F/pFTnriXbmvjf0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:8e:75:ab:e6:a4:f6:bb:c9:d4:6e:03:82:61:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
        Validity
            Not Before: Apr 13 09:01:07 2025 GMT
            Not After : Apr 14 09:01:07 2025 GMT
        Subject: CN=b49409e091797f1005145e041c986c9a5287917b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e9:5b:74:69:c1:cb:75:aa:c9:31:1a:c8:df:
                    7b:d3:ef:46:72:14:ef:13:bd:22:4a:9c:a9:5d:75:
                    05:7d:6a:01:34:41:a2:68:92:ed:dc:3c:86:8c:38:
                    07:6a:3d:fd:21:94:d2:96:f3:23:3b:80:49:36:a7:
                    55:c6:18:15:6a:55:47:c1:09:7a:c3:bc:08:83:fc:
                    81:c5:f2:c4:fd:4d:0b:9b:8f:f3:3a:4f:98:34:84:
                    4b:87:8a:f4:a3:62:22:cc:54:3d:e9:de:11:ec:04:
                    93:dc:72:ec:a8:da:a9:71:77:01:75:71:c4:f7:f6:
                    fb:f2:ef:d0:40:24:4c:82:a2:04:5e:e3:48:57:0e:
                    f6:21:a8:63:b1:2f:9c:ad:08:e8:29:6f:a3:27:a1:
                    74:e4:dc:83:78:0c:45:6f:c2:c2:e2:e2:fb:eb:7e:
                    e7:b7:52:b5:89:51:15:db:11:1b:19:64:c9:4a:9b:
                    8e:65:c3:76:f9:65:03:c9:7f:c9:df:f4:08:73:69:
                    f2:f3:0d:55:ab:cd:0d:6b:40:0b:ed:29:d5:c7:a8:
                    82:c6:ed:7b:f7:2f:6b:3c:68:99:bf:23:6f:c8:77:
                    ec:0a:4a:64:47:ca:74:ce:8d:96:10:47:9f:87:8e:
                    9c:0a:36:2c:f3:30:51:92:c9:4e:c6:a6:a7:b0:ad:
                    41:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:94:09:E0:91:79:7F:10:05:14:5E:04:1C:98:6C:9A:52:87:91:7B
            X509v3 Authority Key Identifier:
                keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:26:ca:e4:68:6a:42:16:92:77:8b:b6:33:8b:ea:30:5e:7a:
         1e:e1:91:91:e4:3f:fd:69:9b:8a:a7:a6:eb:1c:f5:b2:aa:d0:
         a4:de:e2:ed:ae:6e:7d:f3:7d:af:bb:c6:84:fa:cf:74:57:39:
         0e:e0:b4:6f:3c:09:98:04:6f:e8:c1:45:34:2c:f9:6e:5e:ed:
         92:74:7f:6e:5e:0e:8f:23:51:7c:a8:52:ec:6b:fd:fb:3d:a8:
         30:0a:dc:53:dc:61:56:82:25:ab:e1:30:ce:19:07:f0:8f:28:
         30:a2:21:6d:44:91:dc:45:1e:ab:77:51:ee:b4:3b:f1:e4:bf:
         a0:45:6a:a6:f9:ec:e9:a4:66:88:27:fc:33:8f:8f:f6:a7:4e:
         f8:b7:7c:5a:f0:c5:50:3c:61:35:fb:2a:07:70:87:e6:bf:fa:
         0e:d9:d8:7b:49:8e:91:02:4f:57:42:08:8d:b8:14:5e:b7:b4:
         f6:28:02:3b:4e:78:9e:4f:56:20:39:66:48:a3:05:b1:c9:76:
         b4:c6:39:ff:39:bc:14:8c:51:2a:ff:68:f6:ec:cc:56:4d:13:
         33:86:40:26:25:ac:61:cb:ae:f5:2c:b9:c7:08:e6:7b:1e:7a:
         1f:e3:4b:97:cf:5d:6a:80:8e:22:5f:b8:16:d2:81:8b:10:34:
         53:14:0c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----