Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
File:                     Iqz2bwAZxVYzG--ezY32UngqY_g.mft (raw, json)
Hash identifier:          SUpha11m8deZ9PP5aoPlaxv7fqlfwvdYqlPXr/c+Rlk=
Subject key identifier:   6A:B0:EA:13:C6:3B:0D:EA:61:23:99:09:04:40:1E:AE:36:6E:1C:CC
Authority key identifier: 22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8
Certificate issuer:       /CN=22acf66f0019c556331bef9ecd8df652782a63f8
Certificate serial:       01962ECF6650A05A3C848362F4148F40C33F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft
Manifest number:          1446
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: Iqz2bwAZxVYzG--ezY32UngqY_g.crl (hash: 4kWUQVDxrvhy10+tFf96rL9HR6tTYb/XDEz8DEuGNDc=)
                          2: UVEBG1ExZGcscljMEXZmdhHPbmo.roa (hash: OGY1ZCPh4kqtkS+2sWG7TSBefV4b/lqw2cPXHz2iP6A=)
                          3: l7ZphxTNLdfz3s0c0sr67IQOn_Q.roa (hash: 7qT5TEH8UgfN71QCeNJwaAV6tPLOUHK85hJIN/udCok=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:66:50:a0:5a:3c:84:83:62:f4:14:8f:40:c3:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22acf66f0019c556331bef9ecd8df652782a63f8
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=6ab0ea13c63b0dea6123990904401eae366e1ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:25:5b:bc:73:8a:ba:99:d9:f4:20:4f:ec:ff:
                    f2:22:ca:67:cd:35:d8:7b:bd:d0:19:37:85:58:ad:
                    bc:84:c8:ff:51:39:c3:33:75:53:83:1d:88:79:a3:
                    9d:53:7c:72:8f:c6:49:10:9f:f0:fd:46:ec:b8:15:
                    6f:3d:b7:e6:fd:db:57:6a:19:f7:33:8d:72:08:b2:
                    2f:39:4f:10:ab:41:cf:1e:d9:e0:1a:ee:b3:32:4d:
                    d8:96:46:f3:f5:7c:42:36:75:32:73:aa:f1:56:cb:
                    65:3b:48:56:60:33:78:ee:cb:92:67:6b:d7:68:05:
                    a7:c6:21:ed:02:5e:1f:08:d0:24:14:90:fa:0e:de:
                    e9:67:82:ce:bd:ee:59:30:6a:26:6d:ae:43:ff:2b:
                    d8:06:c7:db:66:aa:65:df:96:0d:38:aa:00:cf:81:
                    ed:aa:c1:3f:2b:db:92:07:6e:7e:01:ca:d3:7d:73:
                    f7:b4:7a:0f:f1:97:c4:d8:7b:33:17:e5:1a:a9:e9:
                    c8:80:d2:52:83:b1:b8:6d:9f:bf:88:20:49:8b:5d:
                    77:2b:4d:8d:ba:3f:7c:18:8d:12:40:44:2d:31:c3:
                    24:a3:25:52:34:28:5e:e8:bc:10:63:fc:8a:01:57:
                    78:ce:9c:8d:dc:ef:d5:dd:26:26:db:1b:85:5e:98:
                    eb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:B0:EA:13:C6:3B:0D:EA:61:23:99:09:04:40:1E:AE:36:6E:1C:CC
            X509v3 Authority Key Identifier:
                keyid:22:AC:F6:6F:00:19:C5:56:33:1B:EF:9E:CD:8D:F6:52:78:2A:63:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iqz2bwAZxVYzG--ezY32UngqY_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/2e9677-c5dd-4a31-a8e7-168f21508c74/1/Iqz2bwAZxVYzG--ezY32UngqY_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:40:a9:3f:1e:25:4d:86:7c:ae:67:62:6b:bd:0a:21:a6:0d:
         17:57:a1:04:42:33:62:22:61:ea:63:bb:9e:59:7c:1c:fb:46:
         7b:34:4a:3d:74:5e:b1:2e:b1:15:98:9f:34:05:23:ac:85:11:
         9c:22:ac:e5:56:d3:db:29:f5:a3:b3:ce:e8:9f:b0:8e:2e:45:
         87:31:fb:ae:05:38:c3:9f:71:72:32:a5:2e:c3:c7:97:59:f5:
         7d:00:b4:64:b5:4e:33:9a:3f:e1:f4:9c:96:de:a6:7d:c1:db:
         b2:c7:e2:b1:fb:80:e6:80:32:d6:ad:23:25:f8:83:7e:d2:e7:
         c4:7d:20:40:b8:07:a9:b3:b3:aa:fa:f3:c4:e1:f2:ef:d4:33:
         82:e5:87:5c:6c:06:2d:42:df:1e:56:5b:25:c6:aa:bc:40:23:
         e4:bd:3d:b8:2c:d5:d7:8b:64:45:a6:b0:53:81:e6:82:ba:6f:
         03:96:3f:40:fa:f2:96:68:f3:a3:0e:72:09:c3:7b:18:45:f2:
         03:be:e3:2c:9d:b0:14:02:db:75:9f:f9:c8:a3:8b:da:c5:94:
         5b:d5:0b:36:2f:7a:92:a7:fc:88:8f:0d:e6:24:c1:fd:0f:8f:
         44:23:e3:e3:3d:82:28:e6:8d:3e:f1:83:ca:9c:9c:7e:8e:ce:
         ac:bc:65:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----