Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
File:                     iQH2c8aw_4g16gL67bpbSc8UIk4.mft (raw, json)
Hash identifier:          Y5oILqvILa0w6G4l0ZPij2mp9/XO7WhoN6rIoImfOSY=
Subject key identifier:   6D:8F:B3:E7:D4:04:8A:B0:57:84:2B:EA:10:A1:42:E5:02:43:9A:73
Authority key identifier: 89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E
Certificate issuer:       /CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
Certificate serial:       01962FAB20F16916440C1EADE7F22CD5BA24
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft
Manifest number:          0B89
Signing time:             Sun 13 Apr 2025 15:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:06 +0000
Files and hashes:         1: LwODeFlTbNm331VlQw3cZjyD1Sg.roa (hash: 6xKklCkI+s1DbuNSCG9T6RXJeAeTq1fLNQfBDhNCOAU=)
                          2: iQH2c8aw_4g16gL67bpbSc8UIk4.crl (hash: jIDEkHgafgc06v2Mi0vlyAmkJxc/3eqCjiMzjPVCx9Y=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:20:f1:69:16:44:0c:1e:ad:e7:f2:2c:d5:ba:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8901f673c6b0ff8835ea02faedba5b49cf14224e
        Validity
            Not Before: Apr 13 15:01:06 2025 GMT
            Not After : Apr 14 15:01:06 2025 GMT
        Subject: CN=6d8fb3e7d4048ab057842bea10a142e502439a73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:60:bb:63:26:4b:a3:3d:7a:5e:39:0a:56:7c:
                    9d:93:3c:4d:b2:52:b3:19:b0:ba:1f:32:45:a4:de:
                    fe:de:41:cf:71:9b:72:74:19:1b:a5:37:09:c6:fc:
                    f8:e0:ff:7d:9e:0b:f1:11:c8:3d:14:d2:41:7d:2d:
                    99:02:64:22:a3:9b:3c:05:71:b2:48:1d:15:01:1a:
                    d6:19:e9:7a:57:f3:19:7e:08:a3:df:29:6a:6d:10:
                    72:dd:c4:4b:e2:6a:82:3f:4d:65:6e:66:70:11:8e:
                    77:ea:ec:9e:0e:c9:9c:7a:76:55:75:14:e3:62:41:
                    2e:54:e1:48:73:fc:9f:e1:3e:ef:3d:c4:9c:45:84:
                    67:ad:f1:ff:32:2a:e1:f1:73:01:4f:de:d6:66:32:
                    f7:51:d0:7e:b1:8a:95:22:dd:f2:f2:06:79:60:2c:
                    ad:47:24:8c:84:80:74:a9:f5:0a:2b:aa:32:7b:ff:
                    44:a6:c7:0c:e4:b3:d6:90:f5:96:96:13:88:cd:74:
                    5a:ef:3a:e9:97:54:a6:f3:ff:ad:26:63:7f:e5:d4:
                    35:31:d7:3a:07:49:a4:e3:05:7c:bd:05:5a:27:79:
                    d9:6c:26:d3:0a:68:96:81:00:db:b3:39:55:83:ff:
                    7b:b9:7e:fc:7f:90:ce:77:ab:33:b1:f0:61:7c:bc:
                    12:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:8F:B3:E7:D4:04:8A:B0:57:84:2B:EA:10:A1:42:E5:02:43:9A:73
            X509v3 Authority Key Identifier:
                keyid:89:01:F6:73:C6:B0:FF:88:35:EA:02:FA:ED:BA:5B:49:CF:14:22:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQH2c8aw_4g16gL67bpbSc8UIk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/c2ba10-20ed-4e8c-b76c-53c4d5762d1a/1/iQH2c8aw_4g16gL67bpbSc8UIk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:0a:ea:0d:d6:67:aa:e6:60:3a:e7:29:6b:41:d2:61:bb:0a:
         8d:c8:82:e3:5c:d2:de:13:a2:12:0f:19:0c:bc:4a:77:29:63:
         86:e5:51:30:68:3c:ca:37:12:7e:c1:d3:87:e6:0a:7e:41:2e:
         3d:04:16:1e:9a:15:9f:1f:e4:86:9c:53:59:9c:0f:fd:a2:f4:
         d5:e9:42:22:31:8e:7b:88:85:aa:97:a2:7c:f9:d0:88:1d:69:
         7d:0e:39:2b:78:73:db:b7:5d:ca:d6:10:04:31:47:5c:c1:42:
         35:e2:82:fe:fa:60:b7:e1:35:43:04:61:e1:5c:c5:e8:d9:1d:
         72:3f:a6:c4:67:37:aa:ff:b3:a4:a8:80:24:1f:d7:f1:16:02:
         70:90:ab:40:27:fa:45:34:8c:b0:d8:c8:de:97:a7:7c:75:6a:
         da:bd:53:28:cd:67:09:1d:85:fe:7b:ea:d8:7b:99:7f:0c:0d:
         2f:f2:ca:a2:00:9a:98:14:53:62:45:e2:76:b2:be:bf:f0:72:
         14:88:a8:39:92:19:7a:8f:22:dd:b0:0b:93:1b:a4:0d:5c:4f:
         1d:82:37:fc:42:fc:ef:a2:e5:f8:0b:8e:b9:d5:e7:89:25:02:
         37:d2:ff:f1:be:7a:e7:94:60:d9:31:2d:d2:71:b4:6c:69:fc:
         ec:02:94:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----