Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
File:                     Iu6yQvsK-qA32cr1YExlh-QN47U.mft (raw, json)
Hash identifier:          zlKQXeJ76WpGHS+HGhh7KSOu2+iwgJ+EiFhVwmXUb5k=
Subject key identifier:   DB:B8:14:48:25:B6:44:E3:86:89:1D:22:1F:C2:49:0B:8A:1B:4F:96
Authority key identifier: 22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5
Certificate issuer:       /CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
Certificate serial:       01962DF430950D58100345C09D433EB03823
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft
Manifest number:          0F74
Signing time:             Sun 13 Apr 2025 07:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:39 +0000
Files and hashes:         1: Iu6yQvsK-qA32cr1YExlh-QN47U.crl (hash: QGmOmtA5D82i4wT79J4xcVumNfPGcFXUb8i3+s7oVGU=)
                          2: ff-qexzHEUD1WgOGjo1dcXlM5zw.roa (hash: okd5E/DUi3wr0dkKGYnxuoMgYENizBl6tX2uR1KatU4=)
                          3: o-JKFkGOw7b9iS81cGqL_sPqhTE.roa (hash: LeiOclwc6FMh1dAwDJxgRxawRJ1HHtp5FtwQRdIanPM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:30:95:0d:58:10:03:45:c0:9d:43:3e:b0:38:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22eeb242fb0afaa037d9caf5604c6587e40de3b5
        Validity
            Not Before: Apr 13 07:01:39 2025 GMT
            Not After : Apr 14 07:01:39 2025 GMT
        Subject: CN=dbb8144825b644e386891d221fc2490b8a1b4f96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:42:1f:33:94:83:17:89:41:92:b2:51:1a:9d:
                    10:be:33:8d:36:0d:ff:16:91:b6:88:3a:8b:0d:be:
                    c0:a5:4e:f5:be:ed:32:3e:63:b0:83:cf:37:8f:1e:
                    07:22:8a:1d:e5:ea:de:00:7b:f3:07:55:b2:ac:a4:
                    6a:63:ca:f3:c6:05:f8:a7:76:81:fd:36:14:ad:9e:
                    7e:dc:72:c2:60:ad:30:d0:55:33:6d:3d:b7:aa:20:
                    02:95:4c:41:df:8f:ea:28:fe:a5:e9:49:5d:c4:8f:
                    46:2c:c2:e9:ff:78:21:f0:79:e0:7b:a2:d5:e4:ce:
                    9a:06:96:e7:f9:3f:88:97:29:52:90:f4:0c:e9:2e:
                    68:8c:1b:f8:63:4d:0c:90:5d:05:23:98:c6:be:db:
                    0d:cc:17:65:30:13:a3:1a:d4:03:0a:d2:45:aa:5c:
                    61:b1:73:62:13:1c:ea:b2:a2:f6:45:1a:1c:c5:3e:
                    16:08:60:75:74:43:a2:d3:c0:86:40:69:0a:14:4c:
                    87:f7:c4:84:af:87:7c:08:a0:1c:59:8f:05:f6:70:
                    c2:f3:15:0a:ac:37:95:bf:ac:fd:a6:12:ca:cd:15:
                    db:45:86:ab:66:ae:7a:2f:49:31:2e:f7:41:2f:68:
                    f4:71:5c:f3:19:bb:e0:d4:77:16:c0:1f:6e:31:20:
                    ca:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B8:14:48:25:B6:44:E3:86:89:1D:22:1F:C2:49:0B:8A:1B:4F:96
            X509v3 Authority Key Identifier:
                keyid:22:EE:B2:42:FB:0A:FA:A0:37:D9:CA:F5:60:4C:65:87:E4:0D:E3:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iu6yQvsK-qA32cr1YExlh-QN47U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd62c0-e5db-4d94-ba0f-251562f00fc5/1/Iu6yQvsK-qA32cr1YExlh-QN47U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:de:20:7e:bc:94:ed:77:e9:90:3b:06:cb:d8:68:f0:d1:fc:
         aa:b1:3c:ec:89:a8:f5:3b:55:23:cc:e4:20:d3:37:2f:9b:d1:
         62:83:a7:2b:f1:9b:24:95:fb:f7:1c:9e:b4:21:f6:3b:60:8f:
         cf:13:b1:20:85:8b:27:b1:b1:3d:7f:e6:9d:90:8c:10:41:62:
         8e:0f:4f:fd:4b:07:17:4c:f5:43:0f:78:50:ed:de:fc:6b:8d:
         dc:15:f9:50:17:45:a8:c4:92:4a:a9:38:e7:e4:a4:db:73:da:
         60:14:5e:30:74:ab:68:79:27:d8:27:4b:57:27:7a:12:14:a1:
         ad:5d:13:0d:6a:e9:f0:9a:24:5f:1b:3f:68:e2:94:3d:a5:bb:
         8e:73:72:dd:a0:f2:4a:fc:b1:7f:c8:59:c6:7a:a6:ba:d3:02:
         d1:50:68:84:b7:a2:a6:c1:89:e1:af:e5:93:bd:78:9b:41:9a:
         38:c2:81:6d:f1:24:f8:67:5f:5f:fc:b8:98:95:22:86:e5:9c:
         97:77:80:7b:c0:a8:49:9a:eb:1a:89:07:89:39:57:3d:ec:75:
         a8:fb:41:91:69:9e:bd:f7:1e:0a:ad:b1:18:a9:53:1a:19:a5:
         50:38:61:ce:11:dd:a3:34:e0:57:0f:46:87:93:94:d6:4e:23:
         7f:ee:e9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----