Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
File:                     IL3vO-tBFM_L_rn7TtjamPr0-ok.mft (raw, json)
Hash identifier:          3jjIPZhrleYLQob9oh9b2/NUZlTKHQLaPFKOoeaSoiU=
Subject key identifier:   66:E7:A6:A1:FD:30:4C:F5:36:86:3E:DB:7E:03:2D:64:A4:F0:1D:15
Authority key identifier: 20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89
Certificate issuer:       /CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
Certificate serial:       01962E98C0B71565DACBA85117903AA10321
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft
Manifest number:          0334
Signing time:             Sun 13 Apr 2025 10:01:24 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:24 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:24 +0000
Files and hashes:         1: IL3vO-tBFM_L_rn7TtjamPr0-ok.crl (hash: mh8JStxn+6aJ/OFSF9KYh87FHZp1hdDlqRfBqaEPntE=)
                          2: NaamLFW_oKTnWlrMvBxG2icERPo.roa (hash: jXRLqGssveFil7+PQTA0NwcnC6RLfG7kChNBk9BzBpk=)
                          3: liwLvjN0YzoFo1ERy-bzjz4VsTg.roa (hash: GDU7sYUZLvs8qPvsE64PL0ZAdRZi5E+mt7+6WSUX+BU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:c0:b7:15:65:da:cb:a8:51:17:90:3a:a1:03:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20bdef3beb4114cfcbfeb9fb4ed8da98faf4fa89
        Validity
            Not Before: Apr 13 10:01:24 2025 GMT
            Not After : Apr 14 10:01:24 2025 GMT
        Subject: CN=66e7a6a1fd304cf536863edb7e032d64a4f01d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f1:2c:fa:e2:1e:d8:55:12:df:f8:d8:31:8d:
                    a9:88:a0:fe:ce:6b:a3:bc:aa:ce:c7:d0:fc:c4:7e:
                    71:9b:95:51:e9:fd:9e:c4:2f:81:d4:bf:33:ab:39:
                    0d:ef:64:94:76:db:0f:35:a0:7a:6f:0a:82:bf:28:
                    c3:b9:8f:7e:9a:a5:70:dd:ca:37:13:8a:ba:5e:a6:
                    d9:ea:4b:85:8f:81:2c:79:85:23:db:52:0e:a3:07:
                    8e:34:2e:f2:f5:d5:bf:fc:4f:77:06:d1:41:9f:31:
                    0c:cc:52:64:c7:23:32:1a:d1:67:e4:bd:3b:6c:b6:
                    cc:31:5a:72:24:b7:38:0c:8c:9b:b6:fb:4f:36:9a:
                    17:2e:52:2f:cd:46:09:fb:91:ef:fd:77:ff:28:79:
                    83:6a:5e:0a:4d:86:c9:8b:d1:cb:93:79:af:3e:f3:
                    85:fb:20:67:d1:a6:dd:e0:93:2d:47:fa:36:13:73:
                    02:75:74:d0:d6:c4:e2:24:87:42:fe:d6:1c:2f:91:
                    c4:6b:c6:9a:f0:10:dc:79:07:41:2c:d9:dc:b8:41:
                    f6:68:a9:b1:b1:a2:06:bf:34:ef:1d:70:b8:12:27:
                    59:c4:41:00:5c:85:1d:e0:4b:a9:9c:6c:b4:8d:b8:
                    a7:26:85:b7:47:03:62:cf:f5:8e:f1:af:86:92:99:
                    c4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E7:A6:A1:FD:30:4C:F5:36:86:3E:DB:7E:03:2D:64:A4:F0:1D:15
            X509v3 Authority Key Identifier:
                keyid:20:BD:EF:3B:EB:41:14:CF:CB:FE:B9:FB:4E:D8:DA:98:FA:F4:FA:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IL3vO-tBFM_L_rn7TtjamPr0-ok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/13/ab78fc-25a8-46c1-8699-1d82ab15c415/1/IL3vO-tBFM_L_rn7TtjamPr0-ok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:b9:c0:b8:15:1b:00:5a:eb:9b:a9:21:3c:67:c4:9b:4b:a8:
         f3:8d:cb:70:dd:5d:e2:26:08:00:f8:1c:76:ae:d8:82:67:49:
         e3:9d:a6:4f:46:d2:b3:73:3d:47:4b:80:3b:e8:54:08:10:bb:
         dc:81:b6:88:ff:f4:bf:1a:e5:c4:7e:c3:a5:c1:7f:4a:4e:5c:
         31:24:19:74:5b:8e:bc:1c:74:fe:a0:87:2b:19:22:21:9e:9c:
         1f:3a:37:4e:d8:0a:28:b2:bc:5f:b7:ed:96:40:74:6e:13:25:
         4a:90:79:2f:9f:ee:04:1b:44:cd:4f:e4:6f:56:18:b6:bf:5b:
         1e:ec:40:c0:47:e6:bc:37:c2:48:e1:ce:b9:07:5d:fc:4d:db:
         46:c8:db:51:d2:99:6e:d7:eb:bb:63:20:b4:cf:32:43:9f:09:
         2d:cc:4a:90:ae:d9:72:80:8d:e5:6a:7d:5d:d1:b0:c1:0e:80:
         bb:f5:e8:0a:f8:e7:ab:d5:81:d5:9a:c6:e4:1c:fc:54:57:d9:
         4d:b5:a5:95:08:ad:96:fa:4c:83:27:e4:32:9e:55:72:c6:fc:
         35:7d:b8:d6:1d:a2:b7:56:da:b2:45:6b:68:ca:44:43:67:80:
         16:8c:6a:55:8a:34:15:04:b1:6f:d7:3c:77:f1:f7:68:d9:80:
         dc:55:48:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----