Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
File:                     ilZohaHW1VRFRs0oXYbE7_6qPCw.mft (raw, json)
Hash identifier:          rsPUIQRFZYow7ITLW5GTVpdg0ez3BUh0dH3pcFUzJ5s=
Subject key identifier:   E1:CB:BF:09:F2:7E:E6:1E:46:68:F6:A2:46:F4:12:49:C9:CB:C6:FF
Authority key identifier: 8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C
Certificate issuer:       /CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
Certificate serial:       01962FAB08CF83C6EB58A201EEC0BAF1B6CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft
Manifest number:          14EC
Signing time:             Sun 13 Apr 2025 15:01:00 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:00 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:00 +0000
Files and hashes:         1: Lb8vbukOa5hlTRoTkAdj0qnnj8o.roa (hash: gDIkSUwNSGV5eKv6/1wqJs7MzcoYqV9u1fGfL9hM0j0=)
                          2: ilZohaHW1VRFRs0oXYbE7_6qPCw.crl (hash: zo8ngaQMqpML/lILwVgwys2UG1zjaPcjbHtaWuGTlV8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:08:cf:83:c6:eb:58:a2:01:ee:c0:ba:f1:b6:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a566885a1d6d5544546cd285d86c4effeaa3c2c
        Validity
            Not Before: Apr 13 15:01:00 2025 GMT
            Not After : Apr 14 15:01:00 2025 GMT
        Subject: CN=e1cbbf09f27ee61e4668f6a246f41249c9cbc6ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8d:c0:a0:a0:29:5c:af:b6:53:98:48:e0:ef:
                    bb:29:9c:11:53:47:39:8c:79:8e:b0:52:ec:ee:54:
                    0a:dd:6c:b6:e7:d3:0f:32:db:46:53:31:b7:78:f7:
                    a0:85:16:62:b6:24:53:34:12:84:2f:1f:69:c0:04:
                    b2:10:af:aa:78:03:07:2d:25:54:35:f7:c2:c5:ab:
                    c5:11:25:1c:1c:84:45:87:cf:d7:87:eb:1d:64:26:
                    ec:3c:80:d6:e0:41:8d:af:4a:f6:76:79:b2:74:f0:
                    f0:91:bb:e1:e2:3e:73:14:da:b3:4e:88:44:14:86:
                    c7:dd:60:2a:55:a8:3b:f3:b0:92:91:07:0d:9d:0a:
                    3f:cb:53:36:31:6b:a9:78:ee:f2:51:de:e4:9a:d4:
                    0a:d8:f8:10:1b:72:72:82:f5:1e:83:73:3a:a8:50:
                    0c:6a:11:f8:a7:f5:16:9e:13:ef:09:a0:d8:14:21:
                    87:2b:45:f5:f3:f6:b8:26:7e:eb:d7:4b:25:aa:af:
                    ff:f8:3d:2c:7b:84:c4:2d:e9:20:2d:11:d7:16:26:
                    fc:ba:8b:b9:d6:10:fa:e0:0c:64:0f:5b:28:be:e0:
                    2f:e3:3e:22:70:c0:fe:bf:c6:d0:fc:6c:58:b4:f2:
                    b4:4b:b1:a0:aa:21:3e:45:a4:af:f8:a0:35:19:aa:
                    fa:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:CB:BF:09:F2:7E:E6:1E:46:68:F6:A2:46:F4:12:49:C9:CB:C6:FF
            X509v3 Authority Key Identifier:
                keyid:8A:56:68:85:A1:D6:D5:54:45:46:CD:28:5D:86:C4:EF:FE:AA:3C:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ilZohaHW1VRFRs0oXYbE7_6qPCw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/dcfbc7-64b8-4c91-89a0-1af05a2237c3/1/ilZohaHW1VRFRs0oXYbE7_6qPCw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:42:e0:e3:a7:9a:66:c4:04:4d:a0:34:59:7f:62:0f:e4:64:
         73:4b:c5:87:3f:b4:10:74:48:01:1f:aa:3f:5c:3e:54:4c:e9:
         aa:8a:a6:80:24:4e:4c:43:ee:7b:1b:c0:e4:a6:89:0f:3f:cf:
         1e:92:7d:cc:0c:78:6f:92:48:a0:7a:89:db:6c:b4:fa:7f:34:
         bc:b3:7e:20:1a:8c:10:c0:d8:08:96:0b:33:91:e1:ec:d3:43:
         07:cd:0a:c0:dc:d0:3d:e7:c1:39:29:e5:96:6d:55:7b:c7:11:
         aa:f0:c0:e5:1f:27:f0:cf:bf:06:37:9d:7c:da:38:96:c1:b1:
         27:87:fb:68:e6:39:e5:21:36:87:1e:5c:35:70:74:1a:fe:e7:
         c7:6b:df:1f:a0:bd:35:15:30:21:e2:d8:8e:1f:e7:c7:31:65:
         9b:dd:22:c4:50:dc:24:f9:01:ba:3f:dd:e9:96:23:90:1f:c1:
         9e:8f:07:99:7f:9e:1e:7e:30:46:e9:5e:14:1a:98:6d:e3:47:
         24:a3:bd:6e:8d:03:94:da:28:86:d0:d2:71:97:34:a3:6c:d8:
         4c:3f:28:30:84:a0:da:6c:ac:45:d1:11:d7:6f:54:49:00:67:
         56:86:c7:a6:dd:81:bb:fc:67:c3:e1:c0:01:e4:99:fc:e1:ff:
         aa:93:82:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----