Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
File:                     IPY4EHq7hK5vsDzB2yz9G8RIf40.mft (raw, json)
Hash identifier:          4Zt2jTW+fxc6JyROH0EX39z+mdV2hXeuplAla5ecvFU=
Subject key identifier:   0E:39:4B:56:29:BA:E7:6A:8F:F5:59:03:AC:5F:B3:DE:BE:12:ED:6A
Authority key identifier: 20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D
Certificate issuer:       /CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
Certificate serial:       01962E9940F4838EF03F2E84760D593FE736
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft
Manifest number:          0EB9
Signing time:             Sun 13 Apr 2025 10:01:57 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:57 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:57 +0000
Files and hashes:         1: IPY4EHq7hK5vsDzB2yz9G8RIf40.crl (hash: iyDE4StKtuVLk3r4GLsGiS5CEdcDoJ7z3FjBggycjFw=)
                          2: JK5dBkqsG4C8M2ttw7JiFgUdZew.roa (hash: vMhSi46i8JCqRLgPeW41NRu360WeGbF0LT7pGWnTq7U=)
                          3: VNrppWVy36SKNgtS_F1qaT2zJHY.roa (hash: 9DXGS+oBa4dlfj3+GMMrbil8G+vwg9kQTst1kCj/GhM=)
                          4: sLy4f0J28AKLnDg3qJ8vxAYCBx0.roa (hash: beKd4jqG4/esSSfPF84tT28gcKiXZoavsjTYolwvANc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:40:f4:83:8e:f0:3f:2e:84:76:0d:59:3f:e7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f638107abb84ae6fb03cc1db2cfd1bc4487f8d
        Validity
            Not Before: Apr 13 10:01:57 2025 GMT
            Not After : Apr 14 10:01:57 2025 GMT
        Subject: CN=0e394b5629bae76a8ff55903ac5fb3debe12ed6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:48:06:5c:ef:b1:09:72:82:6c:54:b0:04:97:
                    94:bc:26:90:d0:a7:27:99:40:95:c0:42:97:9f:ce:
                    f2:99:75:11:60:05:14:b9:4c:d8:7e:a4:fe:97:9f:
                    2c:0b:44:e5:b0:77:d7:05:19:5b:e9:52:1d:a1:6c:
                    d8:07:d1:d4:10:be:8c:32:b6:80:be:2f:c2:7a:e0:
                    3d:30:7b:8a:00:87:dc:a3:36:20:f4:ff:ab:50:ed:
                    ce:cd:61:cb:60:a6:5b:e8:f3:8f:4b:8a:72:da:21:
                    c5:c2:19:09:b7:2c:02:cc:81:5d:7e:0f:3d:45:2a:
                    aa:5b:1d:05:ec:6f:01:2e:74:95:eb:ed:7b:05:c9:
                    f2:62:1c:69:da:2d:75:d0:ca:cb:fd:7c:ff:51:d2:
                    df:89:35:35:a6:8d:6c:16:8d:5b:65:f2:85:a3:1f:
                    49:f8:1d:fe:d2:7e:16:1a:ad:86:42:81:3e:af:d5:
                    a8:bf:2d:71:f2:df:37:17:fd:da:47:ae:d9:88:ea:
                    1e:72:ef:62:6e:68:8c:89:73:17:96:09:c1:79:1c:
                    de:80:d3:e0:e4:14:f8:6f:27:df:09:d8:c9:27:ff:
                    2a:b7:c1:8e:55:0a:1f:14:c0:58:00:56:b0:e6:b4:
                    31:e0:76:c5:49:d5:c5:c5:fc:4b:f0:b5:19:a3:04:
                    40:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:39:4B:56:29:BA:E7:6A:8F:F5:59:03:AC:5F:B3:DE:BE:12:ED:6A
            X509v3 Authority Key Identifier:
                keyid:20:F6:38:10:7A:BB:84:AE:6F:B0:3C:C1:DB:2C:FD:1B:C4:48:7F:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPY4EHq7hK5vsDzB2yz9G8RIf40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4f5808-1c04-4255-9b84-a82836de05fc/1/IPY4EHq7hK5vsDzB2yz9G8RIf40.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:72:90:e2:5a:e5:a9:7c:ee:46:cf:ea:c4:29:b1:5a:3c:06:
         a2:7a:6c:ff:c9:63:af:34:4d:8c:fd:c3:a5:ea:4d:ec:17:bd:
         46:09:fa:06:8b:e8:55:34:ba:1e:d2:0f:3d:db:b8:68:0f:13:
         ae:f9:97:56:85:46:17:37:22:14:3e:d2:52:c8:7f:b3:a1:ba:
         69:87:97:76:35:bd:36:4e:b4:07:66:96:ee:a8:44:2c:e8:11:
         cc:71:84:4d:7f:0f:2d:e9:0c:bc:b5:46:41:57:58:a3:7e:c3:
         b8:3f:10:fb:79:a7:5a:e9:15:1c:81:15:e5:ac:15:e3:b6:c4:
         86:50:87:d0:35:f5:5c:4a:95:1b:4d:df:5d:fa:c4:cf:fb:d8:
         90:74:23:99:17:e8:0a:de:49:26:ee:98:47:80:c4:a6:9d:58:
         94:ed:85:a9:4f:59:e8:d9:6c:67:19:ef:02:fd:63:8c:b6:58:
         15:94:62:f0:34:16:4a:80:ef:c1:38:2d:bf:66:6c:13:8d:d9:
         b7:b7:cc:98:42:bf:2b:19:e4:b1:d7:05:c9:4f:86:03:1d:65:
         ba:3c:22:8f:08:cd:c3:57:d6:3b:07:6c:9f:9f:a4:d1:3b:2c:
         96:b6:f0:94:34:ea:7f:6e:a4:a3:58:55:56:b6:66:91:b1:e3:
         10:58:46:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----