Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
File:                     ib1U59acFH1rVvjGognT3q6id90.mft (raw, json)
Hash identifier:          KTQRNvDyC1egnRKGXQ4S1Y8PfSBmxBomYhfycpeUTWw=
Subject key identifier:   1C:0F:A4:9E:28:8C:BD:C2:4E:A0:EA:78:D7:FE:A5:96:68:22:99:73
Authority key identifier: 89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD
Certificate issuer:       /CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
Certificate serial:       01962E2B2F79D206C06C55B33F0CBF0996D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft
Manifest number:          0F97
Signing time:             Sun 13 Apr 2025 08:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:44 +0000
Files and hashes:         1: 3TtQeJqIixTVaSWBRgJKRyJiMtM.roa (hash: +aaxMIBwckBc+5Nn6sLOaOsjDThvNfT/bDobAmTCJB8=)
                          2: 8GtdV5vXVwAD_7uzLpWTP9X8Eis.roa (hash: va61wvJzxODdeX2y1RUDtdwQklO+DI+rxflcf0q3NHg=)
                          3: ib1U59acFH1rVvjGognT3q6id90.crl (hash: uOF9SMZTYGpG8TYg+cyRAYC4OED0MeDXdDjNgIHUgu4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:2f:79:d2:06:c0:6c:55:b3:3f:0c:bf:09:96:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89bd54e7d69c147d6b56f8c6a209d3deaea277dd
        Validity
            Not Before: Apr 13 08:01:44 2025 GMT
            Not After : Apr 14 08:01:44 2025 GMT
        Subject: CN=1c0fa49e288cbdc24ea0ea78d7fea59668229973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:55:ef:7e:52:46:f3:90:9c:1a:52:77:5d:
                    ca:f8:a3:9a:40:c0:bd:f1:de:fd:ee:de:0d:cf:e2:
                    78:85:36:45:b6:44:12:98:84:b3:e4:1f:25:7d:fa:
                    77:03:f8:c9:0d:1f:90:9f:a2:af:dd:40:4f:f7:2d:
                    90:36:5d:0b:9c:37:bc:8b:2b:eb:fc:c5:aa:26:31:
                    6e:8e:c2:53:91:7d:f1:72:de:9a:bf:1d:20:cb:d7:
                    04:84:31:d7:0d:25:da:91:d6:6e:2f:da:a1:e5:70:
                    4d:bc:9e:aa:ea:08:6e:77:50:a6:44:32:0c:af:c2:
                    27:f8:da:27:ab:77:73:bd:e9:15:c6:eb:9b:64:32:
                    92:a3:96:40:6a:1a:d5:d3:84:69:7e:6c:d7:16:45:
                    52:7c:db:aa:d6:47:f0:65:25:fd:8c:51:67:f5:38:
                    d0:68:69:d2:05:f3:1d:ee:6e:02:15:0f:b5:c1:14:
                    4b:ac:8a:69:91:1e:5e:05:77:a1:91:aa:3d:39:d7:
                    62:5c:95:99:4d:fe:05:a6:ec:ab:6e:1f:aa:fa:79:
                    10:1f:da:22:85:ac:3e:57:5c:9f:27:b9:89:80:11:
                    db:d1:6d:9e:a2:c8:d7:69:58:a4:d6:10:df:d4:b9:
                    57:c0:fd:6d:bf:a7:ea:f6:0a:90:ce:ea:98:ee:5e:
                    61:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:0F:A4:9E:28:8C:BD:C2:4E:A0:EA:78:D7:FE:A5:96:68:22:99:73
            X509v3 Authority Key Identifier:
                keyid:89:BD:54:E7:D6:9C:14:7D:6B:56:F8:C6:A2:09:D3:DE:AE:A2:77:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ib1U59acFH1rVvjGognT3q6id90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d800be-4acf-49f2-969d-db227c496804/1/ib1U59acFH1rVvjGognT3q6id90.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:45:9f:3a:8b:d0:c1:e2:81:14:86:6b:05:a2:5e:0a:44:52:
         70:de:71:5e:b0:68:31:e0:9b:e8:b5:c9:89:b1:c3:07:58:8b:
         e8:92:71:41:52:d3:9d:12:39:b8:83:6d:a9:47:06:92:31:6f:
         66:13:88:e7:6b:9f:c4:30:6a:ba:46:5e:63:f7:93:e0:b4:36:
         13:08:96:b6:63:9e:47:4e:d3:aa:ff:9b:1c:99:60:41:df:ff:
         51:6c:f2:3e:36:1b:76:35:ea:51:e8:ff:0e:27:1e:87:47:cb:
         d8:f7:85:aa:3d:84:ec:12:63:6f:af:5a:dc:d8:d6:b0:0f:49:
         ec:be:db:b3:a2:e7:07:3c:de:cb:98:e4:0e:29:44:86:02:30:
         cb:10:7c:d0:8f:c3:5f:b9:85:9c:4b:d8:b1:0c:db:61:7b:59:
         2d:94:14:38:63:9b:60:be:46:2d:b8:8b:e2:ed:19:7b:21:53:
         6e:d7:9d:8b:42:3b:21:e8:31:ba:09:46:f3:af:65:e2:ff:66:
         df:fa:6f:c0:f8:05:83:0f:c0:ea:0b:8b:1a:12:90:71:18:0e:
         35:42:e0:a9:57:99:e4:e6:64:33:3f:4f:75:d8:99:69:06:08:
         c7:22:6a:82:63:36:8e:b9:7d:31:e8:d5:c8:06:0a:ae:26:88:
         c7:7b:a7:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----