Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File:                     dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier:          80zpaHpy9MpIZprm4/9dtJMItVpswfuxmWUE87KYDcI=
Subject key identifier:   20:62:5D:3C:EB:BC:E1:19:06:74:62:DF:C2:9E:5B:E3:05:D8:86:5B
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer:       /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial:       01962F06E6E5E6BDD260863B20A5F0A7B557
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number:          147C
Signing time:             Sun 13 Apr 2025 12:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:43 +0000
Files and hashes:         1: 5GQUPOVGommpVDGycPNjbxgsAD0.roa (hash: FIE52nDWdmLHUw5eNYHFQW5KOb1fH0QVln67hfDRIhI=)
                          2: As_2g2yroeYldeSEBOBcptHFZjw.roa (hash: 2A+ZAisZSqDWuxJUH2YsftgFU0YaUFKEL3In2EBPDcU=)
                          3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: Um97AMOU9YIt4SzLI3oFYkO8tFuOUG9qY7aF9Ko5TLI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:e6:e5:e6:bd:d2:60:86:3b:20:a5:f0:a7:b5:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
        Validity
            Not Before: Apr 13 12:01:43 2025 GMT
            Not After : Apr 14 12:01:43 2025 GMT
        Subject: CN=20625d3cebbce119067462dfc29e5be305d8865b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cb:6e:b3:28:fc:43:1f:bd:1d:44:9b:71:d8:
                    7a:fd:43:f1:e1:26:18:5c:21:dc:17:0d:db:d8:77:
                    a0:a4:fb:f6:aa:26:eb:06:4e:87:87:fb:5b:af:b2:
                    ad:fd:53:17:9e:94:92:d9:e6:4b:67:4c:b5:46:d7:
                    10:38:69:00:00:f1:08:c1:59:a1:e1:2d:c1:39:4e:
                    3e:c8:19:6f:a5:44:bb:1f:f7:ca:90:d3:dc:c2:8e:
                    04:d2:63:07:e3:93:7d:67:dc:0c:2c:eb:32:36:e8:
                    34:9e:76:f9:bb:28:92:3c:25:53:c5:6e:5e:50:6f:
                    0b:bf:1b:3e:43:f9:4c:89:c9:d6:b3:8f:e5:23:64:
                    b4:a8:c4:42:15:d7:7e:6e:bc:a2:08:a4:68:dd:0d:
                    5f:48:be:96:55:26:3a:d8:8f:dc:b9:18:4e:cf:7d:
                    3f:b7:57:de:bc:1e:0c:f1:42:06:12:97:46:3c:df:
                    39:d9:12:2c:0c:1b:e5:3f:c8:cf:b6:29:6e:d6:79:
                    bb:9d:c2:19:82:ff:ca:89:ad:99:84:7d:c7:03:74:
                    84:9b:7d:56:5f:c6:70:cc:5f:a2:ea:36:37:b2:5c:
                    a7:e2:bc:48:f3:34:e0:9d:07:d4:1e:be:8e:5f:34:
                    8e:53:c7:42:48:b9:5c:a6:a4:fd:c9:c8:d0:27:b7:
                    40:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:62:5D:3C:EB:BC:E1:19:06:74:62:DF:C2:9E:5B:E3:05:D8:86:5B
            X509v3 Authority Key Identifier:
                keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:70:8b:8a:b6:93:98:8e:80:a7:46:42:fd:53:6c:6a:70:3e:
         c0:d0:e7:bc:a4:03:76:6f:34:b8:b0:27:2b:3d:27:4c:aa:75:
         c8:cb:b5:d0:d4:9e:77:2f:db:e1:1e:c1:19:34:7d:e8:d8:c3:
         b6:f6:9b:63:8c:0f:69:82:f3:97:a2:e6:5a:94:7a:49:86:11:
         a0:ad:43:50:a2:ce:1e:59:1d:7e:fd:d6:b6:ac:7a:3f:bd:0f:
         12:5f:f2:8c:4a:20:2d:6b:47:cc:ba:cb:12:1e:80:11:41:d9:
         d6:94:f2:e7:be:1b:36:1f:a2:22:83:41:99:e8:c6:8c:be:3a:
         eb:19:45:fd:eb:2c:45:99:cb:69:16:bb:2d:d1:82:64:d1:4d:
         a6:e8:3f:61:3f:d6:8b:0f:5c:9f:4d:00:84:81:5d:68:08:c8:
         08:0f:7b:8c:7b:0a:e0:20:90:be:39:3a:b0:e4:74:00:97:f2:
         e4:44:83:d4:c8:04:61:f1:72:38:77:78:59:64:f9:9e:df:c9:
         c5:6b:98:ea:cd:be:a1:bf:d6:39:f2:c1:5c:3e:3f:8e:cd:05:
         6f:10:79:78:c6:67:97:8f:02:30:07:7f:23:c3:55:2d:92:09:
         b0:b8:fc:94:68:d0:d3:61:17:e9:67:72:55:45:c3:91:83:96:
         13:7e:89:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----