Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
File:                     IMXuAtLgWGHdkG_gazhE8E03jHM.mft (raw, json)
Hash identifier:          2TidBcedFC8vpBYEc5N8LiRel3e+pRWarhDVXTTje4c=
Subject key identifier:   E5:D6:46:30:E5:FD:3E:45:80:5A:EC:13:92:8C:5D:A7:14:86:87:39
Authority key identifier: 20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73
Certificate issuer:       /CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
Certificate serial:       01962ECF820B2151E3C454441E4B5D4ECBC1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft
Manifest number:          03B3
Signing time:             Sun 13 Apr 2025 11:01:13 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:13 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:13 +0000
Files and hashes:         1: 7xOhUPHtrbr-aDnyk2sqIXaZxmE.roa (hash: kq8yM7VvfoH1+ATjkQ5zBAmoZIPQA7DySnzjc28AM7I=)
                          2: EO7_sAa5INTWdb0sB8KoIZTsSpE.roa (hash: SZljpS9Me6EqFyINGEQdOy6JlEANEGEhl0H6HmWV3fM=)
                          3: IMXuAtLgWGHdkG_gazhE8E03jHM.crl (hash: hKLIIlnUkYLHR6MpMTqltJZmDkmSko8YXO5cHbp199w=)
                          4: Wr8EOmHckxzTGd0Aamj6K9DADdU.roa (hash: OPshObN2z5FsqJnygnFeWGUMJE0uYykW0pM3DUOjmQQ=)
                          5: YqXOQdzyJGKEIsRRKloxLXSE6Ms.roa (hash: oxg1KeTKZ090F7XaYRFBJpN4jEk7flH1GMsXEE67BF0=)
                          6: wS-ZYWnE9Zk6DJUs3sCV5yBn3ak.roa (hash: 4bRb80RRs/QoIhxBs4Ime6HGYShS2787nhwQD+lr7Xw=)
                          7: wnHzclbUTpmI2i25YXVP3hxML5Y.roa (hash: aE81auZ0/hL8t66uhuMDoL2Ds7gb0agCHWXH7RqZEB8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:82:0b:21:51:e3:c4:54:44:1e:4b:5d:4e:cb:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20c5ee02d2e05861dd906fe06b3844f04d378c73
        Validity
            Not Before: Apr 13 11:01:13 2025 GMT
            Not After : Apr 14 11:01:13 2025 GMT
        Subject: CN=e5d64630e5fd3e45805aec13928c5da714868739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:15:cd:a8:56:ed:60:df:1c:d8:89:62:87:61:
                    c7:ff:4f:b3:0b:6c:b2:4f:6c:4c:d9:3b:3d:50:40:
                    dd:b2:e4:24:0e:c7:b0:ac:dc:78:e0:53:d2:d7:2e:
                    bf:83:71:04:16:fe:68:ee:c1:52:c7:5f:da:b3:5e:
                    e9:dd:12:94:ca:a3:c2:fe:0d:6b:b6:27:f4:19:c7:
                    01:a4:43:7f:d5:cb:ae:61:a5:be:fb:9c:b7:49:76:
                    ae:72:36:6f:87:b2:13:0e:8a:96:59:7f:cb:27:d3:
                    18:23:9f:18:6b:f7:ab:be:16:8b:a7:58:87:a0:ab:
                    46:88:ae:c1:c8:95:88:28:71:29:91:c9:6a:99:e5:
                    d6:89:b2:0d:3c:6e:cd:10:94:c6:66:01:26:ec:6e:
                    29:4b:19:52:45:87:7d:73:63:e7:15:ef:6b:ad:0a:
                    95:c5:be:7a:ab:6a:ee:06:c6:bb:0a:11:22:32:25:
                    0f:9f:6f:5e:b8:49:ad:61:62:07:a1:0d:66:ac:61:
                    0c:c2:f8:6c:89:b7:b9:81:39:84:c4:b7:66:28:8b:
                    bb:ef:e0:c1:10:9d:30:ae:6b:27:e5:95:b6:80:19:
                    de:0a:2d:bc:3e:8f:9f:9d:92:b3:cd:f1:68:e5:9e:
                    2d:72:b7:9a:89:ee:b4:40:b9:e5:19:cc:56:85:ec:
                    98:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:D6:46:30:E5:FD:3E:45:80:5A:EC:13:92:8C:5D:A7:14:86:87:39
            X509v3 Authority Key Identifier:
                keyid:20:C5:EE:02:D2:E0:58:61:DD:90:6F:E0:6B:38:44:F0:4D:37:8C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMXuAtLgWGHdkG_gazhE8E03jHM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/979296-ef7a-4bac-8c15-67771359a2b3/1/IMXuAtLgWGHdkG_gazhE8E03jHM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:5d:e7:b9:7f:9a:a7:91:72:4e:33:1a:cc:07:68:78:40:f8:
         11:71:55:88:f1:33:53:e5:78:48:c9:2e:a0:8f:67:3f:d2:02:
         09:da:58:eb:eb:38:4d:09:c2:7a:d8:2f:28:a0:71:b2:fc:c0:
         cc:ba:a5:a5:d3:0d:de:82:16:47:21:06:c7:39:47:46:f9:db:
         9c:b7:0b:81:19:0e:69:1b:ff:55:fb:85:25:8f:09:15:6d:72:
         2c:14:f7:17:08:5e:df:cf:3b:4b:c8:91:2e:95:b3:ca:5f:55:
         52:76:89:59:0f:1b:83:c2:79:88:5a:a9:58:f1:9b:90:8f:f4:
         f8:90:b4:c1:a4:26:c3:c2:f6:9a:bb:74:b2:f3:3f:79:ad:0b:
         37:85:af:51:8e:df:af:c6:9d:c0:b4:7b:bc:08:ac:0d:f9:32:
         e0:76:6d:47:1a:92:60:24:90:0f:0a:96:e8:35:7d:c0:70:57:
         bb:83:2e:d1:48:be:aa:45:bf:fd:1e:53:17:d6:2a:24:25:98:
         19:97:e7:40:d6:39:63:99:48:f5:5b:02:7d:0c:e6:15:ff:98:
         09:fc:f8:41:43:67:15:21:e0:90:11:54:41:7a:cf:0c:67:b0:
         d8:9b:2e:21:ca:21:57:cf:4f:9f:3f:d2:70:06:b6:0c:16:2d:
         ca:75:3b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----