Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
File:                     II-L-NASolzM7iEGgD1wZDIO0PA.mft (raw, json)
Hash identifier:          akJn8VwbTn4XeUQZRRK+F/Z2UN6syzDzs0VpbR+HEZQ=
Subject key identifier:   A5:DC:02:CB:9F:2F:D8:32:22:06:C0:9E:A9:94:5B:17:25:7D:75:FB
Authority key identifier: 20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0
Certificate issuer:       /CN=208f8bf8d012a25cccee2106803d7064320ed0f0
Certificate serial:       01962E2AFE0BC6E83C8A76E19EF87B4A60B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft
Manifest number:          121C
Signing time:             Sun 13 Apr 2025 08:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:31 +0000
Files and hashes:         1: GuKetr4Y6ZzvyNbBhedA4m5_pWY.roa (hash: hWzp0ZW056pYjYa7ameczkwCAFFjwLS39b94Y7ubxt8=)
                          2: II-L-NASolzM7iEGgD1wZDIO0PA.crl (hash: sIFtO1K8lzaG6zLFs0n17FGBsOpsXT8cTmSDcODFRa4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:fe:0b:c6:e8:3c:8a:76:e1:9e:f8:7b:4a:60:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208f8bf8d012a25cccee2106803d7064320ed0f0
        Validity
            Not Before: Apr 13 08:01:31 2025 GMT
            Not After : Apr 14 08:01:31 2025 GMT
        Subject: CN=a5dc02cb9f2fd8322206c09ea9945b17257d75fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:83:7e:8e:7f:1b:71:e6:e0:59:81:61:36:a5:
                    e8:cf:4b:a8:1d:a9:68:3e:77:95:ba:a4:b8:f9:a2:
                    e4:a7:28:c3:c9:14:b1:93:57:bc:e0:8b:f0:8c:02:
                    e8:a8:3c:1c:42:e7:1a:fb:70:a5:96:0d:3a:0d:74:
                    f1:6e:36:86:ca:91:38:aa:2c:bc:8d:c7:ba:eb:e7:
                    9f:a5:f8:7b:30:4b:a8:bb:6a:a5:83:c6:59:0b:17:
                    05:06:0f:7c:05:80:9d:91:c5:41:e8:da:d4:8d:a5:
                    32:b5:83:0e:4d:7f:a2:32:7d:eb:73:b3:96:9c:a4:
                    e3:0f:87:8c:94:93:53:43:1f:f2:69:ae:bc:a3:93:
                    8c:c5:b6:c6:4b:03:23:ab:f4:50:04:c4:91:fd:d0:
                    34:a8:e9:a0:5b:4a:c5:78:5e:9f:28:e1:1f:cb:bf:
                    09:93:ed:52:2e:65:a8:ed:ec:07:ea:f8:60:d4:29:
                    63:f5:9f:2b:e5:45:c5:50:c3:10:ed:3c:3c:8b:6a:
                    7f:55:23:a1:1d:30:c6:6a:0d:3a:ba:ca:96:72:53:
                    71:d7:58:39:87:73:38:67:c9:1f:82:9a:c8:87:69:
                    04:22:0b:ea:a0:ff:48:46:b0:09:9e:92:0e:e0:00:
                    34:4b:5e:20:7b:07:7f:78:bb:5a:c1:89:d9:60:67:
                    65:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DC:02:CB:9F:2F:D8:32:22:06:C0:9E:A9:94:5B:17:25:7D:75:FB
            X509v3 Authority Key Identifier:
                keyid:20:8F:8B:F8:D0:12:A2:5C:CC:EE:21:06:80:3D:70:64:32:0E:D0:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/II-L-NASolzM7iEGgD1wZDIO0PA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0ef58a-566f-48bc-b7da-8055ec10ff0a/1/II-L-NASolzM7iEGgD1wZDIO0PA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f1:0e:1f:99:68:79:8d:80:83:4f:8e:b4:d4:56:f6:2d:b5:
         22:5a:9a:34:2d:d4:21:b1:23:08:02:62:09:6b:7e:97:25:70:
         5d:1d:f0:00:b4:92:85:f0:9c:82:c0:fd:86:75:64:74:a6:56:
         22:31:8d:33:4d:d5:e5:85:3d:64:ef:9e:8e:c8:2e:2e:39:b8:
         63:27:d9:3a:43:ac:a7:05:50:30:7f:a0:e5:66:65:0e:33:90:
         46:53:e7:4f:33:3d:9d:79:52:80:fc:b3:07:ef:f2:26:22:99:
         78:80:0b:ce:70:48:50:e5:21:ba:d7:af:58:39:b6:be:1c:3b:
         29:ad:7f:6c:6e:31:c9:49:d9:3d:74:cf:e7:27:d4:d4:e9:d9:
         43:97:a4:4a:5e:18:0a:97:0e:03:c4:f6:ef:8f:07:f3:c2:b1:
         d3:4b:73:94:93:55:96:e5:7d:06:75:5e:cd:84:ae:c5:f5:aa:
         e8:81:78:dd:ab:a9:38:59:d8:6c:71:64:b7:83:6b:98:24:90:
         3d:8c:ce:15:5c:dc:5e:d6:3c:c0:50:63:2e:25:f7:d1:e0:dc:
         b9:d5:31:3b:d5:8b:8f:fc:7c:df:7e:80:d1:78:44:f3:27:b7:
         81:3d:2e:c5:76:0f:eb:6e:74:54:4b:83:3f:9f:f7:0b:9d:ca:
         b3:0f:f7:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----