Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
File:                     ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft (raw, json)
Hash identifier:          GKEcw1TH/roj5xbj434PHXQRwKFWcOM9Mj3wAH2cqPk=
Subject key identifier:   E6:85:FB:3B:E2:6B:50:2D:C9:5F:C5:5D:62:7A:50:AF:80:E7:48:22
Authority key identifier: 20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04
Certificate issuer:       /CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
Certificate serial:       01962F3D3EB3C3841321E786F5F113C575AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft
Manifest number:          097B
Signing time:             Sun 13 Apr 2025 13:01:04 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:04 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:04 +0000
Files and hashes:         1: 0WfJoxMemQt8nwlwlbf0-N5ZBgI.roa (hash: lHb75yOft9Kv2xRvC1d+Vx96c+J/4+jIL8gOSIRqeFs=)
                          2: 5RlzUCtoZ32Oa93A2fEfoYArcWM.roa (hash: iA8YpgMYI54//mfKtXnw0NA6/nJYpojDOe0q+RA30ZU=)
                          3: ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl (hash: BP7ElsR7ChB3nSPQb3xgDtZ1WTLDfmnWvj6LNIhsmyo=)
                          4: zmJ9lE5vi4Jqc9Z9iVsq8OjO3sw.roa (hash: b4eeLp19myrQzh9AuX2bzcABMyXzCxCR666FaiLOLYU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:3e:b3:c3:84:13:21:e7:86:f5:f1:13:c5:75:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20b5100e798fab7577bf725ac9569ea80e6c2a04
        Validity
            Not Before: Apr 13 13:01:04 2025 GMT
            Not After : Apr 14 13:01:04 2025 GMT
        Subject: CN=e685fb3be26b502dc95fc55d627a50af80e74822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:88:8c:2e:cf:e8:df:99:9b:74:92:54:b5:04:
                    10:a9:29:d4:e9:91:12:4a:3d:76:eb:5f:6e:54:76:
                    5d:1e:30:b6:c5:5d:0f:14:84:48:58:e8:88:e8:6d:
                    42:07:3f:44:6f:11:70:45:69:6f:f4:17:95:70:8f:
                    19:fa:7f:5f:c0:bb:7a:31:81:cb:24:20:ea:ac:b4:
                    c8:86:ee:0b:1a:af:fc:33:ca:df:69:5d:0b:c8:3c:
                    77:df:03:01:15:25:66:4b:1a:49:7b:5c:8f:9a:e8:
                    d4:46:f9:72:eb:a3:a7:e4:8a:b0:ab:cc:00:e5:3c:
                    b6:0b:bd:d3:8d:18:63:1f:fa:22:72:9a:3a:31:fe:
                    1e:0d:56:30:a0:22:49:36:dd:88:c2:7c:bc:20:75:
                    52:47:31:f6:73:4f:c8:aa:23:1e:47:b9:b1:c3:53:
                    1c:8b:27:3d:ea:41:2e:4b:51:c9:0e:ab:45:29:11:
                    16:48:65:88:ac:ee:fd:50:dc:f2:cb:65:65:74:c2:
                    47:21:52:04:d8:fa:84:53:73:cb:8b:23:1a:8d:9b:
                    70:f6:27:59:0a:92:d6:96:f2:92:c6:f3:47:c3:99:
                    b4:32:39:b7:a8:f3:b1:cd:e1:63:62:14:78:cb:ec:
                    7a:13:43:b2:fb:83:b8:5f:94:5e:38:bc:c8:58:85:
                    4a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:85:FB:3B:E2:6B:50:2D:C9:5F:C5:5D:62:7A:50:AF:80:E7:48:22
            X509v3 Authority Key Identifier:
                keyid:20:B5:10:0E:79:8F:AB:75:77:BF:72:5A:C9:56:9E:A8:0E:6C:2A:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILUQDnmPq3V3v3JayVaeqA5sKgQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/9e49ff-4264-4647-95a4-8037965693a2/1/ILUQDnmPq3V3v3JayVaeqA5sKgQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:54:71:e1:81:7a:f7:23:30:f8:e5:42:93:19:0a:89:36:50:
         d4:06:54:65:cc:73:59:39:e5:17:e8:a7:cd:c0:9f:d2:e6:bf:
         8f:93:6d:59:a8:84:57:02:88:7b:b7:1d:34:9d:85:48:b9:d4:
         f4:34:a1:b9:cb:9a:9c:8f:f2:48:8c:f7:a4:9f:fb:9a:77:f5:
         dc:a9:d0:7c:69:aa:f4:97:19:7f:d4:95:be:06:9c:85:90:11:
         c0:e9:ac:80:2a:c5:59:16:21:8f:00:83:eb:06:bf:f2:bc:e4:
         8a:de:d5:ab:3f:56:f4:b1:6f:3e:ae:8b:42:ba:ef:5e:f3:53:
         76:ea:84:11:9a:13:11:9f:25:fd:ab:2a:a0:d4:84:61:67:61:
         4f:70:55:60:3c:48:82:3c:4d:56:7b:a5:48:4d:08:c5:84:06:
         d5:ca:b3:9e:ee:8a:cf:e1:2f:17:58:9c:4e:0a:93:2d:a2:41:
         ef:c8:53:18:11:6b:de:2e:33:49:d1:b2:76:46:54:f5:01:74:
         20:df:3b:31:4b:b9:1c:ef:28:5a:5a:03:32:f1:78:ab:64:03:
         e7:e5:9b:ce:88:ea:61:e5:be:77:10:1b:82:db:a4:29:09:d0:
         77:84:79:ff:53:c3:b0:fa:64:f5:6b:b2:6d:45:8c:35:9f:70:
         cd:d8:b2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----