Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
File:                     IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft (raw, json)
Hash identifier:          QbJMYm7XjJ4u/7CJucgam6IlSKT/Zm8oVTbbURXo37g=
Subject key identifier:   5F:09:D6:A3:2C:94:F7:66:B1:9C:C4:B1:1C:2F:01:35:FA:FD:A8:00
Authority key identifier: 20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45
Certificate issuer:       /CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
Certificate serial:       01962FAB9388977E157027560D7B2E8F9D32
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft
Manifest number:          080B
Signing time:             Sun 13 Apr 2025 15:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:35 +0000
Files and hashes:         1: GE_VINn07eeSJYTvZIuo88WEV3U.roa (hash: 7RURCigC0zQY7NED6IrTycMVsCozhn/RUtlNFgdIpNw=)
                          2: IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl (hash: HuuOrNsBHMG2al8zIyAPyUYJEAgAnkm8+whoN1xDY0k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:93:88:97:7e:15:70:27:56:0d:7b:2e:8f:9d:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2091a77f7c424e9127398473bfa3a2b9727ebb45
        Validity
            Not Before: Apr 13 15:01:35 2025 GMT
            Not After : Apr 14 15:01:35 2025 GMT
        Subject: CN=5f09d6a32c94f766b19cc4b11c2f0135fafda800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b5:f0:ad:08:c5:1e:2a:9e:8b:d7:d1:49:30:
                    80:ee:34:d4:2c:25:87:96:07:e2:41:12:41:3b:4b:
                    3b:80:d1:2d:a9:ba:26:c0:bd:6e:ab:24:c9:41:76:
                    f4:77:df:28:ff:d6:74:68:95:cc:1f:a6:1b:8f:ca:
                    c1:20:0b:8f:36:1b:63:37:d7:ed:f5:40:59:07:97:
                    01:f5:87:20:23:70:0a:b4:e1:de:7a:9b:14:96:e1:
                    8a:fb:30:07:a0:42:ec:01:35:13:fa:72:36:c2:4f:
                    67:38:bf:cf:99:2a:43:b1:3c:b3:d1:b7:27:ef:2d:
                    58:57:28:83:53:74:81:55:b8:48:18:04:a8:8b:6c:
                    36:d4:aa:66:7d:c7:a2:b5:0f:f4:5d:73:ea:7c:33:
                    86:62:a5:09:98:2e:72:ef:cc:4e:b9:e1:95:bf:df:
                    02:83:ea:3a:13:99:cb:a6:6f:cc:84:88:a3:35:97:
                    69:3b:90:2b:6d:8c:d0:14:7d:dc:53:2e:b3:ba:92:
                    9f:90:5e:ff:d7:c2:de:40:56:a4:7b:5b:cc:10:00:
                    fc:62:dc:f4:78:37:8e:47:2e:2d:26:69:49:fe:82:
                    e3:d2:83:ef:a6:ca:f6:6a:0f:1c:dc:37:31:13:60:
                    78:d7:ff:44:19:00:f0:d1:70:4e:2b:fc:f6:5f:44:
                    69:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:09:D6:A3:2C:94:F7:66:B1:9C:C4:B1:1C:2F:01:35:FA:FD:A8:00
            X509v3 Authority Key Identifier:
                keyid:20:91:A7:7F:7C:42:4E:91:27:39:84:73:BF:A3:A2:B9:72:7E:BB:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/06b317-9114-426b-9983-9a229780e0be/1/IJGnf3xCTpEnOYRzv6OiuXJ-u0U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:c1:5c:84:1c:3f:af:aa:c8:cb:de:da:de:e7:67:b5:79:96:
         bd:32:12:e3:f9:d6:1f:6c:29:28:41:b6:2f:1d:70:cb:5e:7e:
         5d:f2:a5:8f:a8:71:93:20:94:fa:39:cb:ef:81:f4:a3:46:2c:
         2d:3e:1f:87:ab:3f:d1:a6:2e:9d:52:b9:76:f5:61:44:69:d2:
         0b:27:cb:88:f1:d2:20:44:09:4e:31:b0:46:d4:26:57:27:f9:
         a3:b5:cf:7c:0f:7d:a3:8f:79:a8:ff:72:a6:f3:c6:37:38:5b:
         54:ad:d8:80:76:a9:6f:77:fb:bb:34:be:a3:d8:b3:de:32:2b:
         ae:76:88:0c:8e:ca:76:7b:7b:0e:d2:58:c4:98:8e:11:b5:8c:
         aa:43:9a:2f:9e:cb:f8:95:6e:80:5e:c6:8d:9a:ca:51:d2:1f:
         e8:a8:08:0e:df:dc:62:56:1b:01:f7:7f:cb:fb:48:3a:45:4a:
         0a:8b:8c:f4:85:03:61:c7:86:46:b2:a5:81:e6:14:72:46:27:
         63:0d:22:e1:74:93:60:e5:5b:e6:b6:65:49:eb:88:80:1e:a7:
         73:29:2b:90:c5:83:55:a3:2d:92:a2:b0:80:b1:f5:3c:56:b1:
         91:84:9a:6c:2e:d5:77:78:82:c9:0f:0b:0e:5b:fd:b2:1f:09:
         e4:40:c4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----