Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
File:                     jnfGrkiMOml4A3t3CqUjyyUcn_o.mft (raw, json)
Hash identifier:          ypFjDf30lW8w2DVMoKZaOBOS29423PdPQix3uRvuEF8=
Subject key identifier:   0B:FE:82:3B:79:EE:8A:68:00:47:6C:FA:92:48:3C:E1:96:0B:B1:01
Authority key identifier: 8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA
Certificate issuer:       /CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
Certificate serial:       01962ECF663144562DAE2DE3B5BBCD823B45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft
Manifest number:          101E
Signing time:             Sun 13 Apr 2025 11:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:06 +0000
Files and hashes:         1: jnfGrkiMOml4A3t3CqUjyyUcn_o.crl (hash: Lr1h2MQY26WQvFyN5OtrqLRPDeh3tVIjr4lyGiIV7EI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:66:31:44:56:2d:ae:2d:e3:b5:bb:cd:82:3b:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e77c6ae488c3a6978037b770aa523cb251c9ffa
        Validity
            Not Before: Apr 13 11:01:06 2025 GMT
            Not After : Apr 14 11:01:06 2025 GMT
        Subject: CN=0bfe823b79ee8a6800476cfa92483ce1960bb101
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:71:43:ec:3b:76:b8:f1:38:7b:e4:09:f0:5a:
                    f1:7f:eb:2d:d0:3a:df:0d:5f:c8:a8:7d:fb:1d:94:
                    a5:59:0c:89:cd:a3:40:0d:ba:ab:2f:b5:5c:e1:87:
                    ec:b7:2c:00:9d:a7:cb:29:55:80:c8:25:0c:5a:45:
                    e8:68:6f:24:bb:45:d8:ff:0e:dc:9f:c0:1d:37:7c:
                    74:fc:6a:e3:21:8c:e1:7d:33:d1:0c:8a:61:d2:46:
                    4d:66:16:34:26:e9:7d:b0:cb:25:b8:7b:a8:84:1d:
                    1b:4b:40:20:99:a5:41:4a:1c:07:08:1a:f8:4a:b3:
                    5b:6f:47:ed:08:3c:5f:25:8f:36:14:41:85:7a:a9:
                    cb:65:45:84:ae:6b:28:02:5f:b3:b4:a0:16:42:ca:
                    0d:f8:49:ca:59:8e:85:18:61:33:e4:de:6b:4c:b0:
                    44:8a:64:19:92:a6:71:70:94:86:17:80:72:a1:93:
                    0d:1c:1a:65:b4:ed:74:a2:41:21:c8:37:12:5f:ee:
                    97:de:62:06:16:c9:34:76:c0:b2:65:2d:ab:ef:69:
                    cd:37:bb:76:98:05:53:80:74:48:f7:dd:de:77:48:
                    a4:37:45:1b:df:75:db:e1:9b:31:a7:0f:56:9a:d1:
                    8c:a0:0e:73:9d:c3:59:39:08:78:84:35:41:aa:c0:
                    80:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:FE:82:3B:79:EE:8A:68:00:47:6C:FA:92:48:3C:E1:96:0B:B1:01
            X509v3 Authority Key Identifier:
                keyid:8E:77:C6:AE:48:8C:3A:69:78:03:7B:77:0A:A5:23:CB:25:1C:9F:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jnfGrkiMOml4A3t3CqUjyyUcn_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/531768-3d59-49c4-8e5a-4a471e6c0ef2/1/jnfGrkiMOml4A3t3CqUjyyUcn_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:3d:d5:97:6b:72:e5:14:1f:10:bb:17:13:cc:de:af:41:01:
         a6:6f:54:05:19:38:f2:2d:c5:3d:87:7b:38:c2:37:79:d1:5f:
         a4:1e:5e:ac:b2:47:4e:f3:ff:e5:e9:36:19:41:da:a2:15:17:
         0e:9c:94:d2:f8:35:b0:8f:ae:ed:16:b0:48:b6:cc:27:83:3b:
         73:3e:d9:d3:84:b0:f0:4b:a2:77:c6:eb:a9:b0:b3:32:86:55:
         3e:93:ed:e0:d8:3f:ca:fc:57:70:d4:d7:6a:74:a6:e6:99:05:
         61:ce:69:27:84:bb:0e:a3:20:b7:8b:c6:28:39:a7:fe:46:51:
         e2:32:63:36:c3:54:28:b4:f3:4f:a0:fe:e8:94:7e:10:15:76:
         c0:c0:fd:82:4d:da:06:f8:9d:55:4d:8e:e7:a8:d8:a2:72:48:
         c4:3b:bb:12:ff:3a:7f:08:a6:70:83:af:17:80:b8:30:de:54:
         31:ee:15:37:ea:5a:63:5e:09:63:b2:da:20:e4:08:62:c8:f0:
         84:67:a8:0e:67:2e:75:e0:35:8a:41:2a:76:02:1b:8a:a2:84:
         0b:d1:03:a9:02:d2:b8:17:48:d2:02:7d:f6:88:61:4d:53:59:
         b6:c7:80:35:fb:9e:f7:1a:52:65:3b:86:9f:08:67:a2:48:ca:
         31:43:e1:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----