Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
File:                     jV7D1aSGjjUxImKnxqqRRDWJPNg.mft (raw, json)
Hash identifier:          eGRD1ayYFIveS1rWdfmr/BUWM4frVKn06PhE5WjblU4=
Subject key identifier:   9A:AA:1F:EF:43:87:00:0B:35:38:18:4F:FB:3A:75:30:9E:13:63:19
Authority key identifier: 8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8
Certificate issuer:       /CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8
Certificate serial:       01962E98FDE3B362B829B2D58452A25ECCD6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft
Manifest number:          07CA
Signing time:             Sun 13 Apr 2025 10:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:40 +0000
Files and hashes:         1: jV7D1aSGjjUxImKnxqqRRDWJPNg.crl (hash: BLPKaGvjaWMy8r9MdCISqKj8rEamznCfYhKTOQtk9DE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:fd:e3:b3:62:b8:29:b2:d5:84:52:a2:5e:cc:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d5ec3d5a4868e35312262a7c6aa914435893cd8
        Validity
            Not Before: Apr 13 10:01:40 2025 GMT
            Not After : Apr 14 10:01:40 2025 GMT
        Subject: CN=9aaa1fef4387000b3538184ffb3a75309e136319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:88:25:bd:b8:83:e6:bc:36:f9:ab:36:9c:47:
                    c8:90:77:d4:61:08:36:81:f7:0a:6a:b1:e3:b3:59:
                    66:74:88:92:e2:ef:be:ad:5d:f5:c6:8c:4b:ea:e6:
                    3d:bc:36:e8:53:ab:2e:a3:76:e9:ce:f2:91:ed:82:
                    61:8e:c4:ef:3e:cf:61:09:df:01:9b:bb:6c:6f:89:
                    9a:31:9c:f4:01:44:1c:24:4b:20:24:ba:0b:24:b9:
                    d2:01:da:29:fb:ba:24:e3:81:07:64:78:c3:ac:e2:
                    a2:1c:e2:a4:8a:79:1b:fa:2b:f8:6c:df:25:62:9c:
                    c8:48:e2:53:28:f2:d3:73:57:02:a6:79:18:d1:84:
                    04:38:62:6a:88:cf:1a:3f:65:4d:80:d3:a1:68:cb:
                    77:bd:08:b0:d9:21:3d:37:70:56:e4:d3:79:82:82:
                    2f:b2:4e:7a:2c:eb:0c:fc:9f:b2:b4:17:b6:60:9e:
                    47:f6:8f:d7:60:f0:5f:29:67:c6:aa:25:b4:d4:76:
                    87:09:2b:a1:a0:39:b9:2f:18:e9:8f:4e:cb:da:4a:
                    82:55:e6:5f:5d:76:04:2d:25:60:e8:c7:3e:38:0b:
                    1a:fd:1c:37:3b:4b:ae:97:a6:73:cb:7c:33:e7:08:
                    ff:db:62:27:34:b9:30:40:82:3c:2a:f1:46:8c:db:
                    43:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AA:1F:EF:43:87:00:0B:35:38:18:4F:FB:3A:75:30:9E:13:63:19
            X509v3 Authority Key Identifier:
                keyid:8D:5E:C3:D5:A4:86:8E:35:31:22:62:A7:C6:AA:91:44:35:89:3C:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jV7D1aSGjjUxImKnxqqRRDWJPNg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/15265c-bf79-4ce1-9499-9af7cb386f80/1/jV7D1aSGjjUxImKnxqqRRDWJPNg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:5f:a9:81:8e:b8:89:3c:e3:ec:33:23:9c:32:eb:dd:8d:47:
         c1:31:92:f4:d8:7e:5f:98:c1:c8:dd:ff:91:fa:c4:e5:94:95:
         3e:dd:2c:14:be:1f:98:bf:b4:fa:1d:dd:df:7e:24:37:67:bf:
         1c:ad:bc:b8:74:ea:b2:ed:7d:67:ac:16:e5:37:51:67:13:13:
         cd:dc:6c:90:de:6a:98:97:fc:5c:7c:4f:fe:54:07:81:0c:0b:
         ca:12:fb:28:1d:d8:e8:f5:25:fc:5c:00:7d:5b:c7:29:af:59:
         6a:69:b1:65:9c:26:58:aa:2f:d5:72:6f:22:a5:ba:03:07:92:
         65:33:4a:e4:dd:76:53:77:f5:43:df:de:57:6f:72:90:ba:ef:
         3e:dc:7f:30:4b:db:d8:d3:75:6e:09:11:e4:e9:16:e9:fd:d2:
         e2:85:34:34:23:d8:1c:1f:4f:be:86:68:74:70:00:71:f5:3d:
         74:b8:20:ef:99:0e:6f:1f:64:b8:10:5f:56:46:0d:ff:25:05:
         74:42:ef:ed:d5:83:94:af:28:40:96:c8:cd:92:7a:ef:92:4a:
         55:cd:2b:97:51:e1:a4:bf:23:f4:e9:c4:89:45:57:05:1e:12:
         14:f4:d3:62:1b:6e:a8:fc:79:0a:4d:fd:f9:23:f6:ed:8f:55:
         7b:ba:f9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----