Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
File:                     rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft (raw, json)
Hash identifier:          cwlUMhL7iDmYDx9qt6ogYl+iRTHnHfbWCbGAt7C7kGE=
Subject key identifier:   E8:98:D4:2F:D9:CA:72:A0:CE:60:B9:9D:1B:A7:02:64:E8:CA:84:7D
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Certificate issuer:       /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial:       01962FAB5BBA42A4174550357A10F8399054
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
Manifest number:          081F
Signing time:             Sun 13 Apr 2025 15:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:21 +0000
Files and hashes:         1: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl (hash: Rk1XNO9MRSQu1DD162f0Un3VpjkwKBJmhds+xxgy7Js=)
                          2: sZ5FQpagRRLFHDrCpC-6uU_GQt4.roa (hash: R0iOrEjpTafz2w87NNGxT/0GFxwmG8GgeDCdte91gUA=)
                          3: uIQg-k4QoyqXWfTy_MZ6BVQABQM.roa (hash: Cx2jyvv/VKruIg91hf3AtutnP6nMOk9qU6tmjgX9EqQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:5b:ba:42:a4:17:45:50:35:7a:10:f8:39:90:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
        Validity
            Not Before: Apr 13 15:01:21 2025 GMT
            Not After : Apr 14 15:01:21 2025 GMT
        Subject: CN=e898d42fd9ca72a0ce60b99d1ba70264e8ca847d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f6:9b:65:0e:51:a8:3c:1a:f5:45:b1:4e:d8:
                    cc:9d:7e:a9:02:dc:71:99:01:73:67:b2:fa:2e:7f:
                    6d:f7:f9:54:3e:f7:24:81:09:4e:9c:e3:cc:71:00:
                    7c:cb:75:b1:f9:85:b4:0c:90:64:fb:c9:8b:97:80:
                    2e:28:23:be:24:2c:65:0e:6c:fb:6e:8e:67:20:f6:
                    e2:e7:11:26:4b:a4:4a:bb:06:23:0e:18:c8:f3:d1:
                    19:73:5b:04:59:7f:0d:3f:28:51:d9:5a:75:eb:d4:
                    e6:3e:3b:d1:f6:51:e8:e7:c9:d5:2a:c6:97:3e:c5:
                    05:f3:27:d1:6e:ff:af:06:3c:23:01:7f:50:24:25:
                    ee:c7:88:38:fa:94:0b:dd:c3:2e:3b:23:43:86:55:
                    8c:05:d5:93:2a:ad:31:3b:05:66:32:21:fc:00:fd:
                    8b:79:68:8b:61:5d:5a:3f:6f:3f:78:66:47:25:ef:
                    f4:41:90:3d:c1:25:d1:a8:3f:b7:b0:52:15:3f:db:
                    c1:8f:64:c1:8a:8e:03:8f:74:8a:f3:78:cd:da:d0:
                    68:ca:de:5e:a6:90:b2:27:2c:a5:eb:6a:8d:88:f4:
                    07:18:a6:91:60:2b:ce:72:3a:d8:84:56:2d:dc:ea:
                    a9:da:b4:48:6d:c4:7c:db:44:7f:ac:74:ef:12:3a:
                    68:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:98:D4:2F:D9:CA:72:A0:CE:60:B9:9D:1B:A7:02:64:E8:CA:84:7D
            X509v3 Authority Key Identifier:
                keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:24:05:a2:d5:c8:2c:ce:7b:c4:79:aa:9c:70:60:8e:27:2a:
         0a:8b:95:8f:4a:cd:d5:05:68:e8:28:00:e0:94:49:75:00:de:
         4e:9e:ee:8e:39:d2:d0:31:37:f8:e5:50:a7:46:a6:52:45:ec:
         bc:d9:c2:46:7f:5b:00:fc:63:36:d2:60:22:35:67:5c:a6:fd:
         2e:7b:6c:f3:df:5b:3c:d7:13:2c:92:5f:2b:af:a3:38:60:46:
         40:3c:d2:9f:44:f5:c7:2e:e2:23:58:1e:f1:3d:e2:b0:ca:77:
         13:a1:14:fd:36:3b:4e:d7:78:a0:09:94:63:db:8e:7a:af:88:
         13:a8:84:cb:c5:d9:9f:1d:0d:cd:f0:9a:73:5f:b7:7a:9e:05:
         36:50:67:a8:e5:be:1f:11:f7:e9:fb:d0:a9:40:e4:90:3d:be:
         10:23:c8:ff:11:4c:88:23:10:4e:45:7c:dc:5f:59:a0:88:4f:
         52:f7:a3:2f:86:33:92:f7:a1:db:73:82:2a:37:62:86:26:28:
         44:28:15:2a:16:ff:f8:8f:a7:08:7b:e5:b9:b4:02:75:af:62:
         ac:b2:a4:c3:69:b0:54:45:b8:13:00:6e:bb:d8:ac:2b:1b:2d:
         2c:64:df:c7:ea:2b:3d:47:68:10:9c:6d:21:28:d1:1c:81:ae:
         10:84:6f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----