Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
File:                     jMyCpb7jqTYzA8M83N0278aPi0Q.mft (raw, json)
Hash identifier:          i8o45pUAu48A068s4+4jkqqot/+eCi7K7lbNkN3AT8M=
Subject key identifier:   6F:31:74:FB:21:29:45:A3:7A:7D:B7:03:16:37:B2:43:5F:5D:DB:1D
Authority key identifier: 8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44
Certificate issuer:       /CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
Certificate serial:       01962E2ADE9CD9F3F8EE0C2DEF4205E3AB47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft
Manifest number:          DE
Signing time:             Sun 13 Apr 2025 08:01:23 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:23 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:23 +0000
Files and hashes:         1: DUQ0ry08WIUw5lopwRc9s2zZ5Ck.roa (hash: 4MMSMGpFYTj64gvYvAI9aZYJdovl51CVqQfi4na/C5A=)
                          2: jMyCpb7jqTYzA8M83N0278aPi0Q.crl (hash: DC2hu/a7aTC63oY1BdOUOrhTdCAXmbIePgggn1lUKLE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2a:de:9c:d9:f3:f8:ee:0c:2d:ef:42:05:e3:ab:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ccc82a5bee3a9363303c33cdcdd36efc68f8b44
        Validity
            Not Before: Apr 13 08:01:23 2025 GMT
            Not After : Apr 14 08:01:23 2025 GMT
        Subject: CN=6f3174fb212945a37a7db7031637b2435f5ddb1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6d:b9:30:aa:3f:13:d0:81:17:ea:11:54:7a:
                    aa:22:70:bb:e8:db:fe:57:11:db:da:4c:35:cf:82:
                    48:61:fd:bb:1c:58:f6:a3:a3:6a:34:b6:84:51:78:
                    a6:42:39:b7:6d:4e:ad:c3:cd:09:75:b9:20:92:d4:
                    56:0d:e3:e9:53:29:d8:6d:25:c5:8e:fa:f3:36:c9:
                    b8:d8:93:36:43:28:16:a6:cb:1f:81:2d:fb:23:57:
                    b2:47:34:17:1f:42:56:7f:20:d7:60:93:32:6f:7e:
                    48:f5:b6:b5:4d:9e:bc:36:e1:8f:31:a8:c0:8b:d0:
                    d8:04:0b:9c:59:68:6e:dc:69:75:f5:39:36:c3:60:
                    71:8b:09:3f:e2:5b:18:be:f0:f6:71:15:f2:16:d6:
                    e7:68:c2:d8:79:a2:2f:ff:5c:6f:57:64:b5:ff:ea:
                    ad:99:dc:e0:ee:53:e7:15:e8:f1:f0:36:69:e7:69:
                    43:0b:e2:fa:2d:6d:e5:08:bb:03:ba:4d:fb:cb:71:
                    6d:ac:bb:3c:da:e3:fe:75:02:12:2f:fe:c0:77:86:
                    62:01:cd:bd:39:59:6e:26:5f:29:fc:64:06:ff:c9:
                    7a:a8:82:1c:12:de:a4:f1:3a:52:57:7b:3c:03:0a:
                    87:18:4e:2b:03:6b:2d:5a:84:84:01:c2:a9:52:59:
                    38:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:31:74:FB:21:29:45:A3:7A:7D:B7:03:16:37:B2:43:5F:5D:DB:1D
            X509v3 Authority Key Identifier:
                keyid:8C:CC:82:A5:BE:E3:A9:36:33:03:C3:3C:DC:DD:36:EF:C6:8F:8B:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMyCpb7jqTYzA8M83N0278aPi0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/09/eb5fd2-b974-47c9-b924-bebda1608d09/1/jMyCpb7jqTYzA8M83N0278aPi0Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:b3:6d:9a:c6:41:67:80:c4:cb:1e:85:5f:d9:5b:a1:da:9f:
         9e:0f:60:8a:7d:b1:75:49:58:34:be:47:8f:42:d4:f9:b8:e5:
         b4:83:79:f2:6e:64:3d:28:c0:40:36:81:f0:e4:c9:29:86:5a:
         c1:1b:3f:4e:e9:49:31:8b:6b:84:82:3b:70:2f:e5:da:a6:78:
         66:fe:67:22:1d:54:e6:c0:9a:bb:29:f9:76:47:7c:34:53:1f:
         96:e1:25:8f:89:1e:bf:42:24:e0:93:45:d9:22:c6:2b:49:72:
         81:11:a6:0b:ac:76:7f:0f:ff:54:50:0d:e3:2b:1f:fa:a1:11:
         f4:07:6e:91:b0:cf:c1:a3:8b:d3:b0:fb:bb:a8:9b:51:7f:88:
         ac:f4:8c:8c:d1:66:6e:c4:d4:ad:63:f8:4c:f5:c8:da:7e:70:
         17:a1:d6:8a:90:e5:0d:e7:2b:b5:a1:c9:fe:8a:cb:c7:9c:67:
         da:1b:69:e1:4d:7b:de:e1:e7:e9:8b:16:59:85:50:e0:79:3b:
         3f:25:d1:5c:41:49:fd:8f:53:39:73:bb:7d:e4:30:76:a6:8d:
         29:12:31:c5:73:57:80:32:b8:fa:fc:ba:1f:0c:13:6a:84:ed:
         7f:92:c1:d8:bc:6d:d7:56:03:da:11:71:72:e8:fe:e2:94:be:
         b4:1d:38:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----