Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
File:                     J8Y3pwndvn9iN6-NWykTtCI3FXw.mft (raw, json)
Hash identifier:          xBLuoECi4vgCdaGYX1U3xooyV+66MNcre8dX8MaJabU=
Subject key identifier:   35:36:85:37:19:24:94:D3:06:B1:8B:28:15:09:64:1F:BE:32:A6:7C
Authority key identifier: 27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C
Certificate issuer:       /CN=27c637a709ddbe7f6237af8d5b2913b42237157c
Certificate serial:       01962E61D3E7FDD1E5CA8F65652110244842
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft
Manifest number:          0BE0
Signing time:             Sun 13 Apr 2025 09:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:25 +0000
Files and hashes:         1: J8Y3pwndvn9iN6-NWykTtCI3FXw.crl (hash: 6WsLhGQyl5XzBoswikOJLNaaa8AQzus/d3n0FhkNwSM=)
                          2: dlmSMThgfzEt-EoGdzxxYyd6AvA.roa (hash: II2qv/R+riqTZycAWnh60efymgX6QJpKVeYxCLVnyks=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:d3:e7:fd:d1:e5:ca:8f:65:65:21:10:24:48:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27c637a709ddbe7f6237af8d5b2913b42237157c
        Validity
            Not Before: Apr 13 09:01:25 2025 GMT
            Not After : Apr 14 09:01:25 2025 GMT
        Subject: CN=35368537192494d306b18b281509641fbe32a67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:8c:e3:fe:65:5e:a2:b9:46:0a:3f:59:3e:1b:
                    d8:65:21:d4:56:21:cf:10:59:cc:8a:33:c3:72:8e:
                    3b:82:28:f5:4b:d2:d9:68:0a:2c:ca:03:f3:4d:41:
                    8f:40:68:59:41:e3:c2:06:8b:bd:29:13:09:50:4b:
                    f4:fb:0a:83:bf:6f:ad:8f:4d:03:a7:c9:77:9a:ce:
                    f4:5f:2f:25:c5:97:30:41:e0:8d:b4:f5:52:aa:d9:
                    33:1a:80:56:95:27:30:91:8a:49:4c:d3:4e:7d:bf:
                    84:69:0e:54:ec:e7:40:7d:a0:d8:79:3e:c1:0b:e5:
                    f4:24:8e:76:bf:fa:d0:e4:73:f9:7c:f3:fe:2e:bf:
                    f7:13:1c:f4:e3:e8:5c:07:ad:4c:73:e0:81:02:df:
                    1c:6b:f0:07:d0:fc:ae:30:09:7e:54:3e:b5:20:58:
                    73:59:a9:fc:42:27:9f:24:d7:c7:d2:1d:78:5f:e4:
                    7d:98:a6:1a:6f:7a:cf:9a:2e:74:52:19:ce:f0:b1:
                    8f:4c:34:54:d3:b0:c7:a2:ca:46:24:8f:84:e1:9a:
                    b0:cb:55:27:72:0e:85:1b:11:98:25:d9:d8:52:eb:
                    bf:80:3a:10:06:a0:d1:4f:72:0a:b6:33:1f:dd:82:
                    3f:87:8b:64:84:ba:4c:d9:a8:7c:d6:b8:0f:86:14:
                    2e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:36:85:37:19:24:94:D3:06:B1:8B:28:15:09:64:1F:BE:32:A6:7C
            X509v3 Authority Key Identifier:
                keyid:27:C6:37:A7:09:DD:BE:7F:62:37:AF:8D:5B:29:13:B4:22:37:15:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8Y3pwndvn9iN6-NWykTtCI3FXw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/16/cc7e6b-8c86-45ab-ac03-cbadb64340e0/1/J8Y3pwndvn9iN6-NWykTtCI3FXw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:a1:a5:74:32:8a:c2:c2:14:7f:82:a9:80:cc:46:18:ed:8d:
         21:5f:58:42:37:29:52:1b:81:26:1f:4c:e6:68:e8:4b:ca:76:
         bd:84:48:99:f0:3d:d1:be:28:b9:14:57:50:35:7a:80:bf:98:
         fd:6b:da:6e:3f:37:5a:dd:2b:fc:e6:a3:fc:a8:35:b7:51:d4:
         2b:bf:42:42:1a:55:9b:0c:6e:7f:c9:54:9f:2f:02:9a:4b:87:
         21:bf:be:58:9f:1c:36:a5:5a:78:fa:16:e3:e9:46:c5:12:a9:
         7c:f7:4e:2c:3a:e9:d5:e8:8a:47:67:cb:73:c9:07:79:e0:b5:
         37:3a:fc:93:a0:67:e1:3b:10:68:af:91:a4:a6:30:d9:48:7a:
         d1:71:6b:96:b5:5b:1a:78:e3:ef:4e:53:e7:3c:14:da:05:7e:
         d6:3f:89:fe:42:b5:ab:08:79:85:05:93:3a:5f:2b:6a:4e:c1:
         45:5d:f8:16:2e:ff:79:73:e6:d8:c4:e2:b8:03:e9:75:63:d5:
         ae:4c:58:bb:71:ae:b2:26:05:85:55:2c:55:f1:8c:90:38:60:
         b1:63:31:97:ae:8a:b8:8e:ac:a1:4d:c1:0a:18:dc:6e:6f:f8:
         91:12:c2:96:04:ee:c4:ff:73:f7:f8:9a:f3:77:74:e6:89:e0:
         d6:cd:a8:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----