Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
File:                     _JKCpXb9YqCiQWa17B8STkJY20k.mft (raw, json)
Hash identifier:          Yt1OfBlq2FkTxipx/1wRmZVCCFAwRWsOziaNfs+1UMM=
Subject key identifier:   44:1C:DC:2F:DD:60:DF:D7:6E:39:7C:D3:7C:E7:53:9C:F1:7F:6B:BE
Authority key identifier: FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49
Certificate issuer:       /CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
Certificate serial:       01962F06B2943ED09855FDA44D4746E1DD4E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft
Manifest number:          045D
Signing time:             Sun 13 Apr 2025 12:01:30 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:30 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:30 +0000
Files and hashes:         1: _JKCpXb9YqCiQWa17B8STkJY20k.crl (hash: q5pi8YvA9KwsBALV3IYZy9q1JYkMP0AvNH6dv6JDUss=)
                          2: kGh2ZAKJM2CfYt9swIKSZAfzB_I.roa (hash: aTLGH5HWVmrOF0Jwd8eHkKzJcYT3fAVpizSVbGt2XVc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b2:94:3e:d0:98:55:fd:a4:4d:47:46:e1:dd:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9282a576fd62a0a24166b5ec1f124e4258db49
        Validity
            Not Before: Apr 13 12:01:30 2025 GMT
            Not After : Apr 14 12:01:30 2025 GMT
        Subject: CN=441cdc2fdd60dfd76e397cd37ce7539cf17f6bbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:db:56:56:56:ec:6e:9c:54:60:b0:1c:13:
                    65:e7:4c:3b:79:c6:dd:b7:2d:b4:7b:f1:fb:c9:c0:
                    0f:51:7e:16:69:80:de:ac:42:de:0a:60:1e:6c:e8:
                    ae:41:ff:18:da:25:31:26:a3:42:e4:f6:db:c0:a0:
                    b5:0b:83:3d:20:c9:04:be:31:be:c9:f3:5e:41:bb:
                    57:13:c4:84:1b:8b:f9:64:93:a2:20:f9:cb:9b:0d:
                    e0:fc:0c:44:90:d7:f2:f8:fb:1e:b4:02:78:12:a9:
                    8c:6c:91:02:95:6b:0d:6e:58:81:49:c3:15:f1:3d:
                    a6:fb:75:a3:ce:28:2c:b1:56:11:45:77:c7:a0:30:
                    de:0b:77:7b:ab:54:ec:3f:12:80:00:85:ed:8a:c4:
                    97:cf:50:4f:9f:d7:37:e4:10:50:08:0b:53:0a:d1:
                    c4:75:a2:cc:a3:b1:54:aa:5f:2d:7a:02:e1:ab:91:
                    d8:98:41:f9:db:1a:df:2a:41:ff:fe:e0:dc:c4:d2:
                    ef:cd:f9:d3:e8:e6:92:56:a5:f0:42:e0:a5:ee:78:
                    52:1b:b5:38:47:03:e4:c1:27:92:cb:25:53:04:ba:
                    58:d9:80:36:53:de:03:15:6d:8e:b3:4b:0c:68:6c:
                    40:1c:86:00:d4:d5:94:fe:b2:63:d2:a9:60:7c:af:
                    e8:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1C:DC:2F:DD:60:DF:D7:6E:39:7C:D3:7C:E7:53:9C:F1:7F:6B:BE
            X509v3 Authority Key Identifier:
                keyid:FC:92:82:A5:76:FD:62:A0:A2:41:66:B5:EC:1F:12:4E:42:58:DB:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_JKCpXb9YqCiQWa17B8STkJY20k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f69975-affd-4f8e-a9f2-5ce9832e7495/1/_JKCpXb9YqCiQWa17B8STkJY20k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:77:65:1c:73:64:bf:e1:92:19:21:34:13:d6:f1:82:44:11:
         12:a3:3b:69:c0:d6:3b:31:2c:8d:07:73:bb:b9:9d:e9:a1:1a:
         70:cb:41:0a:94:23:94:0b:59:37:5d:ab:a6:75:5a:c0:48:4d:
         e0:84:a8:77:8a:da:24:5c:4f:bc:87:97:de:04:9a:aa:19:11:
         21:37:8c:5d:f0:f7:d4:75:b9:84:f7:8d:5f:6f:0d:34:bf:ab:
         56:72:3d:9f:49:04:71:d1:c1:81:d3:af:63:03:15:c6:ec:69:
         d7:bf:4f:1a:22:70:d1:57:f3:05:4c:bf:8b:c6:06:d8:1e:ff:
         49:36:a6:98:d1:29:4d:61:1c:a3:49:c0:3a:59:09:d1:15:d4:
         74:76:47:d6:ed:87:9d:45:bb:d8:83:71:db:54:0d:e1:0f:3d:
         59:ed:75:5e:4c:d9:2d:90:e6:30:b2:96:b8:7a:d6:44:09:46:
         26:98:f3:a3:89:cc:20:c3:c5:d5:28:c7:7e:fb:8b:72:9d:23:
         c9:8f:6a:a2:aa:8d:75:8c:5a:a7:87:f6:4f:ea:fc:2c:b9:61:
         b5:54:6e:61:53:0b:df:fe:ba:f7:8c:4c:81:69:30:6b:86:1b:
         c3:d9:3b:d4:6b:de:d2:c2:1d:e5:db:9c:5b:30:cb:59:f8:01:
         da:2b:cc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----