Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
File:                     j39d3CK0NKz6QNZ-5QsEKQxw27M.mft (raw, json)
Hash identifier:          /LRrzQGO1TUxtcYMwKLVa+ars9WO0bGSNsuv+YM+rKI=
Subject key identifier:   FE:58:30:FD:D6:34:78:5E:B7:A6:B2:60:D4:F1:A6:9B:92:96:DC:A5
Authority key identifier: 8F:7F:5D:DC:22:B4:34:AC:FA:40:D6:7E:E5:0B:04:29:0C:70:DB:B3
Certificate issuer:       /CN=8f7f5ddc22b434acfa40d67ee50b04290c70dbb3
Certificate serial:       01962E9901D831662CE6DA8AB4D58DCC8B77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft
Manifest number:          0680
Signing time:             Sun 13 Apr 2025 10:01:41 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:41 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:41 +0000
Files and hashes:         1: j39d3CK0NKz6QNZ-5QsEKQxw27M.crl (hash: gTSEa5efa7BMAZ29N8iUUpjHpIlU637rrbucBtxx/7I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:01:d8:31:66:2c:e6:da:8a:b4:d5:8d:cc:8b:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f7f5ddc22b434acfa40d67ee50b04290c70dbb3
        Validity
            Not Before: Apr 13 10:01:41 2025 GMT
            Not After : Apr 14 10:01:41 2025 GMT
        Subject: CN=fe5830fdd634785eb7a6b260d4f1a69b9296dca5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:15:60:db:d2:a7:76:54:73:4c:ef:b7:b3:bb:
                    52:9d:cd:a3:39:71:08:7d:48:f7:df:6e:e7:57:b1:
                    e0:02:28:18:bb:87:b7:69:a9:c9:47:6f:e2:8a:24:
                    d2:85:cd:64:a3:24:14:ae:1f:05:5e:10:9e:54:ae:
                    75:01:8f:da:44:1d:8b:28:31:21:51:3d:da:fc:6c:
                    96:ef:cc:29:eb:47:44:5c:b9:58:36:d6:0c:31:ea:
                    58:46:cb:42:9d:1f:27:2a:8e:07:6c:66:08:10:5d:
                    cc:d0:45:f2:74:1d:26:73:33:8a:d5:86:cf:9f:65:
                    aa:60:7d:64:dd:b9:4c:2b:5e:89:bf:ba:86:bd:99:
                    99:95:bf:ad:f0:09:85:b1:4a:86:8c:d1:b8:6c:91:
                    96:5d:a4:2e:78:25:26:e9:c3:c5:63:87:a7:81:5b:
                    67:d8:7d:09:7c:a0:2e:7c:63:0b:80:a2:3e:53:82:
                    59:6b:49:00:86:3e:76:1e:00:b7:58:29:5e:ef:1a:
                    ec:d0:49:a5:2e:b0:db:7d:0b:53:6c:a7:2d:4d:e5:
                    d5:ba:06:29:6c:f7:9a:43:09:41:47:8b:00:61:5d:
                    db:c0:bb:38:29:db:77:c4:b2:4d:e4:a5:79:b2:08:
                    d5:26:1f:b1:ef:f9:e0:72:f4:7d:8c:ba:7a:48:54:
                    55:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:58:30:FD:D6:34:78:5E:B7:A6:B2:60:D4:F1:A6:9B:92:96:DC:A5
            X509v3 Authority Key Identifier:
                keyid:8F:7F:5D:DC:22:B4:34:AC:FA:40:D6:7E:E5:0B:04:29:0C:70:DB:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j39d3CK0NKz6QNZ-5QsEKQxw27M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/69fd69-2c27-4870-9cc9-32dac4b140ed/1/j39d3CK0NKz6QNZ-5QsEKQxw27M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:67:b8:44:aa:c7:57:7f:e8:13:1d:30:c0:02:07:1f:fc:1c:
         93:9d:c7:a4:5f:e0:96:df:21:3e:f5:b0:3a:a3:07:c4:b1:cb:
         48:01:c0:25:58:b5:9e:bf:98:a7:ba:af:67:f5:26:d4:48:1a:
         e1:89:d8:65:20:aa:a1:e8:1b:a1:8f:24:f5:f8:e6:45:97:83:
         c6:47:eb:e9:f4:b0:f5:2f:d6:e1:5b:51:d3:7a:69:d3:f4:a0:
         b8:5b:68:06:34:d7:ff:19:4b:b4:bc:10:fc:0d:9c:b9:3c:96:
         18:1f:75:32:fc:8b:43:f8:6f:fa:15:3d:70:91:9d:1c:44:5b:
         c6:51:b7:7b:3b:bc:9d:30:c1:11:ae:9b:c8:c3:81:ab:5f:d2:
         7f:3e:41:2d:56:41:0c:c8:4d:86:3a:7f:f3:0a:3e:65:fe:a5:
         9c:de:35:ba:16:36:09:c6:92:20:a7:8b:e8:fe:c6:13:2b:4b:
         f2:0e:57:c0:d8:42:75:21:f2:c6:a6:16:a5:7b:21:10:f3:b0:
         eb:71:81:73:63:a9:75:8f:71:7a:0b:6a:61:9a:77:6a:61:e6:
         69:ba:7d:2a:4b:8b:5d:aa:ea:47:ab:07:9e:41:55:34:64:3f:
         c1:3d:0a:d0:33:4f:54:f9:cd:4b:1b:94:c6:c0:2f:29:0f:1d:
         ab:c5:aa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----