Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
File:                     J-D3u75AMaJO8bnbGWqrBkLoSgY.mft (raw, json)
Hash identifier:          30tAsBUThvH4dnSNaLFwJhU2G4see0hUjns5Jugi+TQ=
Subject key identifier:   AB:06:1A:38:3E:A2:DA:BF:C5:46:CA:1B:B1:5D:02:5F:B2:0B:EC:66
Authority key identifier: 27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06
Certificate issuer:       /CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
Certificate serial:       01962F066B50E4377BA3B90AF28A0D0F3DAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 12:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:11 +0000
Files and hashes:         1: IjluqbVdM5zm7wvPSgQZOmXQjag.roa (hash: QKwqMUOeWOJatNvuP/XT/XSpsSd9RiOppxhqX3P9KPo=)
                          2: J-D3u75AMaJO8bnbGWqrBkLoSgY.crl (hash: iBUX5NknJW2NR8TW6vRIbB6R6sfwMCHRWzH4nj1TAy4=)
                          3: YY-hoyGXDDo8SiePezL_ZO2nNOw.roa (hash: A3j7uoljgavovkzwgqN6nFVhnXRD4UmTm39D3QvLFO0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:6b:50:e4:37:7b:a3:b9:0a:f2:8a:0d:0f:3d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27e0f7bbbe4031a24ef1b9db196aab0642e84a06
        Validity
            Not Before: Apr 13 12:01:11 2025 GMT
            Not After : Apr 14 12:01:11 2025 GMT
        Subject: CN=ab061a383ea2dabfc546ca1bb15d025fb20bec66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d4:ed:52:bb:f5:1d:b4:d7:41:a1:41:09:b8:
                    3c:b9:e6:1f:cd:23:0a:d3:04:c6:71:09:eb:a4:50:
                    75:6d:52:1e:6c:03:04:ad:c8:35:68:ec:15:f8:5c:
                    1e:6d:d4:c7:a5:38:bf:9d:b7:18:fe:b7:f0:cc:f6:
                    13:5a:ff:a6:df:43:f2:65:3e:fc:78:dc:c1:0a:59:
                    71:07:6c:d2:60:52:6f:34:2c:ad:c3:1d:f9:31:0d:
                    c6:10:06:d6:04:4c:b2:be:0f:64:e9:2f:89:cc:5b:
                    ac:09:bf:be:d6:c3:71:57:19:29:c1:22:3e:d8:72:
                    8f:62:11:65:9d:2f:31:df:a8:be:bf:8d:55:a1:d1:
                    f8:3a:96:7e:c0:f5:05:1e:24:42:c0:31:9e:91:1e:
                    e0:98:4d:b2:a6:0f:21:d8:86:88:0f:67:73:96:7d:
                    ed:50:e2:82:85:c5:95:1f:18:29:1f:99:b3:3d:96:
                    d1:25:12:de:ae:23:40:fb:7e:d3:c6:54:33:02:04:
                    62:79:33:ea:aa:bd:f2:66:71:a2:1a:3e:9d:ac:a9:
                    0c:24:f3:42:32:99:5c:6a:c4:3d:fb:bd:ea:4e:62:
                    7b:90:c1:79:a7:37:a3:eb:12:48:80:7b:98:60:31:
                    5a:52:01:49:88:78:09:49:19:bd:8a:16:74:c4:a5:
                    af:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:06:1A:38:3E:A2:DA:BF:C5:46:CA:1B:B1:5D:02:5F:B2:0B:EC:66
            X509v3 Authority Key Identifier:
                keyid:27:E0:F7:BB:BE:40:31:A2:4E:F1:B9:DB:19:6A:AB:06:42:E8:4A:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J-D3u75AMaJO8bnbGWqrBkLoSgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8aba71-3ba8-4b8d-8eb6-346a3ec1868c/1/J-D3u75AMaJO8bnbGWqrBkLoSgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:17:57:db:8c:7a:c8:4c:0d:be:84:19:67:75:cd:55:64:ae:
         78:e6:78:9b:ca:90:96:a2:58:f7:91:72:a2:45:f5:4c:df:ab:
         46:0e:cf:a4:f5:8f:38:1a:fd:59:c8:e5:b0:46:44:52:6a:79:
         3a:63:e9:3a:6f:ae:e4:fb:9c:07:df:6b:d7:a4:8f:01:74:78:
         01:eb:83:1c:b5:a6:67:5c:a7:0d:c2:b0:43:78:f0:a5:7f:9a:
         06:7e:03:c9:ef:fc:49:b2:a0:4e:09:ec:12:52:ff:7b:55:18:
         3f:05:86:cb:fa:09:06:c8:a2:28:ab:f2:33:1b:62:d2:4d:04:
         87:6e:73:6b:bd:8b:1c:bd:f5:75:d6:36:39:f0:b4:94:fb:50:
         69:1c:74:47:e7:1a:dd:17:c3:c4:7b:c9:8a:dc:12:84:98:d7:
         64:cc:ab:57:92:4e:1c:f0:39:63:e7:42:6e:a2:29:74:e1:0d:
         08:c4:38:a7:eb:91:1b:c9:3c:43:70:f5:05:dd:38:65:48:81:
         61:e4:61:a1:79:01:c3:5b:65:a5:dc:a7:b3:25:a9:2b:ea:ee:
         df:ab:1f:44:a7:4a:58:9f:8f:a2:50:2f:ca:81:9c:0c:15:e7:
         ea:e8:64:3d:fc:35:d6:e7:3e:2a:9f:cf:51:36:1a:cf:61:07:
         f9:49:77:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----