Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
File:                     g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft (raw, json)
Hash identifier:          xuqB9W3CZDXNlIwRQhwZIbLC/hm4R8sb6WTiDVAgcag=
Subject key identifier:   0C:42:D5:30:F6:1F:C4:AE:5A:EE:6E:F0:CB:05:5A:B3:41:F1:9E:23
Authority key identifier: 83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6
Certificate issuer:       /CN=83c8d01caf2b0751d035c537566f45627925e4f6
Certificate serial:       01962E61DC90B2464769C576C4CE9FC78A54
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft
Manifest number:          102F
Signing time:             Sun 13 Apr 2025 09:01:27 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:27 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:27 +0000
Files and hashes:         1: J4HW2mYS6aU6LfQRgOlYRDbLp5k.roa (hash: Bt4aDKGWyvEeRSoxrjAjHWSOknnKJY9L9kMvMSuInRo=)
                          2: g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl (hash: U6dlPs0wixom2cQSwW36uXo/yk4LyaC+XGFDYFbzwXI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:dc:90:b2:46:47:69:c5:76:c4:ce:9f:c7:8a:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83c8d01caf2b0751d035c537566f45627925e4f6
        Validity
            Not Before: Apr 13 09:01:27 2025 GMT
            Not After : Apr 14 09:01:27 2025 GMT
        Subject: CN=0c42d530f61fc4ae5aee6ef0cb055ab341f19e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:14:df:04:69:90:3f:bf:a4:bb:04:d1:96:2a:
                    04:a4:0f:53:52:67:cd:ea:5e:0e:f8:a8:39:a5:91:
                    ab:4e:d5:1b:38:c9:c6:78:35:44:c3:6f:9b:a7:6a:
                    e1:75:ed:d0:4e:58:5c:74:e4:ee:34:7d:30:6e:d6:
                    0a:45:31:2a:8e:74:71:7c:7b:a3:23:97:3c:a8:9c:
                    3d:ef:f4:c9:6b:aa:49:b8:dc:8d:f3:9b:74:c1:5a:
                    4b:dc:a7:9d:37:22:eb:2c:8d:01:b0:4a:5b:34:da:
                    51:80:12:ac:b0:45:2d:80:f7:5e:e2:51:40:82:d6:
                    56:be:1d:75:66:61:63:23:94:30:be:1b:3e:ad:35:
                    ff:67:fc:14:bd:01:55:5f:87:b6:b2:05:7f:90:1d:
                    c2:c0:35:20:5f:a6:72:6d:25:7c:6d:a0:a6:ff:b2:
                    20:54:3a:50:67:11:c4:5d:24:b4:c0:61:06:86:5d:
                    d6:4c:fa:c1:c1:cb:69:2f:56:cb:31:04:f2:43:f8:
                    8d:ab:b9:be:7b:b5:ba:19:02:24:83:b7:e4:a8:3e:
                    4b:d5:57:35:2e:45:f6:da:4b:18:2e:bd:0d:dc:73:
                    52:3d:a0:19:9f:70:8c:6e:20:f4:81:32:23:36:12:
                    6b:c1:6c:55:c4:b5:e6:8b:37:e8:5e:e0:ca:16:19:
                    ba:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:42:D5:30:F6:1F:C4:AE:5A:EE:6E:F0:CB:05:5A:B3:41:F1:9E:23
            X509v3 Authority Key Identifier:
                keyid:83:C8:D0:1C:AF:2B:07:51:D0:35:C5:37:56:6F:45:62:79:25:E4:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cfa7c3-f0c8-4622-8a47-9ab26b266aa7/1/g8jQHK8rB1HQNcU3Vm9FYnkl5PY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:7e:88:71:14:ac:85:3f:3c:8b:68:33:7d:8f:3c:9f:89:54:
         f1:58:cb:fa:ef:07:c9:74:7f:e2:90:ee:89:1d:f9:0b:60:52:
         e3:82:10:98:06:89:c6:70:0d:df:b5:58:d0:4c:b8:ba:83:a3:
         2d:71:2a:95:43:a5:f0:d1:02:f8:e8:2c:48:e7:f9:58:db:12:
         fc:0e:f7:4a:db:54:f6:dc:54:0a:d5:83:3d:fd:5e:6a:75:cc:
         99:75:4a:d5:17:b0:41:9d:84:09:9b:c1:16:60:ee:c4:2f:5d:
         0e:e2:ec:61:ed:4c:11:f3:95:fa:9b:69:d7:44:bc:e3:9b:d2:
         69:b1:10:86:47:d9:ff:ad:6e:fa:10:dc:c7:e0:71:07:6f:58:
         c2:c9:a4:b5:f4:39:8a:e4:de:c4:a6:21:e9:f0:67:fc:cf:e3:
         f5:54:db:3c:30:46:46:af:d0:09:27:ab:cb:de:d5:c6:d0:63:
         d3:95:2b:ec:f4:4f:4f:9e:d8:30:b4:00:d7:42:f5:b4:74:ff:
         a7:5a:e0:a3:c7:6b:68:b7:cd:d8:2c:3c:2a:32:ea:bc:94:a0:
         51:8e:cc:c2:05:17:a5:8e:1d:39:91:70:ab:0f:ac:69:f0:23:
         f8:85:84:c6:eb:56:2e:d9:1c:9c:e4:ff:50:8e:f6:bb:a4:ae:
         a9:24:68:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----