Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
File:                     jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft (raw, json)
Hash identifier:          rHBcWJb/p8flyNgasW9b4+RSO1FA8ykp/IvQKc4DgLU=
Subject key identifier:   FF:1E:6D:BB:B1:8A:4A:62:AD:9C:0E:63:FD:3F:22:D8:E0:BB:70:9F
Authority key identifier: 8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E
Certificate issuer:       /CN=8c2289ae0b10629350da0a50e87b389109f16c2e
Certificate serial:       01962DF3DA777DEA4496B5BFE859EE6B766B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft
Manifest number:          0195
Signing time:             Sun 13 Apr 2025 07:01:17 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:17 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:17 +0000
Files and hashes:         1: RhJqWm0s7H9JSpG-oB16vDuB6kk.roa (hash: bJdYRJsXAlzRdfbbxHF22ta+TfJKXfgxRqEjBlrSXVg=)
                          2: hfMD5MhoHKjDWV0Lg-kB6Qn7NIw.roa (hash: 7j9B0FnRG/QF0eLBUbMO8Y6cUWQTPrhU1jAqJD4B+34=)
                          3: jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl (hash: igFTKD+wZBu0ri8NtaIc9YLk+L46qWVFZ6RfoelBKuQ=)
                          4: l0kAn8ApI2SNAoJbZCIEyIXuAX4.roa (hash: B0SI0CCL7BAZvHBp4fUMaxE46b5MHfw4w3OsX4XuXk4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:da:77:7d:ea:44:96:b5:bf:e8:59:ee:6b:76:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c2289ae0b10629350da0a50e87b389109f16c2e
        Validity
            Not Before: Apr 13 07:01:17 2025 GMT
            Not After : Apr 14 07:01:17 2025 GMT
        Subject: CN=ff1e6dbbb18a4a62ad9c0e63fd3f22d8e0bb709f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:86:cf:37:79:03:68:c4:ac:a0:d4:46:84:
                    8a:7d:61:bb:cb:02:03:ed:49:02:57:d0:a5:db:be:
                    b3:73:d9:67:48:cf:fa:c6:4a:90:27:a0:09:d6:5e:
                    3f:bc:5d:f7:77:f6:fa:4a:d4:1f:a4:30:e5:a1:18:
                    f9:29:e4:3b:2b:4e:4e:7a:2a:b5:eb:9d:6e:62:13:
                    c3:2f:2d:90:79:65:3c:34:b5:4a:0c:fb:91:b4:a7:
                    eb:43:78:97:9f:ae:a4:ac:e8:ff:f4:d5:fb:f9:c0:
                    a8:df:14:ec:68:53:86:c3:83:c1:e5:ef:a2:84:4d:
                    e0:a4:90:59:d7:46:ee:ae:32:62:b6:2d:7b:3a:eb:
                    f9:05:84:58:b0:7f:33:1f:6b:e1:52:a4:71:b3:60:
                    f0:27:4b:09:bc:82:cd:0f:ee:13:a2:4e:ee:51:87:
                    d9:03:70:e1:43:22:fc:4c:4f:ec:4a:cc:8c:8a:51:
                    d5:33:55:0e:d9:02:c8:3b:d8:86:b6:ed:79:aa:ef:
                    b7:b2:1f:63:e6:67:06:db:a4:61:4c:ed:0d:05:3d:
                    8e:93:0d:34:76:a1:1e:12:49:7b:c1:02:be:01:fa:
                    dc:fd:19:ac:14:46:f5:3b:6a:af:52:a7:ff:52:a9:
                    0b:bf:78:90:8a:0e:49:f4:43:00:82:19:d6:37:9c:
                    74:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1E:6D:BB:B1:8A:4A:62:AD:9C:0E:63:FD:3F:22:D8:E0:BB:70:9F
            X509v3 Authority Key Identifier:
                keyid:8C:22:89:AE:0B:10:62:93:50:DA:0A:50:E8:7B:38:91:09:F1:6C:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/343379-f8e1-4be6-be01-f83946c2c82e/1/jCKJrgsQYpNQ2gpQ6Hs4kQnxbC4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:4e:e2:4d:f3:ac:06:ee:7b:a5:94:3b:31:08:83:6a:7b:1a:
         1c:9b:07:19:d1:d7:cd:79:72:a3:1a:0f:9d:20:6c:1e:ff:27:
         a1:f0:d7:5e:9b:ed:8d:48:3f:b4:e2:44:52:20:c3:99:5d:8b:
         25:6a:08:78:03:70:8f:17:65:36:2b:31:53:d0:9a:56:80:b2:
         f0:7d:54:ed:9f:94:f8:3d:2f:13:bd:19:a1:c6:79:7f:07:cf:
         f5:25:28:21:fd:0c:4d:95:fa:f2:63:a3:8c:7a:65:88:e3:85:
         f8:68:b1:b1:83:a0:80:cd:2f:0e:cd:72:89:0b:75:aa:01:27:
         4b:55:46:84:dc:81:f9:d4:66:3a:a7:19:d5:eb:9e:66:49:43:
         a4:38:de:e5:fd:45:b3:f8:50:9f:6d:23:25:c1:f3:82:72:9f:
         9e:59:4c:d6:30:7e:a3:77:1d:a2:c7:8e:10:46:9f:33:82:46:
         bd:0e:f5:91:6e:d8:45:dd:ea:7f:bd:6a:b1:06:9e:5a:8a:c3:
         87:f7:75:9c:80:5e:b8:bd:3e:5c:e8:56:0a:26:ad:c6:c0:99:
         f5:eb:af:3f:e5:a8:bf:bb:91:5a:ec:4f:5a:2f:53:ce:19:62:
         b1:ad:7d:6b:12:d6:37:81:ac:a1:4b:8d:2c:82:33:89:39:fd:
         2c:72:10:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----