Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
File:                     joIj7fCuQlYOjwwssFnjyPWuTRo.mft (raw, json)
Hash identifier:          yvY5X8ITT2F0ycDy1L37d4h7hqcqAjgbHpOCC4uH6tE=
Subject key identifier:   0E:34:E5:1A:7A:04:41:68:B9:2D:57:A4:A1:DB:93:D4:A6:75:4E:18
Authority key identifier: 8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A
Certificate issuer:       /CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
Certificate serial:       01962F06FBC7328636150D2ACEC0E41A75BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft
Manifest number:          07B3
Signing time:             Sun 13 Apr 2025 12:01:48 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:48 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:48 +0000
Files and hashes:         1: joIj7fCuQlYOjwwssFnjyPWuTRo.crl (hash: vreW4XqQehBGbVccpalYnXbYWN33c0qR7f/iyE9ddaw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:fb:c7:32:86:36:15:0d:2a:ce:c0:e4:1a:75:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e8223edf0ae42560e8f0c2cb059e3c8f5ae4d1a
        Validity
            Not Before: Apr 13 12:01:48 2025 GMT
            Not After : Apr 14 12:01:48 2025 GMT
        Subject: CN=0e34e51a7a044168b92d57a4a1db93d4a6754e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:22:9f:da:f1:80:f5:17:86:9c:38:cc:0c:c4:
                    7c:fb:e5:f5:80:e0:8d:7d:19:d1:f3:f6:7e:a9:25:
                    c5:8a:33:35:a0:33:9d:19:d7:5a:31:7b:c9:fd:d0:
                    23:91:90:87:c7:ce:d8:53:32:46:c2:91:4c:fb:90:
                    e5:5e:72:e7:01:6d:25:00:67:80:b8:09:df:b8:2f:
                    20:01:b0:45:1a:5a:23:24:9e:0f:eb:d1:19:21:2a:
                    41:a9:aa:2a:3d:2e:d0:97:23:41:28:b1:80:1b:90:
                    b9:fc:ad:8b:56:c3:cb:85:70:d7:c7:52:85:2c:da:
                    8c:85:23:07:56:f0:ca:a5:65:4b:c6:21:8b:b1:ba:
                    24:45:9e:f2:01:25:2a:16:76:02:62:7f:4e:88:f3:
                    54:6f:a7:6b:53:4a:c5:ab:ef:08:e7:cb:c6:2a:b1:
                    1f:96:11:b5:62:b3:d1:7b:8c:e0:52:05:33:4f:05:
                    68:34:38:08:91:1e:e2:2d:dd:2e:8d:3a:68:23:f0:
                    7b:c9:4d:00:e9:23:ae:39:0c:44:04:d5:af:5e:bf:
                    93:e6:7b:73:38:9d:6e:85:f4:60:39:ab:be:ca:45:
                    c4:41:d6:ac:d4:a7:5b:0d:58:80:40:3c:ac:59:56:
                    e3:ec:d0:51:90:7a:39:79:cf:45:72:49:02:e5:70:
                    c4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:34:E5:1A:7A:04:41:68:B9:2D:57:A4:A1:DB:93:D4:A6:75:4E:18
            X509v3 Authority Key Identifier:
                keyid:8E:82:23:ED:F0:AE:42:56:0E:8F:0C:2C:B0:59:E3:C8:F5:AE:4D:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/joIj7fCuQlYOjwwssFnjyPWuTRo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/dd15b4-3cdb-4a7a-92b1-d16895e0e18e/1/joIj7fCuQlYOjwwssFnjyPWuTRo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:05:03:f7:6a:48:0a:27:df:f8:75:03:51:f7:3d:ea:0c:c1:
         3b:60:97:c4:67:cf:c6:2c:21:e3:9f:22:4a:c7:2c:c1:34:70:
         42:3e:16:e6:b1:2d:49:a0:0f:3c:e5:db:47:a1:45:50:9d:b7:
         8b:89:36:7f:f5:92:b0:ab:61:d3:a4:26:74:4d:bc:f9:0f:90:
         c3:b9:dc:45:73:4c:20:1f:e5:36:cc:7f:c8:ad:e0:6f:10:2e:
         40:f1:39:56:9b:a0:bc:37:a9:03:a3:1b:15:8b:58:b9:e4:34:
         e8:f6:d1:e1:ff:fb:59:a8:57:c6:a6:86:fc:61:cd:8d:d4:82:
         f5:47:0f:97:0f:28:e4:be:42:44:73:01:31:4f:e2:ac:04:71:
         b4:c3:cf:db:cd:67:6f:8f:0a:c3:fa:fe:13:81:dd:77:e1:f6:
         71:ef:ff:cc:11:a4:db:f2:77:f5:96:7d:83:0c:d1:84:9a:84:
         a3:2f:e8:e1:0b:8b:56:4c:ee:df:70:bd:da:1e:b7:88:37:a1:
         07:14:35:85:12:bf:9d:09:16:c6:cd:e7:22:80:d1:49:a5:e6:
         7e:bc:8e:93:c4:89:22:a9:f3:83:81:cb:64:9f:f5:27:19:31:
         70:44:46:16:c4:9a:11:05:31:67:94:67:a1:cb:96:85:e6:cf:
         66:b7:b2:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----