Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/imgZHKtu8GsyKwsSSHhdSEpFJPM.mft
File:                     imgZHKtu8GsyKwsSSHhdSEpFJPM.mft (raw, json)
Hash identifier:          cmjTUxP4IPVlLWBxB8JXRU4yLneKjIE3FkOPsIeGn80=
Subject key identifier:   E0:63:40:3F:48:3B:B3:5A:A2:60:6F:BE:F6:0C:92:EE:A7:1E:78:BA
Authority key identifier: 8A:68:19:1C:AB:6E:F0:6B:32:2B:0B:12:48:78:5D:48:4A:45:24:F3
Certificate issuer:       /CN=8a68191cab6ef06b322b0b1248785d484a4524f3
Certificate serial:       01962F06DBAB9ED66EFA88D2C104F49C34E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/imgZHKtu8GsyKwsSSHhdSEpFJPM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/imgZHKtu8GsyKwsSSHhdSEpFJPM.mft
Manifest number:          0F39
Signing time:             Sun 13 Apr 2025 12:01:40 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:40 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:40 +0000
Files and hashes:         1: U8GRHKScYdSNdnB2mr1xryjNCyA.roa (hash: gCSVLFeQA2Qb3RyGGtdWNAIaM4Y9u0sDXVDglP6HH5k=)
                          2: imgZHKtu8GsyKwsSSHhdSEpFJPM.crl (hash: +95fQ8q993Ylnl0mmu+31vRC2xCqA6wfVJFnTPSTOYo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:db:ab:9e:d6:6e:fa:88:d2:c1:04:f4:9c:34:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a68191cab6ef06b322b0b1248785d484a4524f3
        Validity
            Not Before: Apr 13 12:01:40 2025 GMT
            Not After : Apr 14 12:01:40 2025 GMT
        Subject: CN=e063403f483bb35aa2606fbef60c92eea71e78ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:44:ea:72:5c:ce:6e:7c:35:c9:06:b8:e2:90:
                    15:ab:4a:52:d0:33:cc:87:18:64:4e:6c:4e:c0:20:
                    83:de:d0:0e:8f:82:72:11:eb:26:2e:71:0d:83:fa:
                    90:3f:f6:62:72:af:7c:bd:61:72:56:72:c9:ed:51:
                    ae:b1:e2:e1:9c:8b:e0:f6:a9:3f:01:5e:5b:de:fb:
                    0d:a5:82:ff:31:7a:1e:dc:24:fe:1a:de:02:9e:79:
                    a8:53:4a:5d:59:d3:f1:22:ec:9f:2e:f4:0b:65:b2:
                    b4:c8:12:b2:f0:fb:70:4a:24:02:23:ad:f3:15:34:
                    7d:87:24:b8:7b:91:8d:95:b1:39:2f:0b:e4:86:73:
                    85:2e:17:87:2d:da:9e:0c:3e:ac:d0:bb:7c:19:86:
                    8b:ce:c3:ad:14:6e:8c:24:aa:3e:37:ef:84:aa:0e:
                    67:3f:f9:44:c0:97:8f:87:d8:30:f6:de:65:88:4d:
                    09:09:26:e3:a6:fc:99:a9:63:22:d7:6f:c1:94:30:
                    4b:a1:9e:41:a6:29:2e:92:c9:fe:42:fa:28:23:4b:
                    31:23:20:88:5f:9f:fd:15:f9:43:d9:a1:06:47:a0:
                    2b:45:34:47:ee:1a:01:3d:dc:36:68:34:e2:0f:34:
                    84:d0:e7:00:41:2c:55:cb:75:5d:ce:20:11:51:a3:
                    92:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:63:40:3F:48:3B:B3:5A:A2:60:6F:BE:F6:0C:92:EE:A7:1E:78:BA
            X509v3 Authority Key Identifier:
                keyid:8A:68:19:1C:AB:6E:F0:6B:32:2B:0B:12:48:78:5D:48:4A:45:24:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/imgZHKtu8GsyKwsSSHhdSEpFJPM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/imgZHKtu8GsyKwsSSHhdSEpFJPM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/e3ee8d-e459-4f47-b75d-97117eeb4891/1/imgZHKtu8GsyKwsSSHhdSEpFJPM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:8e:11:a5:38:d6:c9:ba:0a:7b:da:78:3a:51:b0:4a:6b:18:
         89:92:b5:99:61:7f:3c:39:82:f5:63:19:2b:39:46:6f:2c:55:
         7f:10:6b:06:e0:05:1b:85:26:b0:78:e7:9d:82:57:db:72:b6:
         51:d2:74:ef:da:8d:14:36:68:e9:95:63:9a:e6:a3:83:f2:91:
         8d:7d:40:ee:29:0e:7f:49:a8:29:b0:e2:c4:9c:ee:cc:96:00:
         1e:a7:a4:78:f3:c1:c8:91:51:32:55:74:ce:67:8c:14:dd:45:
         0d:34:79:e6:c5:15:0d:ce:7b:7e:a0:07:f4:76:27:7a:54:a6:
         45:1b:b7:21:05:00:ef:c8:34:35:35:9b:a0:5b:fa:17:a8:58:
         17:a9:f4:92:d2:60:1a:a9:cd:1e:c0:da:df:19:05:b2:96:e3:
         ba:49:db:aa:08:0e:90:b5:f0:b4:f9:53:a8:e1:cf:bb:8d:cf:
         77:36:ca:c0:15:dd:37:32:5c:38:e8:2b:5a:cd:1e:46:63:da:
         0f:c2:c0:05:a3:67:eb:16:56:a8:0a:f5:9a:60:24:d1:f9:c0:
         a1:8f:54:6c:ed:bb:e6:6e:49:4b:53:5b:c8:c3:9d:54:2b:98:
         16:39:1a:3b:f4:5e:df:e7:fc:14:a1:02:05:0c:90:ce:ee:bd:
         6c:be:8f:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----