Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
File:                     j8LtpUeIeltFA9kFkupQVljabno.mft (raw, json)
Hash identifier:          wyzV3yENWn6UUciXBM0ejL7GQZbbX6+DmQqrAJ/w7aY=
Subject key identifier:   6D:85:34:44:89:39:28:39:25:66:35:DA:94:AD:62:C0:5B:DF:15:18
Authority key identifier: 8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A
Certificate issuer:       /CN=8fc2eda547887a5b4503d90592ea505658da6e7a
Certificate serial:       01962DF3AE9F522DEA83C6CC8F809C1B9D05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft
Manifest number:          13FB
Signing time:             Sun 13 Apr 2025 07:01:06 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:06 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:06 +0000
Files and hashes:         1: j8LtpUeIeltFA9kFkupQVljabno.crl (hash: pfwPw4BFoThF4IiBL91657HRxrgoGFDUt7OreI88oeg=)
                          2: vo41TJmt3C6QujdoChHPsobf9wU.roa (hash: D6T9SlEvHKEsLXEPPq633IxaLopzaLfHyAO1ibmxPX4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:ae:9f:52:2d:ea:83:c6:cc:8f:80:9c:1b:9d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fc2eda547887a5b4503d90592ea505658da6e7a
        Validity
            Not Before: Apr 13 07:01:06 2025 GMT
            Not After : Apr 14 07:01:06 2025 GMT
        Subject: CN=6d85344489392839256635da94ad62c05bdf1518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1d:f8:d3:d3:57:8c:db:97:26:47:a8:dc:b0:
                    53:f5:75:c3:63:d4:03:05:86:bd:05:ce:39:3b:7d:
                    49:82:59:ae:20:ec:9a:9f:16:8a:05:e2:f2:e9:59:
                    3a:80:00:4c:d9:0b:06:d6:bf:ac:5b:f4:16:7c:a4:
                    e1:f9:31:c9:96:20:d0:87:41:5d:c2:6e:11:51:61:
                    9c:f4:eb:b4:56:d1:3c:b1:92:9e:ad:b3:f7:50:ef:
                    97:2b:e3:c6:01:bb:06:56:20:ac:ef:ef:7e:9d:d8:
                    a2:d6:d3:e1:c4:72:32:c2:e4:98:73:cd:22:89:fc:
                    03:62:0c:b7:f4:65:93:b7:23:df:80:d6:93:6c:93:
                    1d:14:09:a0:0e:f1:87:b0:74:f3:0a:a7:48:92:80:
                    9f:ca:2a:02:67:9c:6d:2e:fe:7c:be:bb:3e:75:22:
                    e5:35:4f:84:bd:c4:9d:09:4c:c6:3d:27:bf:a5:94:
                    9c:10:a8:cb:aa:5b:34:f8:d9:3e:53:8e:7b:41:eb:
                    37:45:79:2f:4e:17:04:ac:de:17:6a:7e:73:67:fb:
                    89:b4:4b:b4:29:e4:1f:c8:c2:03:34:c2:25:68:2f:
                    13:77:6a:2e:d4:4c:73:a0:3b:be:8b:f2:90:2e:bc:
                    93:f6:56:51:25:30:b3:e2:c5:fe:d4:3d:ba:97:f0:
                    45:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:85:34:44:89:39:28:39:25:66:35:DA:94:AD:62:C0:5B:DF:15:18
            X509v3 Authority Key Identifier:
                keyid:8F:C2:ED:A5:47:88:7A:5B:45:03:D9:05:92:EA:50:56:58:DA:6E:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8LtpUeIeltFA9kFkupQVljabno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f180-1f76-46fc-a721-1681370d9c10/1/j8LtpUeIeltFA9kFkupQVljabno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:89:98:bb:88:f8:58:8b:a8:cf:b9:43:ae:45:32:6c:2c:f6:
         3d:78:2e:02:60:e0:77:44:f6:a1:88:38:09:4c:42:2d:d7:67:
         14:90:ca:f4:b1:2d:c4:bd:cf:52:50:15:59:2f:3e:08:d6:cd:
         9e:48:e5:27:b7:53:db:0b:01:bb:d4:e0:6c:60:80:70:ed:5b:
         c5:08:b0:1f:a0:b8:da:53:7b:92:6b:d5:01:9e:e6:11:49:84:
         4e:68:2a:05:2e:74:e1:1a:66:e1:73:7a:18:d5:18:45:d3:22:
         5e:32:43:08:a4:84:b7:d1:34:f7:2f:26:4c:a8:dc:bd:65:7a:
         de:bb:78:f9:4b:48:52:ed:bf:27:34:91:18:90:af:7d:41:e3:
         c3:9e:07:68:f2:68:a7:b8:c7:aa:07:ab:32:8b:cf:2c:49:f4:
         68:dd:e0:12:b9:91:7b:b6:2f:5a:82:9e:39:f2:5a:d6:b2:2e:
         ff:39:06:31:0c:89:25:b8:31:d8:fe:1b:c8:cf:2e:ff:00:db:
         cb:b8:26:51:31:cf:9a:0a:2f:ad:7c:34:45:ef:4a:de:29:68:
         45:e5:ef:45:6b:a6:08:3f:ba:9b:6d:20:7d:d6:c4:59:4d:6d:
         77:f0:ce:d0:d1:91:98:c0:d7:cc:88:5f:66:01:d4:9d:e1:a0:
         e2:97:7d:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----