Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
File:                     jYQmVhd7QmerVeS6FlpewA9QhLw.mft (raw, json)
Hash identifier:          i/uYZhQyZkeKbPVntbpC7VPhTUlnK8jEs4GvdterAiE=
Subject key identifier:   33:48:4A:52:60:E0:5E:8A:7F:72:05:2E:22:41:EF:AA:1A:C0:90:AA
Authority key identifier: 8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC
Certificate issuer:       /CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
Certificate serial:       01962E98DDAE1416C1BD7073ECD9AC6A065B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft
Manifest number:          14EE
Signing time:             Sun 13 Apr 2025 10:01:32 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:32 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:32 +0000
Files and hashes:         1: RJ12iqBIGMdg63G0MMvg2LDMix8.roa (hash: sESw+q0gARk5gtp41IohBHW+APoentCrsvNrV3WWi+U=)
                          2: aUmaQEWRoE1QO_xmwTCfYrd0iAI.roa (hash: KmZy81mfy9sZbmzpjyQc2GLJJhLJJJePfwOXkxp6EMc=)
                          3: h17YXZJyvSVJKfuRPJwacmnQTko.roa (hash: gCm2d2N9654aioOcioiAbPWA94RRy8WmG63hHdr1o54=)
                          4: jYQmVhd7QmerVeS6FlpewA9QhLw.crl (hash: lxQUpsVZ1CDXnfCSzWuxycBmqiF1lnLuqdOoPUpWndA=)
                          5: vum5ModJUNyeXtPPKIV3l7J0g94.roa (hash: zPI/RZhzXTNYTyqGgKwTajtQQ1UJGC+Yon4LK77IQPg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:dd:ae:14:16:c1:bd:70:73:ec:d9:ac:6a:06:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d842656177b4267ab55e4ba165a5ec00f5084bc
        Validity
            Not Before: Apr 13 10:01:32 2025 GMT
            Not After : Apr 14 10:01:32 2025 GMT
        Subject: CN=33484a5260e05e8a7f72052e2241efaa1ac090aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:36:1b:95:d6:4c:d4:3e:42:58:a3:0f:e7:1f:
                    db:47:98:0b:2c:7a:e1:b8:f6:64:0a:cd:33:d8:2d:
                    18:a5:b0:55:19:37:98:20:33:21:6b:48:ea:95:30:
                    f4:e0:22:bd:f9:6b:68:1d:49:22:20:79:ea:b0:38:
                    be:6d:99:93:27:42:5b:b0:11:b1:98:bc:a6:8f:6c:
                    13:ae:a1:17:93:60:38:ab:a8:35:20:0d:fd:d0:da:
                    fd:b3:36:27:97:86:ce:d6:62:c1:54:f6:e5:8a:af:
                    b1:af:0d:6f:d8:d6:0d:0f:a8:54:d8:a2:20:62:f7:
                    27:21:9f:c2:fa:56:64:e2:bd:de:8a:27:88:e7:bb:
                    ef:04:e2:ff:93:45:c1:b9:b2:f7:14:2a:01:2b:5a:
                    01:c9:e3:44:7b:a7:a0:d4:e5:f2:14:ec:d9:34:db:
                    f4:ca:20:1e:c4:6c:49:11:40:01:8e:d0:ae:27:32:
                    8f:d5:d5:46:68:bb:32:37:cd:08:fc:11:97:e3:d1:
                    14:58:7e:8f:25:c4:c4:1f:ef:69:cf:15:de:83:92:
                    d9:f7:9b:56:f7:18:09:56:3d:b0:ea:76:a3:d2:23:
                    38:dd:d5:5c:b1:a8:18:34:5e:39:81:1d:4a:59:3d:
                    c0:aa:5a:da:dc:77:92:76:ab:3d:1d:47:dc:be:86:
                    d7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:48:4A:52:60:E0:5E:8A:7F:72:05:2E:22:41:EF:AA:1A:C0:90:AA
            X509v3 Authority Key Identifier:
                keyid:8D:84:26:56:17:7B:42:67:AB:55:E4:BA:16:5A:5E:C0:0F:50:84:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jYQmVhd7QmerVeS6FlpewA9QhLw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/9360ec-9cd1-4c00-8668-94c2f8269e9c/1/jYQmVhd7QmerVeS6FlpewA9QhLw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:8d:d5:25:b7:d0:aa:1b:7e:f5:3d:2d:07:10:6e:20:9d:29:
         32:a7:fa:49:fe:6c:70:d1:62:f6:ee:a8:33:c7:c1:c6:86:56:
         a1:d8:d7:96:ed:f0:24:84:42:95:02:90:e6:fa:f9:d2:fb:41:
         22:19:1c:e0:c3:d6:b0:84:5f:04:48:0f:70:3d:fc:20:be:ab:
         84:7e:ae:75:24:ae:01:98:de:67:5d:56:1c:2e:2b:38:0d:4b:
         aa:46:dc:f3:e7:6d:d1:35:00:26:8b:1b:3f:1c:6c:dc:b6:c6:
         f6:11:2d:7c:44:be:7c:2d:58:02:a7:d9:5c:b8:13:71:be:97:
         2d:02:48:1c:8b:5b:66:54:51:78:eb:a2:e6:d6:85:98:d7:fe:
         a7:fb:63:eb:3a:5d:07:27:e0:e6:78:c7:7b:53:1f:98:2a:de:
         f5:a7:9e:96:28:c6:5b:aa:c1:72:75:e3:c6:41:6c:17:be:21:
         bf:0f:20:28:45:7c:c6:5f:1f:e5:7f:11:41:35:b8:79:59:ff:
         31:99:7d:63:fd:96:9d:5f:97:29:74:c7:ad:11:de:ff:f2:a3:
         1f:00:04:43:98:28:2c:ab:44:6b:59:97:50:6d:16:54:c1:53:
         cc:12:32:8b:f3:be:c4:86:18:fe:a9:c2:7b:ec:a1:3d:80:b3:
         0a:87:20:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----