Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
File:                     j3phc572fsR6X9EOVvx6NNy3PHA.mft (raw, json)
Hash identifier:          5nQpOAsx712sMQUGkUfBPmsXn8LDJAUUK0Vjx0T6hBE=
Subject key identifier:   38:60:D6:09:B3:A3:B7:9D:BC:5C:A4:C7:D4:1D:20:EB:64:7B:B6:7C
Authority key identifier: 8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70
Certificate issuer:       /CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70
Certificate serial:       01962F3D56C83839BBCD1CDF1D747DC48350
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft
Manifest number:          0D3D
Signing time:             Sun 13 Apr 2025 13:01:11 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:11 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:11 +0000
Files and hashes:         1: j3phc572fsR6X9EOVvx6NNy3PHA.crl (hash: LxblKrY6ObKOAVUe+TJHpvTdcZmHNARgtJiMu5p81g4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:56:c8:38:39:bb:cd:1c:df:1d:74:7d:c4:83:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f7a61739ef67ec47a5fd10e56fc7a34dcb73c70
        Validity
            Not Before: Apr 13 13:01:11 2025 GMT
            Not After : Apr 14 13:01:11 2025 GMT
        Subject: CN=3860d609b3a3b79dbc5ca4c7d41d20eb647bb67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ee:bd:03:f7:b5:ba:a6:63:4a:4d:f0:e3:99:
                    f7:cb:89:bf:b4:e4:b9:52:29:ab:c3:ff:a6:c4:9b:
                    a2:7d:ee:8c:ab:ee:9a:c6:82:fb:b4:15:cc:a2:af:
                    23:52:61:4e:d6:b9:20:02:2a:ec:d4:d6:38:74:16:
                    12:32:fd:39:92:4b:67:38:53:a2:e4:b3:d1:dc:d0:
                    32:18:7e:a6:21:4a:19:70:52:a5:6b:e6:06:0a:e4:
                    6e:0c:17:b6:5c:c0:9b:3c:48:c8:33:64:8a:89:e6:
                    b3:11:17:dd:1a:08:8e:bf:6a:e5:de:fb:17:c3:9f:
                    60:a0:6c:66:3f:88:54:da:13:fc:f3:28:d3:d6:c2:
                    a8:71:87:5c:b0:fe:97:1e:60:c6:66:bf:05:0f:1e:
                    a2:aa:68:63:c6:5a:77:50:23:42:2c:94:50:88:bf:
                    22:85:84:1a:36:17:03:6d:36:79:1b:df:80:e0:ad:
                    15:04:71:42:a8:c6:64:18:61:42:c4:e7:51:bd:b0:
                    5f:b1:4e:56:c6:ff:cf:cf:63:dd:d7:fa:de:63:63:
                    df:e3:d4:ca:ee:4d:dd:91:ca:0c:66:8a:50:04:90:
                    08:21:af:d2:7c:47:26:aa:f4:f1:ed:26:7f:da:2c:
                    b4:a6:49:a4:ed:11:4d:25:89:6a:7b:d3:5a:45:70:
                    85:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:60:D6:09:B3:A3:B7:9D:BC:5C:A4:C7:D4:1D:20:EB:64:7B:B6:7C
            X509v3 Authority Key Identifier:
                keyid:8F:7A:61:73:9E:F6:7E:C4:7A:5F:D1:0E:56:FC:7A:34:DC:B7:3C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3phc572fsR6X9EOVvx6NNy3PHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/f7c14b-4115-4a92-81b5-738940810adf/1/j3phc572fsR6X9EOVvx6NNy3PHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:e5:41:9a:2d:c6:9d:d2:de:b8:03:25:1a:13:ae:4c:a9:71:
         72:69:b8:a0:05:df:09:c1:07:8a:df:6f:31:40:89:df:f8:f2:
         7c:50:ae:24:97:02:b9:e6:6b:f2:35:32:69:66:b9:83:d8:00:
         c4:29:e1:d4:0e:54:9a:92:ed:91:74:83:4b:1a:1e:da:47:fa:
         e4:ef:d6:ce:51:c8:32:6d:21:99:2b:3c:98:4c:b2:86:88:cf:
         a4:23:3d:39:45:84:a1:ca:db:8e:11:ca:b7:56:f5:c5:02:11:
         ff:fb:ce:11:ec:12:00:3c:61:ec:4c:42:83:f0:be:b9:35:ea:
         a8:3d:92:0c:ea:ad:97:46:63:49:ef:45:75:ec:26:48:df:a8:
         d2:3b:c1:86:0b:58:c9:91:3b:e5:61:30:35:ba:9e:a1:18:00:
         14:d5:c1:83:d2:b9:c9:06:af:c0:1c:e3:61:a1:db:1d:dc:60:
         fc:3d:e8:2a:2c:00:0f:e6:a2:36:2a:ad:0c:a5:93:17:4b:d4:
         a8:7d:80:93:a1:2a:86:45:fb:59:04:b9:26:62:a1:59:44:24:
         1e:9e:70:c4:17:fd:04:3c:31:e1:c1:f9:8f:dd:62:d2:54:e8:
         9f:12:5c:38:5d:04:3c:80:6f:7a:74:45:0e:16:ae:51:db:61:
         72:39:45:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----