Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
File:                     jvzJdu-QODrOfwtOCeTYGe0Nm14.mft (raw, json)
Hash identifier:          J5SRRAv+50CQQNue5V2UZ9Rp5C8tjGsx9mPTUP3Esaw=
Subject key identifier:   0A:AD:8E:C9:43:46:FA:E7:B9:6F:47:28:3B:DB:E3:C5:68:31:A3:5A
Authority key identifier: 8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E
Certificate issuer:       /CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
Certificate serial:       01962F3DB3825042E838A3189915F1C845A8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft
Manifest number:          11D4
Signing time:             Sun 13 Apr 2025 13:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:34 +0000
Files and hashes:         1: iZWDIUILuFWunNVYaqJwiBg2ZXU.roa (hash: BgNy6gZxNs+Fc3c2uaucV4KzH/PC8AB8rNSrrgEVedo=)
                          2: jvzJdu-QODrOfwtOCeTYGe0Nm14.crl (hash: D4DTjHMi+RqhYq2Fa9iKRxeImLQ2XsSKAGuPf8WLviY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:b3:82:50:42:e8:38:a3:18:99:15:f1:c8:45:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8efcc976ef90383ace7f0b4e09e4d819ed0d9b5e
        Validity
            Not Before: Apr 13 13:01:34 2025 GMT
            Not After : Apr 14 13:01:34 2025 GMT
        Subject: CN=0aad8ec94346fae7b96f47283bdbe3c56831a35a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:d5:04:f8:37:30:bb:d4:e0:b0:a7:36:b6:1b:
                    63:d7:79:4c:af:41:05:b4:37:34:e1:e6:55:18:bb:
                    df:74:5d:d6:90:ad:3d:19:c8:44:e7:21:4e:fd:ae:
                    35:ae:9d:ca:b2:d6:7d:3e:49:8d:e8:ac:40:bc:e1:
                    06:6d:e5:d3:3f:ea:92:e2:93:f9:00:8f:d6:6f:5b:
                    88:2f:2c:fb:91:de:81:e4:0d:98:1e:c1:aa:d3:71:
                    02:3e:ae:b9:f5:27:8e:06:cd:46:40:98:65:ec:ae:
                    9e:54:f5:31:b3:9a:83:4f:79:73:0a:47:35:73:5e:
                    d5:bf:e8:98:57:f1:6a:67:68:79:35:92:8b:f9:65:
                    16:7b:73:e6:4f:ea:61:c3:ef:fd:1a:1d:85:e6:20:
                    23:e0:59:71:70:30:cf:65:4b:17:84:22:0c:88:ce:
                    18:67:3f:63:41:5d:57:ce:18:20:3b:5c:79:c5:ab:
                    ea:7b:81:72:2b:de:c8:8e:ac:fd:ff:2f:d7:e6:56:
                    a6:88:9f:19:e1:6d:6f:71:cf:43:e4:8f:15:10:4c:
                    71:4c:dd:36:27:00:22:aa:b4:39:cd:17:ee:04:a8:
                    30:de:62:24:53:eb:28:f1:01:02:4e:dd:fe:fb:b2:
                    b2:b9:1f:d7:53:82:13:3a:85:83:d1:38:b6:9f:3c:
                    72:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:AD:8E:C9:43:46:FA:E7:B9:6F:47:28:3B:DB:E3:C5:68:31:A3:5A
            X509v3 Authority Key Identifier:
                keyid:8E:FC:C9:76:EF:90:38:3A:CE:7F:0B:4E:09:E4:D8:19:ED:0D:9B:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jvzJdu-QODrOfwtOCeTYGe0Nm14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/9e4764-7234-4ba4-8e8a-e2754f6fb4c5/1/jvzJdu-QODrOfwtOCeTYGe0Nm14.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:1d:38:d4:f3:56:8c:b5:3a:3a:88:55:a3:7c:ff:ed:bc:13:
         0f:c7:a4:17:df:be:6e:ec:2d:25:75:20:53:14:ac:38:c1:ea:
         17:a9:fe:ad:1f:97:63:c4:76:29:4e:1c:8f:ae:3c:6c:4a:97:
         ce:f7:99:ff:da:e8:01:10:88:f5:52:cc:f4:bb:ce:88:cf:29:
         8a:28:c6:a1:b4:39:94:ed:18:9d:86:81:42:93:a0:e1:30:97:
         21:ea:99:6f:4e:4c:67:f2:c8:1a:9d:82:e1:91:8b:48:b6:20:
         29:04:76:a7:8f:b6:0e:16:83:88:bc:8a:c6:a4:f4:ee:58:77:
         16:02:c8:a8:0b:85:7d:4b:f8:aa:9b:47:31:6c:98:78:c8:ef:
         9c:9e:64:b4:43:67:70:db:a0:00:1e:01:73:cc:c4:fc:d2:dc:
         2f:bc:86:92:b5:ed:58:ae:e5:b2:9d:ef:00:26:97:24:03:47:
         36:4f:e4:8e:da:6b:f8:7b:51:a7:b5:8f:ae:d1:0b:40:1b:a2:
         99:de:2b:38:3b:fc:6e:81:f2:5a:78:0c:fb:d9:cb:e2:30:02:
         37:69:be:57:07:9e:c9:da:d0:7b:77:f0:26:2f:6f:7a:8d:e5:
         ae:50:78:44:5b:f3:ff:39:f2:a4:56:b9:88:02:1f:92:cc:b8:
         d9:fc:e1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----