Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
File:                     jP3v7O1c7o8abJN5jlo0tiH23As.mft (raw, json)
Hash identifier:          LOTa4m4waRfw6ruJ3Og70bcSZqvTuXKfE3Da3EVLKtw=
Subject key identifier:   B2:3B:B5:6D:92:95:37:FA:87:8C:E3:99:BD:DE:BC:1C:0C:67:B9:98
Authority key identifier: 8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B
Certificate issuer:       /CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
Certificate serial:       01962F06846B9BB4FA180844C6E0F8223D65
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft
Manifest number:          0270
Signing time:             Sun 13 Apr 2025 12:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:18 +0000
Files and hashes:         1: e-faYsu_q8JpVrdQYQcLj8wnjok.roa (hash: VJHGGavedyryjyDeAPzaChR45OEsZ2gDknElm4l7rQg=)
                          2: jP3v7O1c7o8abJN5jlo0tiH23As.crl (hash: byRXWsSZcgOxQtQ8LcAbr3PIlF8NTBy3IyqOM1IM4xQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:84:6b:9b:b4:fa:18:08:44:c6:e0:f8:22:3d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cfdefeced5cee8f1a6c93798e5a34b621f6dc0b
        Validity
            Not Before: Apr 13 12:01:18 2025 GMT
            Not After : Apr 14 12:01:18 2025 GMT
        Subject: CN=b23bb56d929537fa878ce399bddebc1c0c67b998
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2b:8f:4b:d7:f5:15:29:6e:83:d6:f0:59:ff:
                    65:81:33:6c:26:5b:a2:34:11:8e:06:f5:2a:7a:f5:
                    65:ab:2f:72:bd:b5:ea:7c:c5:6f:f3:ed:fe:a1:b5:
                    04:b6:bc:fc:74:2b:fa:37:86:f2:fa:69:b4:cb:13:
                    2e:e4:f5:a4:23:6c:60:a0:46:36:81:b2:8e:f1:f6:
                    4b:0b:82:0f:5f:e5:67:91:3f:ad:a7:ad:0a:fd:63:
                    6e:17:e4:5c:d7:ef:d5:20:b1:39:63:5a:60:db:c3:
                    c0:32:4a:59:f9:c0:16:29:26:58:f3:f1:39:b1:9d:
                    e3:91:25:35:64:75:9d:76:cb:a2:a7:68:69:44:04:
                    f7:cf:1d:a6:49:05:74:2e:d2:ef:44:41:c9:d2:99:
                    92:de:c6:cb:f3:83:1f:0a:83:08:6f:6b:84:5c:c5:
                    c0:61:a5:0a:a9:51:0d:1d:68:2d:93:21:56:6b:b9:
                    60:e3:ef:41:41:92:0e:a8:34:50:e3:44:5f:1c:ad:
                    f2:13:f4:eb:44:4d:6f:6b:c4:bf:bf:fc:f3:f0:c6:
                    bc:49:69:a4:a9:0d:2d:69:1f:6b:63:66:8d:d3:80:
                    27:10:de:f4:db:ab:78:76:b9:7e:c4:d8:31:75:e1:
                    90:90:0d:e5:5c:0a:3f:9c:56:e5:c6:c9:bf:91:a2:
                    20:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3B:B5:6D:92:95:37:FA:87:8C:E3:99:BD:DE:BC:1C:0C:67:B9:98
            X509v3 Authority Key Identifier:
                keyid:8C:FD:EF:EC:ED:5C:EE:8F:1A:6C:93:79:8E:5A:34:B6:21:F6:DC:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jP3v7O1c7o8abJN5jlo0tiH23As.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/9fb7ab-f3cb-47fc-9a14-06cdeb38f7b6/1/jP3v7O1c7o8abJN5jlo0tiH23As.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:72:d2:70:70:30:28:fb:87:cb:fc:6b:33:e3:d9:dc:c1:e2:
         f9:de:aa:ed:71:f1:e0:8c:cb:cd:51:aa:c6:0d:f4:36:08:6a:
         a9:ac:8e:d8:5a:d5:24:09:50:be:ed:41:6d:dc:85:4d:7c:10:
         a0:fa:ad:2b:a5:ef:96:61:5d:24:36:25:3c:55:2c:15:c9:c8:
         03:2d:67:61:54:08:c0:30:52:7f:39:4c:fc:12:f8:f1:7b:1a:
         05:80:fe:e9:b2:79:6e:64:3c:63:d8:8e:17:6c:50:87:f4:18:
         14:be:d2:aa:36:bb:ba:a0:eb:dd:95:ad:a0:d0:9b:1e:7a:82:
         0f:94:e7:3f:b4:2e:6b:de:81:62:8c:74:c1:cd:0d:b3:cd:58:
         fe:4f:89:24:12:28:dd:bc:82:37:a0:9c:32:8e:cb:59:c3:52:
         91:fc:b0:f7:9d:5b:d2:9a:cc:30:a4:2a:96:d9:34:72:16:eb:
         bf:ae:aa:8d:c5:43:b9:f1:c3:43:e0:38:16:35:e9:ed:fb:65:
         a1:0b:ee:fb:31:34:b7:fd:5e:8a:bb:11:97:44:22:10:12:bd:
         d2:4c:0d:1e:fb:4f:72:5d:88:37:e9:05:5b:3b:09:66:96:f0:
         77:b0:bd:c2:04:63:30:51:d1:a1:f4:8d:b5:6b:f9:50:bf:0e:
         94:21:5d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----