Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
File:                     J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft (raw, json)
Hash identifier:          bXLqq5IiH/1Kdc/75UyYnheoWxScW42rpkwgkfHzvYM=
Subject key identifier:   D0:9A:01:05:E7:19:3E:EA:36:7F:32:0F:73:01:BC:C6:F7:44:79:CE
Authority key identifier: 27:F4:8C:85:A4:2B:00:B3:9D:18:03:E6:3C:9F:D5:AD:EB:F7:F9:5E
Certificate issuer:       /CN=27f48c85a42b00b39d1803e63c9fd5adebf7f95e
Certificate serial:       01962E617D009C3BF179D2E24A87EA205E8E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft
Manifest number:          11C8
Signing time:             Sun 13 Apr 2025 09:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:02 +0000
Files and hashes:         1: J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl (hash: gZm/czPRry7KmfgfyE+w0DUhejD6Gs8yh9hem+l1fhM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:7d:00:9c:3b:f1:79:d2:e2:4a:87:ea:20:5e:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27f48c85a42b00b39d1803e63c9fd5adebf7f95e
        Validity
            Not Before: Apr 13 09:01:02 2025 GMT
            Not After : Apr 14 09:01:02 2025 GMT
        Subject: CN=d09a0105e7193eea367f320f7301bcc6f74479ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:88:32:c9:18:7b:b3:01:cf:a3:ef:90:41:7d:
                    46:2f:d9:76:9d:a2:69:69:09:4e:64:3e:42:87:85:
                    38:d0:2a:05:a6:b1:f1:4f:e1:1b:a3:3e:ae:18:06:
                    6c:83:73:f7:9c:f6:5d:9d:d0:f0:0d:1e:f7:fd:79:
                    da:ac:6a:da:e1:9b:f3:b5:7a:e8:94:89:b1:d8:80:
                    57:28:1d:dd:03:9a:b9:90:17:a2:6c:8d:c4:88:ff:
                    e6:cc:a9:e5:b8:df:37:34:e6:0d:2a:aa:7b:33:32:
                    98:9f:62:44:03:44:19:31:8d:e7:8d:59:25:43:e2:
                    dc:a4:9e:d6:4d:90:73:73:be:d2:be:0e:71:26:4d:
                    fa:b7:b2:06:c8:b2:2a:b8:d0:a2:82:33:29:fb:98:
                    a7:8b:93:22:c6:8a:cc:05:45:d6:10:e1:cb:16:56:
                    7d:a1:49:9e:55:00:c8:66:68:3a:7f:f2:77:1a:1b:
                    27:db:f5:fa:6d:90:75:05:54:83:b0:bb:06:42:37:
                    b7:78:64:47:46:2b:a9:f8:88:b1:a5:d6:5e:54:af:
                    e1:ad:56:1a:e7:8b:bd:0e:9d:28:ba:94:58:dc:92:
                    59:c1:25:dc:9b:1b:90:45:11:8b:15:ef:c3:58:be:
                    13:0d:9e:97:ae:af:4d:24:2f:d2:df:cf:79:6d:d8:
                    8a:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:9A:01:05:E7:19:3E:EA:36:7F:32:0F:73:01:BC:C6:F7:44:79:CE
            X509v3 Authority Key Identifier:
                keyid:27:F4:8C:85:A4:2B:00:B3:9D:18:03:E6:3C:9F:D5:AD:EB:F7:F9:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_SMhaQrALOdGAPmPJ_Vrev3-V4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/4d4b24-9b58-4e3c-a515-e325621e86dd/1/J_SMhaQrALOdGAPmPJ_Vrev3-V4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:8e:73:f5:6e:ec:fc:5d:df:24:d7:ac:c8:4f:e3:2f:f4:37:
         a7:85:9a:a1:75:24:07:f0:0d:19:6b:88:12:4a:fb:2a:1b:7e:
         58:5f:43:96:d9:70:53:ed:31:81:bc:51:5c:54:be:b1:2b:d4:
         aa:11:f2:7e:f6:45:e6:45:ca:94:77:a9:86:9d:b0:49:e5:87:
         ec:d3:ca:06:d3:87:a5:8f:a9:dc:94:ef:1e:5b:5f:82:41:da:
         b5:1d:30:26:a3:fb:55:22:ab:05:7a:2d:f5:0b:41:94:f7:8c:
         55:a7:78:e6:3c:62:93:b7:b8:1f:d3:45:8e:51:14:34:58:75:
         c7:a3:87:64:d9:ae:0c:06:fe:38:a1:c5:38:30:10:36:a8:b7:
         c4:63:f5:46:71:55:ef:19:96:d6:c7:45:98:b2:96:94:10:91:
         e8:d4:b8:36:12:da:56:18:ac:c0:6d:92:ae:bf:5c:56:c3:d4:
         bc:bf:20:6c:90:ba:0c:ef:e6:52:99:26:f3:e4:d8:39:9c:71:
         a3:39:b9:9f:c3:6c:ac:4d:6e:e9:5f:8c:14:d9:d1:59:5e:57:
         a9:8b:f2:18:be:1e:91:12:0e:ab:69:00:3d:60:3a:b1:79:85:
         15:76:a8:4c:37:7b:c2:88:c9:cb:c8:72:90:25:dc:01:fc:29:
         c1:7a:8b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----