Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
File:                     j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft (raw, json)
Hash identifier:          12EbQtdLaRQfLM161/gvDTHcYkWx0ci+mB09B+g1rVw=
Subject key identifier:   91:A8:15:5A:C6:9A:A1:CF:36:0B:FD:A3:49:CE:12:CB:D0:C6:66:AC
Authority key identifier: 8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
Certificate issuer:       /CN=8fe502397dd6439c068bd053f28187dd77574578
Certificate serial:       01962E2B0048B06912D963B2F2F9C3252CA7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
Manifest number:          0656
Signing time:             Sun 13 Apr 2025 08:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:31 +0000
Files and hashes:         1: gMULOubFLE1zJi0rMg32uHnZqCc.roa (hash: /wj2BLXMxaW2bHG7pTwC6aLckJJ+DGWw6dwVOt+QePs=)
                          2: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl (hash: Cnx5KV2Ktl+ut60+qLc5/LzfDT3HIzzivXrmcPZ/42s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:00:48:b0:69:12:d9:63:b2:f2:f9:c3:25:2c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe502397dd6439c068bd053f28187dd77574578
        Validity
            Not Before: Apr 13 08:01:31 2025 GMT
            Not After : Apr 14 08:01:31 2025 GMT
        Subject: CN=91a8155ac69aa1cf360bfda349ce12cbd0c666ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:57:10:e8:9d:81:4a:63:8b:94:71:cd:2d:46:
                    fa:48:63:1b:d8:08:c3:d0:8c:ce:c1:73:68:a1:ed:
                    92:4a:b2:c3:92:b8:ab:da:8a:30:b0:36:7b:70:ea:
                    59:b5:b8:18:05:6d:63:fc:33:7e:21:b8:7b:2a:de:
                    8e:f0:07:d1:c2:8f:84:c3:5c:b3:3b:68:f6:75:ef:
                    85:d7:a8:8d:02:31:bf:d3:ca:fa:5d:e3:7a:82:23:
                    22:2c:2f:4c:76:97:4d:22:f6:ac:61:07:27:a9:75:
                    f7:0a:0a:63:3c:20:70:b0:3c:ae:4e:fc:5f:fd:88:
                    c9:b1:53:ab:4d:1d:d9:da:77:06:23:1b:0f:15:4d:
                    fc:0e:8e:1d:8d:48:99:a4:65:df:6b:12:bf:a6:f4:
                    39:1d:29:55:46:02:77:1a:1d:b4:53:05:ee:ad:d8:
                    a8:1b:a6:55:b9:f0:53:10:ce:2d:c9:f6:07:8d:28:
                    16:9c:f1:eb:3d:fb:a2:b8:10:6b:85:9b:e1:d3:df:
                    0b:2a:8c:52:d9:06:a0:6c:5c:e9:e4:65:50:eb:46:
                    87:30:b2:9e:c7:35:58:2b:cc:05:a9:d8:aa:63:e9:
                    74:57:32:c9:a9:e1:50:df:f6:23:02:d2:a3:5c:a1:
                    f0:88:2a:d1:c1:aa:b8:5f:80:21:54:4c:f1:83:92:
                    f2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A8:15:5A:C6:9A:A1:CF:36:0B:FD:A3:49:CE:12:CB:D0:C6:66:AC
            X509v3 Authority Key Identifier:
                keyid:8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:6f:69:67:cb:5e:6e:f6:ca:db:ef:d3:b2:07:c6:42:b6:4d:
         71:1a:1c:c7:63:73:3d:74:9b:11:58:8c:7f:e3:82:f3:6f:93:
         45:b7:c9:f7:60:f9:bb:37:74:bf:ed:c9:82:17:03:4a:c8:7b:
         5d:40:5e:df:7e:97:37:4d:81:bf:6e:7e:d4:57:33:19:62:28:
         15:18:75:f2:5a:91:87:ac:dd:75:7a:fb:44:9d:00:d5:5b:41:
         6e:4b:b8:8b:11:b2:c6:e0:8b:3a:82:7b:b7:1e:f7:59:5b:2d:
         45:87:82:35:38:1c:da:e4:4e:a2:a9:73:28:af:f4:a2:34:62:
         ba:a0:7a:fd:96:d7:0b:4b:cc:2d:25:cd:80:e7:0f:eb:e8:54:
         3b:a9:9d:b4:bc:ea:15:37:66:c6:ec:86:e6:4b:4d:2f:82:92:
         09:23:78:6d:82:86:e5:11:95:e0:8c:b0:d7:eb:86:75:3a:5b:
         61:a0:42:b4:7e:07:5d:de:90:75:2e:03:fd:63:a0:ba:b0:bf:
         2f:7d:1d:2d:70:77:9c:33:06:57:bb:53:40:d7:43:e4:94:cd:
         1d:c2:a0:8e:23:c5:0b:8c:2d:ac:db:64:ec:21:d6:c7:c6:3d:
         97:84:47:a4:5a:b1:a0:eb:10:ef:49:a0:90:e6:f0:10:20:72:
         9d:12:b1:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----