Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
File:                     jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft (raw, json)
Hash identifier:          gb9fQUrXAcakDPFLKZjYY+T2I1dps/+G/JwTgxEavHA=
Subject key identifier:   6D:88:02:95:50:0A:EC:27:63:AF:D6:B4:B0:61:D2:EF:BB:D1:93:26
Authority key identifier: 8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA
Certificate issuer:       /CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
Certificate serial:       01962F7427CB13D6469767A940F424141DD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft
Manifest number:          1045
Signing time:             Sun 13 Apr 2025 14:01:03 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:03 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:03 +0000
Files and hashes:         1: FveeOj9l7FxxmRsSwt1HgCwwQeA.roa (hash: M4dtF8jy0wzwUCk1jVRckWxwU5GEJHMwlYsYHLu5Fdo=)
                          2: jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl (hash: sDbRMHsAY16xJP9WMsXFR3JCdTDp9i9nNUETUdOIgyw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:27:cb:13:d6:46:97:67:a9:40:f4:24:14:1d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d68f7928c10fc2b54b5b589448fe77d404218ca
        Validity
            Not Before: Apr 13 14:01:03 2025 GMT
            Not After : Apr 14 14:01:03 2025 GMT
        Subject: CN=6d880295500aec2763afd6b4b061d2efbbd19326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:44:c5:5d:bd:b7:bc:8a:3e:21:cf:aa:71:f3:
                    a1:38:71:39:c6:a1:ad:d6:8b:f1:6a:7f:bf:17:7b:
                    2d:89:fa:5d:c8:ca:8e:05:bc:eb:fc:97:ac:fd:49:
                    80:f2:a8:73:ac:86:3a:56:b6:21:43:ee:90:f3:f5:
                    e5:d0:c1:e7:7c:51:33:b4:4a:25:f1:de:9f:70:c1:
                    c9:c1:b0:94:bb:d5:18:4c:6a:d3:76:cb:6b:25:f0:
                    da:45:57:0d:d6:80:45:41:92:b0:92:09:ef:96:43:
                    f5:13:22:d1:0f:40:68:77:cd:42:3e:bf:5c:e2:51:
                    ab:99:a0:31:aa:ac:04:ec:8f:22:17:f8:6d:b1:b0:
                    a5:19:de:9f:2f:b5:7e:be:64:f1:06:a4:af:79:d5:
                    47:70:5a:4a:3b:ea:88:a1:83:d9:8b:b2:6c:9c:99:
                    c2:ad:54:30:ae:d5:9b:a0:7b:c1:e9:83:9c:6e:be:
                    c0:85:1a:5f:72:fa:08:70:ea:3c:04:07:18:44:5d:
                    f4:2e:af:de:bb:85:cf:c8:a1:2c:7c:3c:fa:fc:31:
                    cd:34:07:e4:61:c5:f6:9d:1e:3a:f0:b1:31:04:40:
                    b0:97:91:b1:88:c0:99:c9:4a:b8:9a:a3:63:01:cc:
                    c1:d4:3e:ee:1b:73:12:15:15:8d:44:16:27:ff:2b:
                    ed:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:88:02:95:50:0A:EC:27:63:AF:D6:B4:B0:61:D2:EF:BB:D1:93:26
            X509v3 Authority Key Identifier:
                keyid:8D:68:F7:92:8C:10:FC:2B:54:B5:B5:89:44:8F:E7:7D:40:42:18:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWj3kowQ_CtUtbWJRI_nfUBCGMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aec861-8112-4d8a-b216-d01115089463/1/jWj3kowQ_CtUtbWJRI_nfUBCGMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:b6:58:ee:a9:ff:d5:6f:ed:c9:1d:4b:0d:d0:48:6a:d6:3a:
         4b:07:3e:06:bc:ad:8e:f8:4e:ef:96:94:6f:11:be:c7:68:5e:
         14:a6:6a:20:ab:d7:b8:94:1e:8e:8b:6e:aa:2b:d7:4f:4e:0d:
         8d:25:ae:f7:de:3b:ac:bf:8e:5e:18:46:dd:0c:67:b4:b0:ff:
         f1:ae:03:5a:08:39:4f:b1:3b:47:03:3f:61:e7:b3:37:f0:7c:
         0c:2c:4d:b8:dd:e1:8b:ba:68:e4:19:83:f3:0e:28:60:30:ba:
         33:54:bf:11:ac:f5:85:35:ca:ae:2b:36:6d:eb:da:59:a2:c2:
         b0:29:6d:ce:9b:a5:2e:da:51:6b:5a:08:2c:b9:a8:3a:84:8d:
         a1:a7:23:be:bb:d2:bd:d8:55:83:15:95:f0:c2:31:b4:2d:04:
         75:48:2a:80:af:c6:49:38:08:73:57:38:18:ac:3d:3c:3a:ab:
         08:99:f6:55:55:8c:4b:29:ce:fe:e2:09:50:a9:1d:32:24:3b:
         23:f5:38:7d:1d:62:0c:df:55:38:f8:3a:f6:57:0d:6e:b9:fa:
         b6:de:2d:85:7f:56:1a:13:16:d0:63:2f:47:a2:e0:31:68:1c:
         c1:ed:0f:6e:72:11:0a:5c:1d:7b:51:11:f0:af:c2:6c:2d:44:
         f3:9e:7b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----