Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
File:                     _J8k6-8Ri5Fl5S9hypk77kMGTsI.mft (raw, json)
Hash identifier:          MXnqE3E+j1tKhI2598ZOUbGTd9/EFYlCn2O3vM2+PIM=
Subject key identifier:   A8:4A:04:D7:26:1A:CE:CD:3F:B6:01:D5:71:3F:AE:46:93:4A:28:88
Authority key identifier: FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2
Certificate issuer:       /CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
Certificate serial:       01962F06B983997B8D4DF575D58A85406E5C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft
Manifest number:          147D
Signing time:             Sun 13 Apr 2025 12:01:31 +0000
Manifest this update:     Sun 13 Apr 2025 12:01:31 +0000
Manifest next update:     Mon 14 Apr 2025 12:01:31 +0000
Files and hashes:         1: 0Z7zdgD4hEOFjj_4hKMVcy7j-3w.roa (hash: derKa6RxFEVM7g9Xe9HEgRdoNKySPR/cieLuP8cX31E=)
                          2: _J8k6-8Ri5Fl5S9hypk77kMGTsI.crl (hash: hTq+9AtQV/7FB6rCd0ENBy47G6NoWOYlrb2gPIYMKYY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:06:b9:83:99:7b:8d:4d:f5:75:d5:8a:85:40:6e:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9f24ebef118b9165e52f61ca993bee43064ec2
        Validity
            Not Before: Apr 13 12:01:31 2025 GMT
            Not After : Apr 14 12:01:31 2025 GMT
        Subject: CN=a84a04d7261acecd3fb601d5713fae46934a2888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:99:f5:2d:ab:b8:ed:91:5f:f9:af:b9:df:02:
                    d7:a3:37:5a:dd:23:78:72:1b:2f:5a:70:5b:68:27:
                    d9:7b:6a:c4:77:7a:6d:52:28:c6:44:f9:12:8f:4f:
                    d0:a3:67:28:5a:ee:37:a7:77:f3:49:9b:25:41:b9:
                    88:9e:fe:de:eb:6c:b6:1f:c6:67:9f:c6:44:bd:56:
                    c3:c4:43:fa:7a:37:df:5c:e2:d9:5b:83:99:61:ac:
                    0a:95:48:83:20:a7:7a:5b:40:98:2e:64:0e:e1:de:
                    62:1a:3b:62:0a:c8:20:af:f9:93:a5:51:de:92:25:
                    ec:c6:45:ec:53:94:e7:95:a7:8a:02:ea:77:f6:cb:
                    98:00:80:96:d9:b6:5f:08:1c:0d:cc:a1:70:c4:2a:
                    0d:d7:7c:b2:08:b1:c2:fa:f0:7d:fa:2d:f2:52:4d:
                    c3:b5:68:d3:6d:fa:5c:93:6c:59:75:68:43:9e:0e:
                    78:fe:12:80:52:fd:03:82:5a:ab:18:bd:51:ec:95:
                    22:48:f0:3f:bb:b2:d9:37:64:72:46:10:eb:08:9c:
                    c2:c7:d1:cf:bf:9b:52:62:9f:60:54:16:78:ca:3b:
                    71:05:47:08:21:fa:1a:1f:77:a3:0f:6d:71:62:f1:
                    64:80:bd:a7:6b:0d:4f:47:8d:be:85:cd:64:ee:ab:
                    bd:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:4A:04:D7:26:1A:CE:CD:3F:B6:01:D5:71:3F:AE:46:93:4A:28:88
            X509v3 Authority Key Identifier:
                keyid:FC:9F:24:EB:EF:11:8B:91:65:E5:2F:61:CA:99:3B:EE:43:06:4E:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_J8k6-8Ri5Fl5S9hypk77kMGTsI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e6cb2b-df09-4007-8ad7-153bf7e7ec2a/1/_J8k6-8Ri5Fl5S9hypk77kMGTsI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:3f:88:bb:a9:52:d7:30:0e:90:ff:91:2e:05:50:7f:cf:a3:
         85:c4:96:d4:82:ed:30:db:e3:2d:05:e3:84:e2:7c:8c:a6:cb:
         08:ac:80:22:07:6d:a1:57:39:59:69:df:03:31:41:87:30:12:
         2f:39:c4:99:f1:fd:1f:75:0d:40:9c:fc:b0:ed:4f:b9:20:31:
         ce:db:40:e1:cb:1c:44:9a:a4:b4:80:24:cb:19:96:3f:f6:d5:
         0e:4e:7c:07:c2:57:31:10:fe:0f:a0:0c:6f:29:5d:2b:67:41:
         a1:b9:36:f2:d7:99:bf:6d:72:d5:1f:3e:0e:8d:b1:90:b1:9b:
         0b:23:de:2a:d6:44:30:09:77:70:b1:2c:9f:0d:e8:8e:04:a2:
         8b:14:c1:7f:80:22:b3:91:1b:c2:8c:d8:4f:47:b4:fe:51:11:
         b6:ec:e6:10:71:56:43:fd:eb:6c:4a:3c:21:b8:27:6c:ae:3b:
         66:3c:9e:41:09:3a:70:dd:d2:96:c6:f2:a7:af:53:68:51:12:
         4c:30:8e:97:88:22:ec:69:b4:d2:26:5a:df:cb:d5:64:06:cd:
         29:60:03:4d:41:da:d0:35:73:0d:bd:d0:8c:43:19:33:27:e3:
         2f:2a:df:ab:d0:53:f9:fc:9b:04:6e:05:c1:67:11:d0:ca:27:
         30:f8:32:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----