Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
File:                     j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft (raw, json)
Hash identifier:          EBrm+R7oJQM+uVHlhYeF+kzY2RS3wn0FvJlqE4+kmKc=
Subject key identifier:   A3:BC:D5:AC:8B:6B:E9:D5:3F:BF:D4:EE:00:CF:3B:13:E5:B3:D5:38
Authority key identifier: 8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3
Certificate issuer:       /CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
Certificate serial:       01962F3DDAB3CE35C7448FD2898E4F9C4860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 13:01:44 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:44 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:44 +0000
Files and hashes:         1: SsNmEumrZoLnkUxPH11EPrhNmyk.roa (hash: 0HSYGP/bwpx8ANNjYNZbYCnBbaPMMqoPY47xOsCKXpw=)
                          2: j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl (hash: Wh90Djw6ijAxmZxuU7sNF9o03odhvJmHBCXKgevnbZk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:da:b3:ce:35:c7:44:8f:d2:89:8e:4f:9c:48:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f7b496ea7cf763d058308371e1bf67e53bc7ba3
        Validity
            Not Before: Apr 13 13:01:44 2025 GMT
            Not After : Apr 14 13:01:44 2025 GMT
        Subject: CN=a3bcd5ac8b6be9d53fbfd4ee00cf3b13e5b3d538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:72:bb:6a:29:09:68:e9:a9:68:46:f9:48:5a:
                    36:7e:bf:5d:2a:ca:14:2d:e3:a0:bf:da:5f:6d:87:
                    20:b7:79:45:00:8f:79:82:3c:73:f2:10:7a:f2:22:
                    2c:03:6d:b0:07:09:93:10:a6:b2:1a:46:20:a2:09:
                    79:b6:13:25:f5:e2:c1:1a:fa:ca:ff:27:a8:e0:65:
                    81:4d:6e:62:e4:c5:41:d6:e5:68:79:fc:51:a7:5f:
                    39:69:20:d1:32:e5:9a:1d:b7:80:37:71:66:2b:fb:
                    6e:24:38:72:c1:5b:3d:c7:6a:11:20:da:d6:51:db:
                    c3:82:1b:19:ae:05:c3:88:fb:ee:d4:9d:73:fa:1b:
                    30:0c:5d:dc:60:ca:11:11:3d:15:76:cf:a7:06:2a:
                    91:a6:7b:e4:4c:21:60:25:23:7e:40:06:af:43:60:
                    ad:18:4a:a1:b2:97:c8:69:5c:36:6e:4c:48:fd:62:
                    7f:61:64:d2:1c:4a:01:e8:83:b1:80:ff:19:76:1e:
                    8f:df:bf:69:45:79:f0:62:60:5d:75:9e:15:b6:a4:
                    82:c6:03:ae:d1:57:c8:7f:ed:02:c6:68:fd:b3:cc:
                    a6:e7:e9:aa:f3:ad:e1:b5:23:05:86:63:dc:e5:8e:
                    49:6a:92:a8:64:cd:b7:7b:50:5f:9d:64:db:5e:2b:
                    d6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:BC:D5:AC:8B:6B:E9:D5:3F:BF:D4:EE:00:CF:3B:13:E5:B3:D5:38
            X509v3 Authority Key Identifier:
                keyid:8F:7B:49:6E:A7:CF:76:3D:05:83:08:37:1E:1B:F6:7E:53:BC:7B:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9efd94-0516-4e66-98d5-251b019d51a8/1/j3tJbqfPdj0Fgwg3Hhv2flO8e6M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:31:18:c2:77:0f:df:7c:38:0e:18:b4:b2:9c:8e:e0:a5:b7:
         08:a3:b4:09:34:41:b1:0c:99:b8:6e:af:63:70:ba:bb:9c:30:
         0d:27:27:4a:21:3e:bf:6a:a1:e4:0f:1a:42:3d:38:77:d8:84:
         ef:26:31:c3:7f:47:00:5e:bc:53:a7:c8:90:9d:d8:56:cd:61:
         58:3b:4c:55:80:ce:da:75:94:06:89:9a:54:79:53:50:f7:43:
         7d:fb:8e:56:2e:88:cb:a5:68:12:86:18:f9:1b:5a:b1:7b:3a:
         dd:d3:53:32:4b:3e:10:9d:57:3f:d6:93:bf:bc:e4:37:5b:ed:
         31:ee:ae:e7:fd:fa:9b:21:24:2c:6e:70:33:91:de:27:e7:09:
         08:18:b0:8f:92:bd:29:70:aa:98:10:a9:11:1d:24:e8:90:88:
         a9:c2:c0:f2:00:11:20:01:b3:88:6a:6c:90:ae:56:08:38:c2:
         25:23:16:74:1c:17:4f:db:49:08:c5:99:69:c7:77:b1:9a:49:
         7a:95:fd:3d:f2:f9:50:76:6c:66:5e:83:0b:23:d5:af:d6:78:
         4a:a4:55:bd:0e:9b:f7:bf:ca:eb:7e:98:49:73:c1:93:09:c4:
         fa:ec:b4:27:f5:17:90:28:b5:75:57:24:09:97:aa:fd:90:7c:
         94:4b:d0:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----