Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
File:                     jU6XfBzSpNfsKQoB-b7DfejcnOI.mft (raw, json)
Hash identifier:          HJL1LMR3R9ecZLD7Zb2GddOpB+5ZsMpGxv9EJg1KCek=
Subject key identifier:   66:9F:61:F5:75:0B:85:6E:29:19:AF:7C:9E:1E:CF:23:D6:F3:14:DA
Authority key identifier: 8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
Certificate issuer:       /CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Certificate serial:       01962F3D81519A070265739579699AA47277
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
Manifest number:          147A
Signing time:             Sun 13 Apr 2025 13:01:21 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:21 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:21 +0000
Files and hashes:         1: jU6XfBzSpNfsKQoB-b7DfejcnOI.crl (hash: 02dF1aU5fjulPKD5/ak02kQR6dlwaKI8uO7sZX51A9M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:81:51:9a:07:02:65:73:95:79:69:9a:a4:72:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
        Validity
            Not Before: Apr 13 13:01:21 2025 GMT
            Not After : Apr 14 13:01:21 2025 GMT
        Subject: CN=669f61f5750b856e2919af7c9e1ecf23d6f314da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:71:65:45:70:b8:ba:e3:c4:1c:62:f1:c3:e0:
                    16:56:6d:1b:6c:ed:fd:d4:db:09:ff:56:a4:a9:3d:
                    1a:cd:a2:b3:f0:e4:83:67:c6:b7:cd:de:85:75:40:
                    7c:a7:32:81:d5:21:b8:d4:7a:c7:88:87:87:27:c3:
                    17:ac:cd:b7:13:d3:ff:67:14:fd:86:77:45:71:c3:
                    a8:c9:a2:5d:4a:b2:2f:04:fa:f9:3f:62:03:d7:3c:
                    92:96:a4:c3:23:6f:d9:c3:62:12:76:e9:59:a5:33:
                    bb:69:89:13:6d:6b:c7:a5:31:7b:c8:f8:7f:7d:7c:
                    c9:c4:35:f9:6a:40:69:6d:15:fd:00:14:8d:eb:87:
                    68:9b:7e:54:f3:d1:0a:5f:2d:ed:58:9d:1a:24:69:
                    18:3b:d9:6d:8d:4a:f3:bb:81:68:9b:62:05:07:00:
                    de:70:98:70:71:43:1a:ed:58:75:7b:22:67:4c:1b:
                    a1:56:a9:61:dd:39:9d:c2:60:b7:ae:21:a2:2d:03:
                    67:d8:27:1f:fa:26:25:44:97:b8:3c:f3:93:20:8d:
                    70:2f:d9:99:4e:99:1e:d0:ac:ea:26:26:d4:55:b4:
                    19:ef:69:9b:34:9a:e3:00:d3:6e:3b:0f:0b:04:91:
                    40:61:12:eb:94:3d:c0:18:53:64:4a:7e:25:01:e9:
                    62:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:9F:61:F5:75:0B:85:6E:29:19:AF:7C:9E:1E:CF:23:D6:F3:14:DA
            X509v3 Authority Key Identifier:
                keyid:8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:6f:66:82:60:21:d3:76:49:b9:4b:30:3c:64:3e:9a:a3:74:
         c0:e4:e8:19:19:3c:94:6d:d9:db:a1:2e:45:07:eb:ce:b8:c2:
         c1:ff:be:20:99:9e:00:8c:ca:74:2f:9e:d7:93:7c:6c:1d:7d:
         6d:cb:94:3b:1f:90:1f:e1:e1:91:8b:68:af:c5:d0:d3:77:24:
         ca:9c:c0:d0:34:63:ff:cd:6b:31:ca:50:e2:44:8e:0d:e2:e9:
         47:8f:d6:95:bc:6a:fe:67:14:98:aa:75:da:bd:31:90:c3:12:
         9b:2d:b4:50:8d:2f:77:27:dd:99:a1:4b:37:63:18:1b:5c:12:
         b5:45:9c:be:d3:c0:1b:33:10:71:72:71:91:0d:96:39:60:af:
         52:94:89:46:b0:35:0a:21:a8:2e:15:76:ce:01:52:1a:f0:8e:
         3f:57:79:69:6c:a3:22:81:a1:9f:42:63:e6:21:64:0c:c5:92:
         8c:04:5c:b7:f4:40:5e:93:4d:7e:73:be:ac:cb:4e:6a:df:f9:
         36:c4:e7:d2:21:8c:01:2f:70:05:75:80:6a:3d:bf:95:37:93:
         8f:85:ac:d2:1f:71:f6:20:92:e4:ec:1f:82:c0:84:e2:44:63:
         2b:3e:98:47:74:8b:3c:39:6c:df:61:2f:0e:7c:22:28:f6:1d:
         fc:63:7e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----