Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
File:                     jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft (raw, json)
Hash identifier:          MlZy7aHw8b5SgaCFSEXFeytZ0LW/GYLRQmuYpb1oqTc=
Subject key identifier:   C1:66:08:41:4D:C3:6C:DB:EC:97:24:0B:E8:FD:97:C5:2A:FC:E9:C9
Authority key identifier: 8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03
Certificate issuer:       /CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
Certificate serial:       01962DF39D811136F90457EF40D4713B2735
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft
Manifest number:          14E8
Signing time:             Sun 13 Apr 2025 07:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:02 +0000
Files and hashes:         1: jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl (hash: +h5OfgwSEFYGRyxqhmFSXshQH7CeEGqJv5qFaAHggNA=)
                          2: sAUuTa0NxQDQaogfsBE0spI7wLY.roa (hash: LqhsGf+sCdkce6YV0v+cako7Xiw7Niu7YnjSoKkIukg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f3:9d:81:11:36:f9:04:57:ef:40:d4:71:3b:27:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cd9d61f83e0d7e8308a6cde4dd315dd75756c03
        Validity
            Not Before: Apr 13 07:01:02 2025 GMT
            Not After : Apr 14 07:01:02 2025 GMT
        Subject: CN=c16608414dc36cdbec97240be8fd97c52afce9c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0f:73:c8:b0:10:07:69:4c:25:3e:9d:cf:9f:
                    2b:37:0e:bb:6a:e2:60:0e:2b:86:fb:cb:6e:89:38:
                    20:ad:02:48:b0:8c:9c:f1:0c:c0:54:ac:48:5f:63:
                    b8:0b:1f:0d:62:6e:fc:02:b8:7a:35:b9:f5:a8:f7:
                    92:57:98:f6:09:c6:c9:b2:93:c5:8d:a7:2e:fe:3c:
                    68:cd:6f:e6:c5:59:97:50:70:ff:f3:7c:7b:68:25:
                    bd:be:5b:58:56:04:ab:c8:e5:3b:87:39:74:6b:83:
                    ee:fd:ab:cf:e7:f1:f1:c0:45:93:e4:9e:21:08:e0:
                    39:7e:69:91:4b:53:00:71:b0:d2:cf:66:02:86:68:
                    da:84:c4:c7:b9:4d:df:b1:41:83:36:e1:88:de:8f:
                    fb:97:b3:fe:15:8b:13:cf:b9:ab:f2:3a:fc:2b:4b:
                    5b:c3:3b:32:a6:e9:14:8d:3f:82:ea:2a:ef:78:86:
                    e8:0a:76:e4:e6:eb:f7:ce:74:4d:84:e5:4a:ad:a9:
                    19:5b:5d:d4:2f:99:41:ce:78:b7:67:06:e8:96:16:
                    48:64:8e:66:46:6b:8d:17:d8:a6:5e:bb:dc:79:16:
                    9e:f5:02:05:63:5f:7c:cc:e2:ac:e4:dd:2c:6f:c0:
                    55:37:6b:86:d8:76:0b:33:94:f0:e8:82:a4:6a:5b:
                    1d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:66:08:41:4D:C3:6C:DB:EC:97:24:0B:E8:FD:97:C5:2A:FC:E9:C9
            X509v3 Authority Key Identifier:
                keyid:8C:D9:D6:1F:83:E0:D7:E8:30:8A:6C:DE:4D:D3:15:DD:75:75:6C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNnWH4Pg1-gwimzeTdMV3XV1bAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/86c946-14cb-4935-88e3-d2d57843a27d/1/jNnWH4Pg1-gwimzeTdMV3XV1bAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:59:6e:50:64:0f:80:9b:6f:8e:d5:56:fd:ba:51:39:42:2b:
         87:b8:85:61:66:ea:52:e1:2f:4b:4d:1e:d6:86:74:ac:4d:1f:
         a9:e8:4e:ca:31:fa:e6:7a:25:3c:18:74:86:be:2f:00:24:b2:
         88:27:d4:0b:3e:5c:cb:11:96:bc:4c:8a:92:78:48:7f:ad:dc:
         73:5d:2e:a1:64:e8:be:8d:c4:2d:10:f6:bd:c9:5a:cc:dd:1d:
         67:4b:f7:18:3d:47:74:ce:ce:81:33:02:11:55:00:d1:5a:eb:
         5b:d5:95:50:1c:a9:aa:35:cf:20:62:10:cd:8e:13:ad:2e:89:
         7f:f5:b2:bf:6c:5c:d0:ca:e4:cc:a3:13:fc:8d:3a:0d:b4:7b:
         06:d5:ef:cf:08:da:eb:ad:73:e7:9b:52:01:b9:ab:52:2d:bc:
         a0:11:21:25:7f:ef:d8:22:7a:43:e8:44:d4:d8:db:d5:db:d0:
         ec:09:5e:3d:82:b1:62:8c:57:a0:5e:87:1c:22:27:cb:c9:91:
         e1:cb:fa:43:1d:75:2b:ad:92:5e:39:28:c8:18:f1:ef:46:62:
         eb:c0:05:d9:3a:d2:1e:a8:f0:24:ec:3c:06:12:73:2d:43:36:
         41:ac:13:16:02:a8:d5:b5:eb:24:d9:aa:8e:a6:0e:86:02:d8:
         93:c1:cf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----