Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
File:                     x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft (raw, json)
Hash identifier:          mfV5DEkKmzWXYUXL8SC5hKA9+SK+smWa5gSnUS3qJWo=
Subject key identifier:   8E:53:41:E8:A9:A1:E0:C7:FC:26:87:85:38:7E:2E:B4:94:DC:83:2E
Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Certificate issuer:       /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Certificate serial:       01962E2B09510470497A8958A9F365B0ACA6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
Manifest number:          14EA
Signing time:             Sun 13 Apr 2025 08:01:34 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:34 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:34 +0000
Files and hashes:         1: G5zSLsnIB1Tf_3dQqRjF_q9OU44.roa (hash: 2jnkEsy8dLS8k5/gnwKVBaZUL+prmqB8W/32sROipKI=)
                          2: x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl (hash: cVMJn+ilexC8biK1th5wa0CQTceMvoA/UEtm5Ywb7VA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:09:51:04:70:49:7a:89:58:a9:f3:65:b0:ac:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
        Validity
            Not Before: Apr 13 08:01:34 2025 GMT
            Not After : Apr 14 08:01:34 2025 GMT
        Subject: CN=8e5341e8a9a1e0c7fc268785387e2eb494dc832e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2d:94:dd:10:a4:dc:7d:35:29:04:23:6b:aa:
                    03:0f:b9:30:0b:9d:23:58:4b:ca:c1:83:39:67:9d:
                    7e:00:eb:7b:c2:3b:2b:b3:4e:97:33:50:08:9d:3d:
                    e7:5c:61:93:79:ee:ff:49:84:8e:31:32:ca:19:45:
                    de:91:8e:2d:72:1c:bd:54:44:b6:a0:1d:a0:e8:00:
                    38:81:77:83:fd:df:ab:be:d9:e0:ff:b1:ba:ed:cd:
                    9d:ca:ef:aa:55:3c:77:3d:14:bb:28:ea:ba:4f:73:
                    a5:3b:b6:22:28:58:52:18:1e:8e:7a:9b:23:31:53:
                    c5:08:77:97:fb:88:60:7e:e9:39:5a:6c:eb:81:ba:
                    31:43:fd:17:1e:4c:05:c8:6f:bd:bc:80:91:9f:1c:
                    10:90:d0:7e:15:73:7e:ca:95:ed:69:a9:59:e2:2d:
                    eb:96:55:95:7a:5f:a6:96:5e:15:90:80:5e:12:04:
                    40:5e:78:58:9d:cd:9b:ac:67:e8:49:5e:6c:40:41:
                    9c:2f:36:ee:66:fc:d5:1e:7e:55:d7:d7:af:bf:1b:
                    cc:b4:cf:0b:89:ee:f2:a6:4e:71:16:f4:aa:a0:b1:
                    bf:00:da:cd:c0:89:fc:5d:1d:99:d7:7f:ef:1b:02:
                    88:84:39:d1:03:80:16:6d:37:d7:bf:5d:f0:d8:6b:
                    1f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:53:41:E8:A9:A1:E0:C7:FC:26:87:85:38:7E:2E:B4:94:DC:83:2E
            X509v3 Authority Key Identifier:
                keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:46:c0:ec:cc:fc:3c:c2:81:74:b0:88:b5:55:03:46:72:1f:
         3c:56:b4:74:56:42:da:eb:a1:c0:f3:c1:c3:fb:65:4d:db:b9:
         b2:a5:9c:01:ee:8c:90:e5:fe:ca:a6:35:0d:ae:94:9f:0a:76:
         ff:db:1b:96:32:6f:f6:a3:68:fa:17:61:ca:65:4e:82:3e:38:
         4d:e6:ac:6f:82:c3:27:2b:99:68:8e:5d:13:b7:e1:69:96:47:
         3d:3b:15:ef:4d:e8:d8:90:e5:9d:13:b4:ca:83:2d:29:0b:77:
         b3:ac:c8:71:39:68:65:a2:53:da:a1:49:c1:3f:ee:f3:79:25:
         4c:8c:d1:3d:90:57:4b:41:dc:26:cd:37:50:38:52:5b:68:fc:
         c0:6b:b3:e5:16:a6:2e:a1:17:62:c3:b0:20:f3:f4:05:97:89:
         1a:b4:a0:a8:03:c3:5f:61:d2:cd:f9:4b:b2:96:a5:8f:5a:2d:
         fb:a4:13:d7:3c:da:88:33:72:b4:df:6d:36:ff:69:55:89:6b:
         ca:3f:e3:69:e1:d0:4c:e6:c7:a8:5c:ff:e8:b0:a7:58:72:72:
         9e:3a:37:87:47:82:b7:c8:9a:b7:62:e9:ae:6b:d8:c8:1b:c4:
         09:d5:18:5c:20:b4:8b:43:d7:67:25:0c:cf:ac:59:67:a9:33:
         f7:ad:35:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----