Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
File:                     mJB4Bt2stIQwvdAlSJgBnkE6K94.mft (raw, json)
Hash identifier:          hM2/e+5ej2eBPHmZmGdAM3U13fOCcQHVTv2iV0QyuBE=
Subject key identifier:   13:89:BC:14:E3:6F:D1:12:F9:A7:60:A5:D7:C2:7D:0D:5C:88:DC:E3
Authority key identifier: 98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE
Certificate issuer:       /CN=98907806ddacb48430bdd0254898019e413a2bde
Certificate serial:       01962E61AF8F5AC71848BC6511A234D70945
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft
Manifest number:          0BD0
Signing time:             Sun 13 Apr 2025 09:01:15 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:15 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:15 +0000
Files and hashes:         1: acpHH_CaNcRdqw7JD1HuBSlb_jE.roa (hash: Wxjj/iVVVmCvZCfA0I7IDXleX19TKp07yCUTpeGLxQk=)
                          2: mJB4Bt2stIQwvdAlSJgBnkE6K94.crl (hash: 1fK+lWhCWX8Vp3eNQ1+MFCBO5hVIakqosgi73KWA7vA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:af:8f:5a:c7:18:48:bc:65:11:a2:34:d7:09:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98907806ddacb48430bdd0254898019e413a2bde
        Validity
            Not Before: Apr 13 09:01:15 2025 GMT
            Not After : Apr 14 09:01:15 2025 GMT
        Subject: CN=1389bc14e36fd112f9a760a5d7c27d0d5c88dce3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:a7:96:6a:51:0f:7e:e1:06:f2:6e:a0:7d:cf:
                    f6:0d:96:e4:b5:0a:c7:b6:6b:3d:3e:e8:70:4e:5e:
                    8d:30:4f:c5:cd:c4:b2:ef:fd:f8:23:e9:7a:4f:e6:
                    f9:28:8e:8c:69:36:76:a4:f3:17:77:8c:a7:a6:26:
                    44:c1:68:65:79:16:0e:20:9c:ec:a9:2b:62:ef:cc:
                    92:24:0b:9d:7e:ea:cc:3d:b2:33:85:90:e1:74:e9:
                    0d:c7:0c:04:95:5c:f2:a6:b9:df:06:c2:c9:19:58:
                    e1:0c:26:15:3a:cf:36:c0:39:05:b8:5f:56:d2:f0:
                    83:5d:be:8d:ef:3d:64:93:8a:c8:12:53:56:dc:36:
                    08:fc:47:1f:bf:3d:bc:b6:5b:6d:a9:6a:61:7d:19:
                    cb:44:e2:a7:8c:c0:f5:e2:5b:3b:b1:99:1a:f7:6c:
                    5c:d6:af:88:24:29:da:69:47:75:00:ff:61:8d:1f:
                    85:e5:09:8f:2b:55:ea:cd:3a:b2:0a:85:ec:b0:e7:
                    28:69:c0:fd:9a:09:16:54:e4:b1:20:9b:cf:2f:b8:
                    2c:ae:69:bf:0a:89:3a:39:d8:e0:f5:44:83:f2:78:
                    04:5c:f0:55:db:49:9d:13:86:52:e6:c0:26:ae:23:
                    4b:df:bb:23:d5:56:d2:28:c7:43:fe:b4:7c:70:35:
                    47:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:89:BC:14:E3:6F:D1:12:F9:A7:60:A5:D7:C2:7D:0D:5C:88:DC:E3
            X509v3 Authority Key Identifier:
                keyid:98:90:78:06:DD:AC:B4:84:30:BD:D0:25:48:98:01:9E:41:3A:2B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mJB4Bt2stIQwvdAlSJgBnkE6K94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3e3b17-84c9-4472-bd33-12674e661e13/1/mJB4Bt2stIQwvdAlSJgBnkE6K94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:9c:90:fa:cf:12:19:93:38:01:f3:70:f7:cc:bc:72:ec:96:
         43:01:61:12:fc:28:07:18:42:f0:69:af:d8:5b:ea:ae:8c:af:
         36:16:35:02:af:18:df:b3:20:ff:d6:e5:ad:13:13:5c:39:60:
         7b:6e:64:9f:66:ea:3a:ee:8c:4d:10:c5:34:5f:b1:96:ad:0a:
         a7:8c:6b:00:cd:a3:ee:dc:e6:1d:22:da:ec:37:6e:4c:67:22:
         dc:ba:8e:ca:e7:ce:f1:7e:8a:e6:2a:6e:f4:f3:3f:66:82:11:
         99:23:0a:cd:b7:74:94:24:d1:18:e0:61:c9:23:ea:37:92:db:
         fc:e8:c9:ee:87:17:ef:68:dd:24:22:a7:ac:49:5b:10:48:8b:
         d9:8a:30:0b:63:1f:d2:10:59:0e:05:c9:77:a4:16:28:31:33:
         ee:d4:ba:05:55:44:ab:51:d7:b7:f2:6f:17:32:ed:e7:1c:82:
         c8:46:2c:4e:2a:12:9a:95:87:be:40:6d:f2:06:53:7a:ea:cf:
         61:7d:aa:5a:03:28:de:83:10:b1:74:f5:4b:0a:e3:a4:ed:a6:
         3f:81:2d:b1:64:c9:ef:4b:b8:93:06:07:af:1c:56:50:5a:3d:
         cf:a8:60:a9:15:39:0e:df:39:c4:d1:3b:3e:bf:00:76:d9:d4:
         20:21:c2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----