Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
File:                     jG6tuGWbxzTcyyn2OEIQNruSLjY.mft (raw, json)
Hash identifier:          0hnPm2/PjZn2/JyOD6q0HiXE9K7h2c/24+eNfgWNiSU=
Subject key identifier:   1C:B4:58:13:61:C9:56:DB:3E:80:6D:A9:60:81:8F:C4:78:3A:60:81
Authority key identifier: 8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36
Certificate issuer:       /CN=8c6eadb8659bc734dccb29f638421036bb922e36
Certificate serial:       01962ECFB1C1091E31DB304E6AD95A2A3D46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft
Manifest number:          13AF
Signing time:             Sun 13 Apr 2025 11:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:25 +0000
Files and hashes:         1: KvT2aD-Nq99_oM197F2X-Rw9L6I.roa (hash: z15bd9Fqf6jzglQODAptaKPS3RXs1Yi0RA0HfH1lDmU=)
                          2: NarRGiguJ47YJ26p29Ce-F1nGL8.roa (hash: c5Octm28rGn9ztGD+Y+RSPjVs16OTUfeUQ0o7SxOT5c=)
                          3: jG6tuGWbxzTcyyn2OEIQNruSLjY.crl (hash: fAL1aPitGJTXaodS8kAALLbJag/Sa3BYY8s7UnR4UbA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:b1:c1:09:1e:31:db:30:4e:6a:d9:5a:2a:3d:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c6eadb8659bc734dccb29f638421036bb922e36
        Validity
            Not Before: Apr 13 11:01:25 2025 GMT
            Not After : Apr 14 11:01:25 2025 GMT
        Subject: CN=1cb4581361c956db3e806da960818fc4783a6081
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:4c:48:72:88:45:24:af:b1:78:13:e7:7c:
                    b8:40:81:5f:0c:28:cb:14:93:64:17:ad:46:1e:a2:
                    06:00:c1:9b:8d:e5:08:ee:37:48:a6:03:a7:ec:76:
                    1e:bd:cc:0f:ff:6c:30:16:ca:49:d0:77:0d:1c:fc:
                    44:f7:b0:9b:9b:17:fe:c9:48:0a:c3:d0:50:b9:9d:
                    4d:16:3e:24:90:03:c8:9f:92:8e:38:0f:dc:81:ea:
                    18:bf:81:79:db:5f:2c:8e:bd:38:af:3a:ec:17:39:
                    3f:bb:81:08:1b:f3:f9:f4:c3:8c:d1:9b:74:09:a1:
                    01:61:a7:83:1e:28:4f:a4:07:35:8b:69:78:f9:33:
                    83:f0:33:b6:cf:08:c0:15:76:96:a8:d2:f8:e9:06:
                    70:86:e7:1e:3f:1e:1f:d0:5c:8b:44:87:3d:05:8d:
                    65:6e:c6:6f:14:ce:3a:5d:03:68:a0:2a:0d:76:bd:
                    5f:06:be:6b:50:fc:07:5e:ad:cf:38:bc:fd:d8:1b:
                    60:e5:cb:b3:b0:36:97:3c:18:1e:40:d4:cf:af:0e:
                    39:65:38:47:5d:37:57:0a:88:d6:10:33:5c:2f:b4:
                    81:c1:07:12:47:b1:fb:73:21:b8:ea:3b:21:07:32:
                    fc:f2:39:99:20:a6:15:41:3d:53:1e:06:2a:80:e4:
                    94:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B4:58:13:61:C9:56:DB:3E:80:6D:A9:60:81:8F:C4:78:3A:60:81
            X509v3 Authority Key Identifier:
                keyid:8C:6E:AD:B8:65:9B:C7:34:DC:CB:29:F6:38:42:10:36:BB:92:2E:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jG6tuGWbxzTcyyn2OEIQNruSLjY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/bfdba0-2c60-4027-af0d-6645dd3d624b/1/jG6tuGWbxzTcyyn2OEIQNruSLjY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:e6:9e:5f:1c:f4:bd:dc:5f:82:a7:7d:ab:19:54:0c:4b:27:
         ad:d4:dd:7c:b9:fd:cb:6f:36:d8:3c:9a:ae:e1:45:b3:53:9f:
         06:b3:f6:d1:a4:f6:2f:73:ab:e1:b5:cb:e6:b8:ab:c3:6c:c6:
         96:75:ac:0b:ae:ff:ea:7f:4e:fd:29:23:ed:58:9d:10:99:f3:
         a0:db:32:a7:62:f7:01:57:4d:35:98:e8:4c:7f:6d:ac:1b:d2:
         02:67:b9:90:bb:b6:ac:2a:ca:8a:90:62:39:86:5d:e4:99:32:
         6d:18:23:65:57:f8:e6:d7:f7:11:4b:86:30:d6:0e:ee:fb:a9:
         b3:16:38:3f:f7:a0:cf:06:8d:a1:34:54:f9:35:08:fe:11:21:
         30:b4:e7:2b:81:57:55:95:2e:12:6d:71:98:79:83:51:63:59:
         ea:25:ea:65:b3:dd:5c:15:87:71:19:1a:14:14:29:47:05:02:
         25:76:57:13:d0:bd:1a:2d:2a:4f:26:79:5a:0b:8b:41:2f:fb:
         81:23:f7:18:bc:ca:46:64:ba:3d:bc:a2:2b:78:d0:fd:af:ab:
         1b:73:b9:3f:76:98:fb:dc:a6:a6:1c:bc:a8:51:18:05:c8:fb:
         4c:45:46:1c:c1:f7:d7:ea:65:fc:be:6a:0e:fd:f7:d5:f9:bb:
         8d:8a:01:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----