Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
File:                     j1T8geUVM4bLQsFzMwUNqDGtqeU.mft (raw, json)
Hash identifier:          dSwHRtSUBd9rIFSBAB32Nu1QtXojROr8Vds1jnpUYzY=
Subject key identifier:   15:F2:4F:6F:35:96:DB:23:7F:F7:C4:4B:D3:C7:ED:EF:AB:8A:23:4F
Authority key identifier: 8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5
Certificate issuer:       /CN=8f54fc81e5153386cb42c17333050da831ada9e5
Certificate serial:       01962E2B19C495131CD1907D2C57396799AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft
Manifest number:          0961
Signing time:             Sun 13 Apr 2025 08:01:38 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:38 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:38 +0000
Files and hashes:         1: j1T8geUVM4bLQsFzMwUNqDGtqeU.crl (hash: JZu2viGPVEiJiwpFRgJZyMgdngS6007q70/O3AodsDc=)
                          2: v0kVKV7zgFySWfJ-lGmi8aljQUA.roa (hash: QFeJpmHiChV7sVzkjOtXP/zd/9P3djdIsqxjZcryjik=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:19:c4:95:13:1c:d1:90:7d:2c:57:39:67:99:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f54fc81e5153386cb42c17333050da831ada9e5
        Validity
            Not Before: Apr 13 08:01:38 2025 GMT
            Not After : Apr 14 08:01:38 2025 GMT
        Subject: CN=15f24f6f3596db237ff7c44bd3c7edefab8a234f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2c:4f:c0:9e:f3:43:3f:6d:23:cd:2a:5c:32:
                    65:b6:ba:aa:25:df:b3:32:a8:f0:d4:d5:d4:e2:f9:
                    f8:66:c5:ce:dd:65:5a:26:a6:b2:ad:54:ae:03:92:
                    56:20:b5:da:8d:f4:fc:88:67:db:99:e0:f5:2d:2b:
                    4a:5a:d4:e1:b7:a0:e7:90:b1:54:01:18:b7:28:ca:
                    ae:87:5d:f0:a8:fd:99:5d:f7:47:b4:2b:38:ae:38:
                    9f:e1:0b:81:a9:6a:b9:cd:55:8e:51:8a:0c:f1:9e:
                    a7:4a:1d:8f:ab:1d:41:33:66:b8:99:b7:fb:b1:42:
                    2d:9b:6a:b0:c2:24:ec:ed:15:f6:da:4a:c8:70:a6:
                    f7:f1:ae:4f:66:94:3f:31:fd:75:cc:e4:ac:4e:4c:
                    b4:87:79:c0:ad:ff:81:2b:5a:6f:b3:cf:88:c2:8d:
                    54:f1:8f:90:10:da:13:be:c5:10:06:8a:01:1b:41:
                    a7:19:1c:e7:ef:9e:6a:5c:65:89:fc:fa:56:ea:22:
                    63:30:3b:66:fc:4b:36:94:d4:94:43:e5:ea:70:dc:
                    5d:93:4d:ce:a1:bc:5a:c1:f8:ea:72:73:a5:d5:7e:
                    89:41:d4:e9:7e:93:09:46:71:1e:30:53:1a:5a:f5:
                    94:8f:8b:c9:14:0b:b5:72:6d:db:d4:fb:41:ca:05:
                    da:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:F2:4F:6F:35:96:DB:23:7F:F7:C4:4B:D3:C7:ED:EF:AB:8A:23:4F
            X509v3 Authority Key Identifier:
                keyid:8F:54:FC:81:E5:15:33:86:CB:42:C1:73:33:05:0D:A8:31:AD:A9:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j1T8geUVM4bLQsFzMwUNqDGtqeU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/542250-ba0b-4a10-8bdd-45794924cb53/1/j1T8geUVM4bLQsFzMwUNqDGtqeU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:6b:99:cc:29:2d:3f:3d:ee:98:4f:d3:39:a9:d8:f8:0a:ff:
         db:e9:ab:39:f3:7a:a1:ed:53:5a:4c:1b:10:e7:72:cf:a7:7b:
         f1:a1:b5:1e:45:f2:1b:85:14:d9:44:55:c1:42:89:e0:d8:6a:
         60:b5:13:31:de:4d:0e:f6:8b:cb:6b:21:18:ff:db:84:41:05:
         84:7b:fe:51:12:ec:a2:2f:e6:69:0d:9b:0a:26:5f:be:97:5d:
         ff:53:28:7e:47:88:68:0f:18:b4:b8:b6:ac:0e:7d:84:46:64:
         20:96:8e:70:c7:10:4e:05:e1:71:bd:8c:ea:30:34:be:60:21:
         7e:a9:74:df:fb:c3:05:06:3a:c6:0e:f1:9c:96:28:d9:61:a5:
         05:c9:2f:36:4b:5e:27:5f:30:d2:7b:9d:d3:29:03:b8:12:d0:
         1f:a6:30:a7:bf:7c:e7:78:73:09:60:84:4b:20:1a:4e:9c:dc:
         a0:bd:21:65:c9:15:7d:21:05:ce:db:22:19:5e:6c:e1:c9:3b:
         7a:d5:ca:a2:56:d5:bf:d5:23:29:34:cf:62:bf:cf:23:32:d6:
         93:5f:3c:ea:6e:c5:5a:de:da:15:9a:63:50:a1:84:41:54:f9:
         ff:ba:44:c1:b5:68:f7:90:da:b5:41:8e:9d:a9:48:15:d8:db:
         67:60:61:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----