Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
File:                     jJ3M-eLzfrEHSWp6rxOJTsR243U.mft (raw, json)
Hash identifier:          QRNMYF6IV1UflJOYXppiYRXRqIiT6+H026NcQuwoqBE=
Subject key identifier:   A1:4B:24:58:DD:48:D3:53:0E:98:F0:F9:40:31:B9:8A:12:A3:91:8C
Authority key identifier: 8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75
Certificate issuer:       /CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
Certificate serial:       01962F3D3353F9F1F5ABC892011E71683005
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft
Manifest number:          0B13
Signing time:             Sun 13 Apr 2025 13:01:02 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:02 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:02 +0000
Files and hashes:         1: 52ZQ5PtYcXOVHNH-cKfCvXr-NLk.roa (hash: IeCBQ+eKPNR/krpQbJSGOw+keX8AySOWQVyhW1zLVTg=)
                          2: jJ3M-eLzfrEHSWp6rxOJTsR243U.crl (hash: AkHGctfq3bApaqBwgkS4zIgXQC/RPkK7mCvCRaC4RGI=)
                          3: k6vAZPYoHdRCo63AYTmi48skRhw.roa (hash: SzdnDp8HU7dtL+1ssCq3abGfy6JSu5LenwIqWzaID2Q=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:33:53:f9:f1:f5:ab:c8:92:01:1e:71:68:30:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c9dccf9e2f37eb107496a7aaf13894ec476e375
        Validity
            Not Before: Apr 13 13:01:02 2025 GMT
            Not After : Apr 14 13:01:02 2025 GMT
        Subject: CN=a14b2458dd48d3530e98f0f94031b98a12a3918c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:06:de:3f:e7:64:b4:21:9a:34:f7:59:54:b1:
                    0d:98:d4:46:41:f4:9d:41:2e:e6:73:d2:c2:b9:e5:
                    79:bc:4b:4d:d3:6f:61:ed:db:fc:7e:8b:f5:40:01:
                    eb:4d:4f:e5:5e:49:ce:5c:f9:5d:b3:d2:a3:70:f1:
                    9e:80:e3:de:76:a9:44:56:02:f1:6d:f3:e6:54:22:
                    cc:15:92:bb:2c:87:e3:ca:c0:af:90:e2:ad:9c:e4:
                    95:02:36:d6:6d:fc:b4:db:66:44:f5:dd:ff:1c:ae:
                    a9:b8:fc:96:3f:0e:5b:21:a3:a9:0b:9a:d8:8c:de:
                    d0:62:6a:2d:e9:e0:4d:37:d6:27:a3:9a:3d:9c:09:
                    97:00:14:68:25:66:18:42:8f:58:5d:73:e7:90:56:
                    7e:bc:9b:03:1e:d4:ae:93:c7:a2:e1:7e:6e:a2:8e:
                    25:46:87:c8:90:f1:19:66:85:29:7b:2e:85:44:66:
                    8d:6e:10:cb:cf:ea:f7:e0:5a:d0:52:3b:f6:75:d9:
                    b2:98:75:12:85:08:6b:d2:ae:f6:3c:3f:c8:b1:2f:
                    1f:41:9a:00:70:97:97:bd:00:82:ee:ba:61:69:81:
                    91:7d:55:dc:3b:55:dd:fd:45:9f:45:95:50:67:bc:
                    5f:32:78:b1:e1:c8:83:a2:a7:6b:7d:b5:f6:17:b0:
                    94:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4B:24:58:DD:48:D3:53:0E:98:F0:F9:40:31:B9:8A:12:A3:91:8C
            X509v3 Authority Key Identifier:
                keyid:8C:9D:CC:F9:E2:F3:7E:B1:07:49:6A:7A:AF:13:89:4E:C4:76:E3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jJ3M-eLzfrEHSWp6rxOJTsR243U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/bd55ee-c7a6-41b8-bb31-6a8c3b676b57/1/jJ3M-eLzfrEHSWp6rxOJTsR243U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:a7:4c:33:56:56:9b:94:05:fe:b0:54:99:0f:84:e5:70:73:
         f1:d0:1e:18:fe:d7:9b:b5:e2:7f:fe:bf:0a:17:83:b2:89:4c:
         17:f7:c8:44:b5:e8:6f:ea:b9:40:c9:d9:66:aa:a5:d2:9f:92:
         34:a9:c0:fa:cb:ef:c2:61:d4:46:f5:55:b4:d0:1a:1d:30:77:
         16:0b:44:5a:e7:6f:dc:10:e2:e2:85:05:bc:97:2b:a7:ed:8f:
         80:8f:d6:fb:9c:7c:79:70:a1:4c:cc:e0:8a:94:60:20:5b:06:
         ad:d1:7d:e7:4b:a2:a8:20:84:1d:96:30:59:11:d7:62:b5:a7:
         57:f0:de:9e:fe:25:e3:47:6c:57:c9:8b:06:ac:37:01:33:9e:
         58:56:e7:48:0a:15:03:c9:5a:60:4f:b4:39:9d:7f:62:11:19:
         c0:10:e4:ee:5e:50:68:18:41:52:36:d4:45:c9:f0:af:c6:80:
         74:a7:7a:5f:78:a7:7b:05:22:30:78:55:0f:7d:84:11:12:65:
         ec:ce:39:e6:44:57:92:74:62:0e:f7:d7:9b:5a:3a:ec:8c:68:
         61:e9:5f:65:3a:62:0a:c9:81:4d:43:54:ec:bd:87:8a:9d:49:
         36:dc:30:95:c6:45:45:5c:d3:ee:d9:6e:bf:d0:0d:d4:a2:73:
         58:e6:b2:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----