Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
File:                     1-J31Ykj5d3-iLV2mwEtfszKks1A.mft (raw, json)
Hash identifier:          EKM4C51d3IfGXZSIik3G25X8PKnXJzUt37aHP2SQ5k8=
Subject key identifier:   E2:DA:C6:12:0F:78:72:E1:52:FA:E2:34:16:79:B9:84:D0:2D:9B:78
Authority key identifier: F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50
Certificate issuer:       /CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
Certificate serial:       01962F743DCCAD8D0958C34998E3CC1C03FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft
Manifest number:          14EB
Signing time:             Sun 13 Apr 2025 14:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:09 +0000
Files and hashes:         1: 1-J31Ykj5d3-iLV2mwEtfszKks1A.crl (hash: l56xrrY9qe3kU3ozpqjdexI9e/2Gftnv0ktLmn1al90=)
                          2: abknUv3T7rts3ssSLjO_9zGCj5A.roa (hash: ZduEHW/sDPXFbLZot8EAZU2ihlH8afniaTCGOengHk4=)
                          3: mP8GRv_PEh-gTNQakjVb0KSi0yk.roa (hash: lWbTaNbVD/rMCUMDyYuELByYeBZBnfrpjytIyODTMiQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:3d:cc:ad:8d:09:58:c3:49:98:e3:cc:1c:03:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f89df56248f9777fa22d5da6c04b5fb332a4b350
        Validity
            Not Before: Apr 13 14:01:09 2025 GMT
            Not After : Apr 14 14:01:09 2025 GMT
        Subject: CN=e2dac6120f7872e152fae2341679b984d02d9b78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:fd:61:72:cc:ed:b1:bc:fe:a8:a8:fd:8b:
                    2f:9a:f1:95:80:14:d9:93:8e:9c:bb:a7:44:c3:bf:
                    38:e5:c5:97:b2:f4:6d:84:49:d5:d0:92:85:cb:c9:
                    96:ca:a6:e3:cc:79:6d:1f:14:d1:a0:a7:fe:5e:a7:
                    a1:4d:47:fc:7f:f6:f0:1e:80:95:e2:94:a6:47:9f:
                    72:bc:cb:70:b7:0c:f2:15:38:67:fc:1d:0a:b0:7d:
                    bb:5b:a5:12:a8:ee:94:1e:38:ea:2f:1d:a4:0e:5f:
                    e6:95:fa:03:fd:8a:4c:cc:08:b5:5c:1e:37:47:c0:
                    b8:4e:10:1f:76:11:14:17:d4:9a:87:5f:f6:5b:5b:
                    9c:c3:3c:15:2c:94:e5:c8:e0:73:41:2e:88:6d:60:
                    07:1d:ea:f8:37:92:bd:1c:39:ba:6c:12:24:dc:4e:
                    aa:2e:a9:9e:33:6a:78:5d:f4:9b:f5:f2:46:1c:91:
                    2e:8d:2d:dd:7f:b1:42:e9:f7:b4:b9:74:ce:5a:99:
                    44:8f:6c:3a:6f:2a:ed:e2:ca:37:fd:13:61:8d:88:
                    38:bf:b4:c9:3e:56:97:fc:a6:22:5c:53:b9:d2:57:
                    ef:7f:7d:eb:f8:6f:4f:4c:f5:1e:0a:f6:40:c3:70:
                    cc:54:46:6e:d9:d0:fb:e1:35:dd:ee:44:55:6f:ed:
                    de:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:DA:C6:12:0F:78:72:E1:52:FA:E2:34:16:79:B9:84:D0:2D:9B:78
            X509v3 Authority Key Identifier:
                keyid:F8:9D:F5:62:48:F9:77:7F:A2:2D:5D:A6:C0:4B:5F:B3:32:A4:B3:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-J31Ykj5d3-iLV2mwEtfszKks1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d46d25-5d8f-4989-b557-c16baedf6fa6/1/1-J31Ykj5d3-iLV2mwEtfszKks1A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:e8:af:98:bb:e1:17:64:e7:fe:29:68:e7:5c:41:70:21:14:
         6f:4f:a9:c5:51:ec:93:5d:f6:dc:c9:95:b9:fd:21:09:f6:b3:
         4c:83:34:c1:1f:f4:9e:50:76:93:f7:42:55:90:51:33:e6:b7:
         39:ec:08:1d:80:a8:f5:fb:35:b3:76:29:a8:d6:62:e2:8b:5e:
         d9:0b:22:7f:91:d9:4c:34:89:29:dd:06:d5:48:1b:28:e0:f8:
         e3:81:3b:6d:1f:80:55:85:d2:b6:2e:df:b1:56:b5:2d:f2:66:
         e5:66:6b:bd:39:48:a1:b0:96:71:8f:ef:3a:53:39:d4:3b:24:
         e7:42:01:89:48:78:fd:21:4d:a3:3c:ce:4c:34:05:b0:c4:d8:
         64:d0:ea:a2:94:d1:77:ad:7f:9c:95:5b:5e:ac:78:85:c1:77:
         47:c9:28:59:e9:25:47:ad:b2:4d:0d:f1:55:51:49:64:12:7b:
         9f:47:bf:3c:a6:7a:24:d5:37:ff:ba:8a:3c:2e:e4:e1:76:8e:
         97:7e:81:7a:38:0e:2c:25:8f:94:53:7b:7a:32:8e:23:f7:bd:
         39:c4:0a:6a:ee:53:ed:b0:ab:be:bd:b2:68:02:b8:b6:83:d0:
         7b:de:9b:97:e6:5c:93:c9:6d:8a:f2:04:90:06:41:40:30:76:
         88:ba:0e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----