Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
File:                     j9-HylMGV5hEdkUlX4KbU7wdohU.mft (raw, json)
Hash identifier:          4fdJntZmV/TFEuyegRBfOn1Y5TKSyAcdwx2IFOviCWc=
Subject key identifier:   15:29:79:56:CD:9D:93:49:E8:7C:32:F9:07:6F:2E:F1:EC:48:C6:59
Authority key identifier: 8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15
Certificate issuer:       /CN=8fdf87ca53065798447645255f829b53bc1da215
Certificate serial:       01962E98A9A9372EFE55EFBE808770F1ED59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft
Manifest number:          0434
Signing time:             Sun 13 Apr 2025 10:01:18 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:18 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:18 +0000
Files and hashes:         1: 13OA8Kowa9u-F_7ZWwXTDMJLU0A.roa (hash: TLY9MKIWsbVqHZrgOnopJQQ8yZUjxig3a2ZRbtkH/Xw=)
                          2: j9-HylMGV5hEdkUlX4KbU7wdohU.crl (hash: yb5Wvo5oUGLyeK5nKkct9cXMEcTV6C2/zREvwHTgb3s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:98:a9:a9:37:2e:fe:55:ef:be:80:87:70:f1:ed:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fdf87ca53065798447645255f829b53bc1da215
        Validity
            Not Before: Apr 13 10:01:18 2025 GMT
            Not After : Apr 14 10:01:18 2025 GMT
        Subject: CN=15297956cd9d9349e87c32f9076f2ef1ec48c659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c1:99:20:8f:c8:a2:a0:9f:77:6d:86:6c:0b:
                    64:50:65:29:64:03:73:39:98:ee:ac:52:36:87:96:
                    02:68:8e:e6:de:c5:fe:2e:03:08:a1:9b:b1:6b:a6:
                    f5:7d:ab:83:fe:fd:1a:3e:9c:1f:da:e7:87:9d:07:
                    6e:07:a0:ef:f1:78:d5:ab:90:b1:0e:31:d1:72:b9:
                    c5:72:2e:71:21:83:2d:b7:2f:09:2d:cf:5f:5a:91:
                    e0:cb:11:62:51:d7:8a:70:5c:2a:73:3a:da:cf:f8:
                    9a:5f:0d:7b:d0:7b:9c:63:37:ca:d8:a6:c7:63:b3:
                    cc:3a:eb:72:60:ff:b0:60:21:d6:12:10:84:cd:e7:
                    c0:6d:b2:7a:7f:2c:3b:ff:ac:41:4b:a8:cb:4a:96:
                    57:92:a7:67:89:7b:6c:18:44:76:15:43:26:7a:98:
                    f3:4b:a8:62:f2:85:d5:98:85:2c:76:ef:cb:67:81:
                    c4:97:d1:41:49:7e:88:27:1e:5b:ed:2a:50:fd:9c:
                    81:03:38:52:fe:78:94:f4:92:bf:01:63:c9:b2:e5:
                    0b:4d:45:c7:05:2e:e1:19:ce:a3:14:5e:2c:03:74:
                    44:8e:f3:28:4d:34:59:95:de:77:54:9e:69:28:f8:
                    59:1b:42:60:9b:30:3d:b6:f4:ad:63:d2:4d:98:a3:
                    c4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:29:79:56:CD:9D:93:49:E8:7C:32:F9:07:6F:2E:F1:EC:48:C6:59
            X509v3 Authority Key Identifier:
                keyid:8F:DF:87:CA:53:06:57:98:44:76:45:25:5F:82:9B:53:BC:1D:A2:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j9-HylMGV5hEdkUlX4KbU7wdohU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/634890-8b48-49ae-b042-999cce4d4ad2/1/j9-HylMGV5hEdkUlX4KbU7wdohU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:f5:1d:37:6f:53:76:a3:59:85:4f:83:ef:82:5a:5e:1b:b4:
         40:54:0f:fa:f1:59:9e:08:8c:b9:47:b0:7a:43:5b:72:fe:cc:
         21:b4:3e:00:5a:b7:1d:b9:53:c5:33:5d:17:ee:c9:36:d2:12:
         90:f8:85:35:92:d7:8b:1e:f7:f6:ad:2b:fc:ac:0a:1f:15:4b:
         94:00:2a:a9:40:bb:ae:74:f5:16:5c:1f:49:7b:5c:8b:14:13:
         04:91:0d:ac:aa:52:a3:5f:8b:3a:fd:29:c8:2e:6d:51:2c:8c:
         43:b1:9c:cd:fc:c0:b4:f6:6e:3f:78:b4:25:c9:db:63:da:3d:
         7f:05:58:5b:6c:9a:53:17:79:dc:2f:ce:ce:c5:f3:1f:92:c3:
         4b:01:ef:1d:e5:8c:74:45:c9:19:51:55:b9:24:49:a5:6e:3e:
         14:85:93:8d:28:3a:6f:2c:a2:3f:c7:7a:2e:45:98:a7:b7:bf:
         34:64:d5:c3:ec:36:59:4a:6a:1f:de:04:b0:99:69:aa:79:c7:
         4a:ea:e5:68:81:c8:ab:29:3c:8c:33:b0:e6:37:11:3f:82:87:
         be:9c:63:2f:ba:e6:ef:f1:40:ce:09:3e:69:09:f9:2d:05:e0:
         5e:42:da:09:89:4b:f3:5c:97:c8:0c:bc:4f:18:75:55:e4:ed:
         a6:ee:b5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----