Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
File:                     j-YTvuu37zaZLASRrROyZwcFcmA.mft (raw, json)
Hash identifier:          Rt9AFYxqEPmkaw27vb8hgnl+49tL2maCvbxvnTQZqes=
Subject key identifier:   4D:74:4B:0C:0D:E3:C5:C6:8C:E5:E7:FF:C5:62:EE:1D:22:79:D5:12
Authority key identifier: 8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
Certificate issuer:       /CN=8fe613beebb7ef36992c0491ad13b26707057260
Certificate serial:       01962E2B0C874F21FF6BDCCD17D97158A5B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
Manifest number:          0A7A
Signing time:             Sun 13 Apr 2025 08:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:35 +0000
Files and hashes:         1: M8YwlBl4UsZFSGK22ajYHB1I9kk.roa (hash: NMhetTmMl7auiquiJXvinAOe9UpVWlWTrYgSxnLH8n8=)
                          2: j-YTvuu37zaZLASRrROyZwcFcmA.crl (hash: QY6uQF88qShyJzIAB83ig9xna23Ef9PQYioF/WtE8Dg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:0c:87:4f:21:ff:6b:dc:cd:17:d9:71:58:a5:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fe613beebb7ef36992c0491ad13b26707057260
        Validity
            Not Before: Apr 13 08:01:35 2025 GMT
            Not After : Apr 14 08:01:35 2025 GMT
        Subject: CN=4d744b0c0de3c5c68ce5e7ffc562ee1d2279d512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:49:91:e2:73:82:00:5c:19:91:8e:67:87:a1:
                    1d:33:78:9c:4a:65:79:7e:b3:3a:6a:ed:0a:f2:71:
                    40:02:23:2d:b8:96:59:9f:4f:e7:53:9c:67:79:40:
                    0e:37:be:9e:e2:aa:a6:f4:e7:7c:79:16:ca:2a:06:
                    05:bd:6e:8c:9e:3c:e0:96:84:e3:51:84:d8:15:99:
                    4c:ea:85:17:46:bb:93:b5:67:eb:2d:56:37:b5:88:
                    60:00:bd:c2:57:fa:fa:bb:38:d4:97:6e:e8:8e:fa:
                    66:d3:e7:02:3c:fa:4c:da:45:67:f0:7e:ec:8e:63:
                    b9:58:a4:f9:63:bc:59:74:11:ce:27:04:d0:28:fd:
                    8b:41:3f:64:10:ad:41:49:c2:d0:3e:1c:7c:06:d2:
                    f6:1e:d8:ca:3d:da:f2:68:96:92:7e:65:9b:63:b7:
                    f9:a2:7a:30:fe:f7:85:51:dc:c6:d2:ec:f3:80:3a:
                    de:24:b5:41:dd:17:7b:94:57:c9:f7:b6:42:e2:84:
                    42:ab:6e:44:cd:94:a7:f1:38:2b:71:3c:e4:fc:c2:
                    3b:47:2d:d5:ea:0a:01:64:ae:0c:11:62:b5:fd:d5:
                    bc:ca:0c:dc:68:4a:98:71:bd:17:ce:79:5c:7b:d0:
                    87:f9:41:14:08:ca:6a:fe:e4:be:ad:16:05:53:15:
                    5f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:74:4B:0C:0D:E3:C5:C6:8C:E5:E7:FF:C5:62:EE:1D:22:79:D5:12
            X509v3 Authority Key Identifier:
                keyid:8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:82:8d:f9:de:b9:98:63:59:41:51:4a:e2:31:96:b6:6b:cf:
         b5:7d:37:1f:5c:61:56:5d:b8:f7:7a:64:25:54:f0:99:52:7d:
         81:49:4f:f0:ad:00:07:c0:a9:de:a5:f1:b9:03:d7:57:28:5b:
         e4:5d:3a:ac:cb:17:e6:8d:64:6c:92:d1:9a:38:a7:ff:9f:0a:
         dd:e7:7d:26:1c:a7:ea:39:95:be:53:c4:a5:74:96:a8:cc:90:
         6f:a4:91:90:1b:fe:36:6f:66:1f:83:5a:b4:5f:d9:e5:95:8b:
         70:84:f0:74:97:a0:51:f0:b5:1c:b9:b0:db:d6:91:d3:d6:2a:
         a0:ec:8c:86:36:3b:63:5b:55:ff:33:1a:a4:ba:cf:8a:e5:59:
         bb:87:5f:95:ef:02:8c:5e:7d:48:00:37:14:fc:05:94:d7:0f:
         03:01:7b:7b:0f:dd:f9:47:61:db:74:44:f0:04:60:db:ea:20:
         62:5e:78:aa:64:96:f9:eb:df:65:19:e4:4a:0c:6e:ea:5d:cd:
         c7:93:e5:1b:d9:f0:af:5f:d9:53:82:9e:8b:c5:c9:30:82:1a:
         49:41:5a:21:13:8e:3e:48:86:64:8e:13:5e:08:7c:13:1c:c5:
         e5:33:2d:57:c4:49:f3:16:32:1c:71:2e:c4:d9:c7:ef:86:d3:
         75:09:42:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----