Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
File:                     fJ1n8CerKw_yajV1FHOa_ogDesk.mft (raw, json)
Hash identifier:          3S47G1QReLWwGIUsHnivmkJ5IDRMrorJDUmglKjhAnY=
Subject key identifier:   42:B7:A2:7A:08:75:DF:9E:DD:9B:EC:03:AF:09:E9:4E:27:0F:31:3B
Authority key identifier: 7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9
Certificate issuer:       /CN=7c9d67f027ab2b0ff26a357514739afe88037ac9
Certificate serial:       01962F74C467DADD659B779A5E2CE27F4084
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft
Manifest number:          1401
Signing time:             Sun 13 Apr 2025 14:01:43 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:43 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:43 +0000
Files and hashes:         1: fJ1n8CerKw_yajV1FHOa_ogDesk.crl (hash: UOo9w/BydNKojurZ6i3pp53RomYBciBG+e1+AfnkU/s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:c4:67:da:dd:65:9b:77:9a:5e:2c:e2:7f:40:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c9d67f027ab2b0ff26a357514739afe88037ac9
        Validity
            Not Before: Apr 13 14:01:43 2025 GMT
            Not After : Apr 14 14:01:43 2025 GMT
        Subject: CN=42b7a27a0875df9edd9bec03af09e94e270f313b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d8:62:38:e7:c1:96:8e:5a:3b:06:df:f1:37:
                    80:95:56:40:37:c0:63:a5:fe:94:70:ee:fe:94:21:
                    8e:70:e6:66:12:8d:7f:b9:62:13:3b:9d:04:6a:62:
                    8b:f2:db:91:e4:14:63:1f:86:a2:c4:11:09:24:fc:
                    d6:c6:4a:99:1d:bb:e3:2a:a2:83:12:6a:e2:54:61:
                    75:e0:3a:71:08:21:ec:47:42:6c:6d:ba:6f:8b:ed:
                    dc:34:6b:22:20:ec:c8:ff:a2:42:62:57:84:4e:23:
                    85:07:c4:82:2b:1c:68:77:2a:93:89:69:55:68:a3:
                    d5:59:0a:7d:1a:7f:44:ef:10:cd:3e:62:07:57:51:
                    b6:71:24:53:9c:19:d8:aa:11:43:89:1d:a9:5e:e9:
                    28:cb:d0:24:57:1a:a7:6a:68:f1:02:14:dd:59:33:
                    34:d9:ba:39:d0:ce:d7:ff:19:a2:91:73:3a:f5:3d:
                    39:17:2f:45:8f:04:08:b8:b4:e5:32:d7:db:5d:dc:
                    03:5f:17:db:f6:2b:63:ff:4e:c6:ed:1f:66:b7:d9:
                    3a:4f:3e:e8:ea:06:94:ce:c8:9f:b1:49:97:17:9c:
                    1e:54:64:9b:cf:70:4c:f8:90:72:65:25:f7:a2:48:
                    f9:74:e9:88:50:63:b9:6b:13:de:be:93:3d:aa:12:
                    58:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B7:A2:7A:08:75:DF:9E:DD:9B:EC:03:AF:09:E9:4E:27:0F:31:3B
            X509v3 Authority Key Identifier:
                keyid:7C:9D:67:F0:27:AB:2B:0F:F2:6A:35:75:14:73:9A:FE:88:03:7A:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJ1n8CerKw_yajV1FHOa_ogDesk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/698fe8-5f69-4d37-bd58-65eb1ba6e337/1/fJ1n8CerKw_yajV1FHOa_ogDesk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:fa:26:ed:19:eb:48:a1:18:f8:10:4b:2d:b3:9b:2b:d3:05:
         47:c9:55:27:31:8c:72:50:b0:d7:7c:15:21:f0:28:a9:cb:c5:
         a2:2b:53:4b:7a:41:1b:e8:bb:fd:0d:0d:88:09:f0:01:cf:e9:
         d1:7a:ae:b5:30:71:8c:fb:2c:db:96:55:b4:37:0f:d6:59:41:
         14:60:59:c4:28:71:c6:52:68:56:49:04:c5:93:11:a8:f1:c4:
         51:7e:a8:59:09:6e:54:c8:a1:35:f5:97:0f:59:b4:9e:17:2d:
         c5:eb:65:97:4e:5c:b3:af:31:78:36:76:29:71:b6:15:80:ff:
         7f:6e:fe:7a:2a:d5:77:60:22:eb:46:44:ab:44:8e:13:42:36:
         ce:62:14:4c:d8:00:56:c8:e5:00:16:bf:3c:ab:86:e8:57:3c:
         03:24:16:8e:f0:d1:c0:b8:42:db:31:20:e9:77:45:8e:b4:f8:
         3b:c1:fb:f5:cf:72:d8:73:6f:48:7b:64:4e:f4:f4:16:75:4c:
         f1:94:33:b2:bd:62:c7:10:08:f9:49:bd:83:ec:20:8f:0c:3b:
         15:36:81:b6:26:f3:6a:bd:34:96:ce:2b:da:98:5b:11:84:64:
         e5:40:9a:60:77:8c:33:22:03:71:03:3d:72:f1:7b:c2:cf:6f:
         c6:64:d6:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----