Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
File:                     jckcUL_5ygWebjiy4MfrhSpjC7o.mft (raw, json)
Hash identifier:          6Rl1i+q+sfWoqUSjZLl7PGsF0hUd6AVGYEeWkp3Vs1M=
Subject key identifier:   3D:7E:12:00:1F:B1:FC:C0:8B:D2:1D:3B:28:B8:48:1C:3D:42:0D:1B
Authority key identifier: 8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA
Certificate issuer:       /CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
Certificate serial:       01962FAB62AFED138B5310892CDA7F7D093A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft
Manifest number:          143C
Signing time:             Sun 13 Apr 2025 15:01:22 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:22 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:22 +0000
Files and hashes:         1: jckcUL_5ygWebjiy4MfrhSpjC7o.crl (hash: jpa1BIYpL88DnyPIi2LY2A1+FFRJek9h1N+L/2s6+cI=)
                          2: kPouSigkCfrRHoMg7De2TJT88UA.roa (hash: t8cgJtzKMebDlU5SK4Js6mv7oMUSZDhw9bql1pMcUmY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:62:af:ed:13:8b:53:10:89:2c:da:7f:7d:09:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dc91c50bff9ca059e6e38b2e0c7eb852a630bba
        Validity
            Not Before: Apr 13 15:01:22 2025 GMT
            Not After : Apr 14 15:01:22 2025 GMT
        Subject: CN=3d7e12001fb1fcc08bd21d3b28b8481c3d420d1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:97:51:97:65:ea:4a:e8:27:72:a1:ad:de:6b:
                    f6:2b:85:ca:66:7d:27:48:b5:d5:b9:5b:63:0a:3c:
                    e9:f6:38:66:60:7a:b7:04:03:8d:87:23:fc:a1:16:
                    3f:80:b3:5c:c9:3c:47:74:9b:95:2d:13:9b:74:95:
                    2d:21:63:00:ca:3a:e8:76:58:00:f7:ef:85:ba:40:
                    97:d8:19:0f:86:1c:11:41:9d:16:7c:0b:df:58:34:
                    fa:e1:87:8b:4f:1d:ab:b7:7c:95:22:d5:f1:f5:68:
                    29:cf:94:99:e5:c2:48:14:17:19:66:76:43:e2:a4:
                    7b:ef:86:81:d0:f7:26:58:58:b6:05:ba:95:82:8d:
                    a0:fb:59:6e:15:1e:0b:8f:90:ca:fd:a2:41:57:ba:
                    fc:d4:bb:91:97:eb:cc:35:59:37:5a:f1:c4:9e:83:
                    bc:9c:c7:e9:cc:e7:79:77:b5:7f:71:6e:10:4c:b0:
                    2f:83:0b:9a:b1:64:e1:98:1b:e0:29:a5:43:3b:b8:
                    8e:e9:cc:00:24:8a:66:8f:45:c2:3d:c4:8a:c0:65:
                    22:16:f8:3a:96:ae:d8:f7:57:42:15:7c:8e:bd:cf:
                    d7:d6:27:7b:2d:a8:3b:c2:58:37:3f:26:b1:97:44:
                    9f:d7:f9:78:e9:8f:1f:39:13:37:d2:77:07:c3:3b:
                    17:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:7E:12:00:1F:B1:FC:C0:8B:D2:1D:3B:28:B8:48:1C:3D:42:0D:1B
            X509v3 Authority Key Identifier:
                keyid:8D:C9:1C:50:BF:F9:CA:05:9E:6E:38:B2:E0:C7:EB:85:2A:63:0B:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jckcUL_5ygWebjiy4MfrhSpjC7o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c68d4d-8b64-4e75-9e54-57309df69642/1/jckcUL_5ygWebjiy4MfrhSpjC7o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:7e:51:3d:21:31:75:4b:74:76:ca:2a:04:8d:db:bb:ef:c3:
         7f:16:e7:ba:76:b7:45:7c:81:17:ca:43:f6:d8:94:9c:46:c7:
         78:47:02:9f:31:56:cd:94:cc:f1:f4:a8:c0:2a:4d:01:28:b8:
         91:59:a0:70:c4:1a:61:aa:50:46:96:d4:b1:4f:eb:36:bb:10:
         fd:32:4e:76:65:da:36:80:89:56:cb:15:ee:1d:5c:41:68:99:
         23:09:fe:40:24:b5:56:67:d8:8c:d4:2c:0c:0c:9b:22:52:65:
         b6:d7:13:58:09:a3:88:c3:98:4a:44:89:2f:49:2a:a3:ad:ac:
         7b:ef:b2:26:16:e1:53:c5:7a:06:8c:c0:4a:0a:14:e3:85:23:
         a4:2b:36:67:16:80:64:7e:17:89:98:70:16:c2:a7:b3:56:4b:
         da:39:02:e0:ae:83:30:0e:a3:15:dc:ff:f2:8c:62:28:68:7b:
         07:c6:31:f0:57:ca:25:57:05:be:19:cf:97:e0:d9:c1:2b:9d:
         70:91:ad:a3:ff:8e:f6:1c:ff:b6:0a:cf:68:0d:76:02:60:bc:
         06:14:11:c4:d8:47:76:dd:28:20:94:ee:96:e6:5f:9a:e9:3d:
         62:b0:86:11:30:7a:4b:e1:2b:f2:97:51:7b:af:09:5c:fb:00:
         fe:e5:98:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----