Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
File:                     _j0jo57TZW-aYGS2CdAqL25KOCc.mft (raw, json)
Hash identifier:          YYtRUtuExptPRHq1HI9KkcitEUFqiTLrAPp3bAXaJ+A=
Subject key identifier:   19:D6:42:D0:04:C0:1D:C6:37:7C:5F:BF:D1:B6:30:21:0B:B1:5A:4B
Authority key identifier: FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27
Certificate issuer:       /CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
Certificate serial:       01962FAB2E1B983D5B51836712B5A2DB1CAD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft
Manifest number:          03CB
Signing time:             Sun 13 Apr 2025 15:01:09 +0000
Manifest this update:     Sun 13 Apr 2025 15:01:09 +0000
Manifest next update:     Mon 14 Apr 2025 15:01:09 +0000
Files and hashes:         1: CdS0S5h1e306IjdNNYaIbNOac9U.roa (hash: ns5KjwP5PT64eyVqbgP83KTbHXq14r1yzW0yvkof0v8=)
                          2: _j0jo57TZW-aYGS2CdAqL25KOCc.crl (hash: HvIaCXaSZZeVvGnxD79NnnHiEhY0YZRl2mHRxiTtNBw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:ab:2e:1b:98:3d:5b:51:83:67:12:b5:a2:db:1c:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fe3d23a39ed3656f9a6064b609d02a2f6e4a3827
        Validity
            Not Before: Apr 13 15:01:09 2025 GMT
            Not After : Apr 14 15:01:09 2025 GMT
        Subject: CN=19d642d004c01dc6377c5fbfd1b630210bb15a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c3:59:7d:4b:dc:06:7a:1a:a6:52:68:6a:73:
                    60:26:b5:85:7f:59:d2:77:3e:ba:35:e2:69:cb:69:
                    2f:11:ce:36:46:be:17:dc:ee:9b:77:2b:98:0e:7b:
                    32:f5:9f:e3:ca:82:9d:68:02:a2:24:8b:49:cd:77:
                    15:1e:a8:31:cb:de:b0:ae:9b:15:2d:ca:7a:c6:fe:
                    a1:c8:e1:e4:39:e0:89:e2:72:d2:9e:1f:5a:6f:f1:
                    3c:a8:58:fb:a2:a6:09:cb:49:d7:76:34:b0:4a:73:
                    68:80:88:34:7c:e0:a3:f5:91:21:b8:58:5e:6f:7b:
                    a3:da:03:3d:da:62:ca:c4:ca:07:96:15:bf:b6:44:
                    d7:21:60:3c:d8:bb:67:71:9e:f8:bf:9b:fa:a5:c8:
                    bf:75:b7:2d:74:45:49:2e:ae:bb:54:9d:a5:8d:ac:
                    64:7e:b8:b8:99:3e:3f:96:9e:a9:2c:44:36:81:13:
                    8d:db:85:4e:ef:d7:b5:31:eb:cb:1b:36:7f:62:01:
                    1b:ed:14:8d:00:06:9b:3a:e8:d6:9b:92:b5:9f:a9:
                    9c:8d:9c:78:58:ad:07:52:10:5a:bb:57:da:ba:12:
                    8b:e2:05:c0:37:37:33:3f:86:df:8f:c0:0e:03:65:
                    80:d8:26:a7:e1:f8:4b:11:ab:c9:e6:af:c1:34:fa:
                    bb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D6:42:D0:04:C0:1D:C6:37:7C:5F:BF:D1:B6:30:21:0B:B1:5A:4B
            X509v3 Authority Key Identifier:
                keyid:FE:3D:23:A3:9E:D3:65:6F:9A:60:64:B6:09:D0:2A:2F:6E:4A:38:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_j0jo57TZW-aYGS2CdAqL25KOCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8e62e9-406d-4ab0-8fdb-d9a808ec1ab1/1/_j0jo57TZW-aYGS2CdAqL25KOCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:76:79:2d:44:67:e4:53:68:30:9f:42:52:22:5b:21:45:8f:
         24:8b:ab:37:12:41:e0:f3:d5:2f:e7:86:73:95:e5:77:dc:c6:
         00:bd:cd:0c:4a:af:da:22:92:0d:3e:58:23:11:3b:ea:f2:2f:
         eb:5d:06:3a:cc:ac:47:eb:9a:1b:4b:54:8d:fd:03:c2:91:e4:
         66:d6:6e:ff:74:05:3b:92:ac:10:98:fc:c4:67:7d:f0:47:b2:
         85:20:d5:e9:ba:28:c2:00:57:29:72:04:43:37:ed:87:0c:23:
         c7:7a:19:15:72:e9:ff:89:ee:94:7d:36:11:fb:a0:5b:94:0d:
         2f:62:eb:e0:b4:c3:0c:ce:75:82:90:41:ec:4f:13:c2:2f:e2:
         4d:f7:d6:7c:9f:70:59:cf:94:66:1d:ab:e8:68:27:b5:b5:ee:
         e0:0b:6c:9d:3d:33:11:47:cf:af:10:d3:6b:32:3c:07:93:f7:
         2f:a9:34:df:68:05:95:c7:5b:f9:ec:f9:f5:96:f8:86:09:7d:
         06:1c:aa:e0:a1:11:d5:5b:d4:6f:d8:52:2b:fa:4e:85:69:86:
         a0:42:ce:76:1c:1d:61:3a:c5:4c:f6:c1:46:15:a5:3b:c9:4c:
         23:fb:0f:0e:6b:5c:bf:29:93:2f:d1:68:dc:5d:50:57:bb:11:
         9f:38:bf:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----