Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
File:                     Jo9QG7-eE83S64mdlxIfZpqikTU.mft (raw, json)
Hash identifier:          3QDqeuz5/t3lSIY5Anqw/14hRBDoGunBIqpBA5v3ou0=
Subject key identifier:   0D:7D:84:52:A3:96:5A:91:28:9F:84:EB:C6:4F:92:6C:A0:CC:2D:0B
Authority key identifier: 26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35
Certificate issuer:       /CN=268f501bbf9e13cdd2eb899d97121f669aa29135
Certificate serial:       01962ECF7D6970A46B0F9900E67E175A2C43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft
Manifest number:          1411
Signing time:             Sun 13 Apr 2025 11:01:12 +0000
Manifest this update:     Sun 13 Apr 2025 11:01:12 +0000
Manifest next update:     Mon 14 Apr 2025 11:01:12 +0000
Files and hashes:         1: 4XFlits89wxyHX1vn5VHIsNuyKg.roa (hash: BT2LxZu3wA5VCThqQPlS1bE8oOkqeH9p+4dqdYk4cGk=)
                          2: Jo9QG7-eE83S64mdlxIfZpqikTU.crl (hash: 5J6XHHo+suaDwQncn6OqErw2TZrSMBaWSKP/lJERNBg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:cf:7d:69:70:a4:6b:0f:99:00:e6:7e:17:5a:2c:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=268f501bbf9e13cdd2eb899d97121f669aa29135
        Validity
            Not Before: Apr 13 11:01:12 2025 GMT
            Not After : Apr 14 11:01:12 2025 GMT
        Subject: CN=0d7d8452a3965a91289f84ebc64f926ca0cc2d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a0:f5:20:42:ae:b1:b7:0c:6e:2e:37:3a:36:
                    f4:b2:08:2c:4d:4b:24:b6:6d:bb:94:45:02:07:f9:
                    80:25:f4:a5:65:2a:52:5b:16:65:f4:41:17:97:10:
                    8f:47:f0:40:39:b6:a4:a4:51:81:c7:3e:10:00:2e:
                    8c:b8:72:19:c3:75:85:43:d3:cc:a8:b6:f3:97:54:
                    0e:51:7c:f7:89:a0:cc:19:39:8f:2b:aa:76:11:72:
                    08:b0:73:e3:d6:f2:6f:41:dc:b5:aa:9c:80:b0:96:
                    11:8e:c3:50:c8:fb:fa:ad:f2:12:10:d0:76:31:92:
                    f2:16:9f:71:32:e0:f4:93:13:17:a7:8b:f5:db:4f:
                    d3:6e:9b:09:7b:d8:42:6a:b0:99:7d:1b:8a:a1:f9:
                    37:4b:16:42:09:88:f7:65:3f:e4:40:22:fb:18:bb:
                    4a:50:37:f8:2b:0c:77:d0:f6:77:71:4c:42:63:04:
                    7e:4b:5b:1b:97:9a:b9:e0:67:e0:e6:3d:53:9d:42:
                    f6:84:56:a7:d3:fe:75:73:8d:b3:44:0f:9b:eb:af:
                    c0:e4:04:dc:3e:9d:66:78:88:fe:28:65:b5:a4:7b:
                    15:8f:f0:29:a5:93:9b:a2:4e:50:d6:5f:a1:9c:0f:
                    1e:2f:a2:7a:b9:27:3b:96:b9:8f:8b:b6:89:66:ef:
                    e2:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:7D:84:52:A3:96:5A:91:28:9F:84:EB:C6:4F:92:6C:A0:CC:2D:0B
            X509v3 Authority Key Identifier:
                keyid:26:8F:50:1B:BF:9E:13:CD:D2:EB:89:9D:97:12:1F:66:9A:A2:91:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jo9QG7-eE83S64mdlxIfZpqikTU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/6d7f0d-7e4e-47d6-b9db-ca0c772b729f/1/Jo9QG7-eE83S64mdlxIfZpqikTU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:25:c6:9d:f4:94:7a:99:d2:bd:2a:d9:be:4a:ff:99:71:a6:
         93:9e:1b:50:d9:9f:f4:e7:1d:81:08:54:58:46:39:79:32:d6:
         aa:be:24:33:c8:1b:b7:52:63:10:da:fc:54:55:bf:05:3c:c1:
         29:90:a7:50:43:c8:86:b8:1a:de:fb:5e:54:b0:86:0f:64:cf:
         6a:ac:2e:ec:40:67:dc:98:3f:fa:fb:c9:d9:54:49:a0:b5:d6:
         1d:83:21:4a:50:38:3e:6a:d3:5a:35:1f:e9:e6:26:74:79:ba:
         b8:df:58:cd:02:6f:82:f4:de:b4:e9:c6:6e:79:aa:63:aa:cb:
         a8:6d:3d:e2:25:e4:be:06:e4:dd:4a:f7:7b:60:dd:70:10:82:
         ff:af:42:7d:80:e8:c0:f8:a9:ab:94:1b:2f:35:1f:3d:fc:aa:
         9e:57:cb:b1:c1:6a:08:69:2c:fe:45:01:95:99:a4:f7:cc:1e:
         40:7a:52:e6:4d:bf:44:10:84:7e:a3:58:a9:37:ad:b2:29:41:
         86:8a:97:3d:1f:bd:b7:f1:e0:29:9d:10:03:10:9c:86:4d:6f:
         34:24:62:65:e6:b1:ed:58:9c:a7:ac:45:ca:b9:4d:7c:bc:3c:
         f5:99:17:16:c0:74:36:9f:5d:37:29:21:f7:b4:53:30:27:35:
         3b:45:e7:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----