Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
File:                     jK0wO8cLEvg9v4n8FInLRhLPVSY.mft (raw, json)
Hash identifier:          XjH6csOoekHNGAg6A2Qxt0KdaZVdryT2YYpFA3RHjxQ=
Subject key identifier:   41:D7:36:DE:4E:BA:FA:EC:56:B7:6E:BC:CD:4E:24:BB:CB:54:36:7E
Authority key identifier: 8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26
Certificate issuer:       /CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
Certificate serial:       01962F74B1FBD067C74E801B49C353F2AC07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft
Manifest number:          0144
Signing time:             Sun 13 Apr 2025 14:01:39 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:39 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:39 +0000
Files and hashes:         1: EZBWVER6RlsPS5zwpSfeXDYY4_4.roa (hash: TmP6HB2vfugTxNqU8/mbrbGgjAkZNuZVMOPZ6v4m2ZU=)
                          2: UWM-Kz1OP0UjWcYPffeOWK62TZs.roa (hash: lnPff/3R3t0peMh+icEOeZMrkDG2dfoemotH4CHOKR8=)
                          3: jK0wO8cLEvg9v4n8FInLRhLPVSY.crl (hash: 96BQp+xV1l9CzI6cjnY6ViYbO7+R88oAdlBPyaryd8k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:b1:fb:d0:67:c7:4e:80:1b:49:c3:53:f2:ac:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8cad303bc70b12f83dbf89fc1489cb4612cf5526
        Validity
            Not Before: Apr 13 14:01:39 2025 GMT
            Not After : Apr 14 14:01:39 2025 GMT
        Subject: CN=41d736de4ebafaec56b76ebccd4e24bbcb54367e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:af:99:6e:e9:ad:d1:b1:ed:c6:ea:58:a0:53:
                    c8:e9:68:fe:ac:9e:f9:4d:82:5f:e3:7b:4a:b4:89:
                    c9:e7:8f:b9:13:60:97:80:5d:a6:e9:b7:b0:4c:52:
                    b4:af:91:eb:e2:a6:b2:3b:30:60:df:ee:71:34:7b:
                    ce:07:cb:a4:23:44:8b:68:51:a2:a1:e4:de:85:02:
                    a5:a4:fc:cb:bb:ba:1e:eb:46:bf:58:b6:ec:48:e8:
                    d4:26:34:81:ca:cb:e2:88:d0:d9:04:a8:f5:a2:43:
                    76:cf:b8:8f:70:c1:de:18:b5:94:19:f0:a8:26:84:
                    5d:f9:47:f5:17:5a:0e:60:21:64:79:53:5e:fd:2d:
                    12:84:55:6c:b6:ff:45:5c:7b:59:32:0e:d8:96:99:
                    e7:72:83:c6:a8:9d:c5:25:76:c3:43:43:9f:9c:23:
                    4a:02:a2:f9:40:48:ee:3c:bf:69:ea:ba:4c:7d:84:
                    6e:d2:2a:cb:58:e9:a4:e1:70:2b:86:c0:00:29:5c:
                    3a:f1:08:59:6a:96:93:9d:e0:6a:e9:43:d7:a9:18:
                    4c:1c:cc:04:fd:22:1e:c9:54:fd:5a:c8:f4:2d:35:
                    70:45:f4:c8:04:0f:6c:e5:9a:54:af:7f:79:ab:8c:
                    06:ce:e7:82:81:1f:5c:b9:28:65:8b:34:d5:58:41:
                    e1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D7:36:DE:4E:BA:FA:EC:56:B7:6E:BC:CD:4E:24:BB:CB:54:36:7E
            X509v3 Authority Key Identifier:
                keyid:8C:AD:30:3B:C7:0B:12:F8:3D:BF:89:FC:14:89:CB:46:12:CF:55:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jK0wO8cLEvg9v4n8FInLRhLPVSY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1d3f9e-9a6c-4c86-a036-482555452831/1/jK0wO8cLEvg9v4n8FInLRhLPVSY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:09:33:62:b4:47:eb:ec:86:ac:bc:a6:af:17:26:07:36:b9:
         64:45:a5:ef:ad:dc:9f:86:95:92:1b:65:41:3b:d4:f0:fa:62:
         30:23:78:19:5e:47:36:7f:06:1c:6f:a2:c8:8d:70:e9:ab:77:
         fd:8f:34:e1:9b:26:75:5c:0a:20:40:72:5f:38:02:32:e5:59:
         b3:1e:71:b9:84:53:e1:14:e7:4a:9d:7f:3f:ff:53:14:49:eb:
         86:23:be:f8:56:7f:1d:5f:f0:f7:6a:17:04:13:ea:a1:ed:d0:
         e0:09:e6:df:9c:02:d5:69:84:7c:fb:0a:b4:f0:a7:09:22:32:
         22:71:fe:88:53:30:e4:8e:b6:15:2c:44:d2:56:33:0c:54:93:
         83:e0:2c:39:08:52:30:c2:8a:78:5e:da:de:63:18:e9:e2:68:
         fa:12:41:87:95:31:58:76:aa:77:05:d9:d0:4a:fc:b0:4e:e4:
         ff:7c:0d:2a:4c:08:8e:7b:4f:f0:9c:c7:a9:84:a5:10:ca:72:
         0b:87:0b:a8:63:92:b0:54:6c:80:b9:48:c3:2e:b4:d7:9e:03:
         60:18:6c:65:73:fa:54:76:ee:96:e5:27:b0:25:17:d9:b9:03:
         59:ff:7b:dc:20:10:c8:48:a9:41:2c:77:af:83:25:69:40:e5:
         8e:69:8c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----