Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
File:                     jHSEmpcKkwTfRfjii264f_CeC-o.mft (raw, json)
Hash identifier:          utfHba8FcZFFEXaTJGaLexgHQxIe3zjDoEwJRH2jdBs=
Subject key identifier:   4F:B1:5F:77:44:78:04:D8:27:5E:56:9D:2A:5F:8E:A5:69:73:0F:DB
Authority key identifier: 8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA
Certificate issuer:       /CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
Certificate serial:       01962F749E99FB92E033B1192B30EA726F01
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft
Manifest number:          0712
Signing time:             Sun 13 Apr 2025 14:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:33 +0000
Files and hashes:         1: Irr-r9qiqixIuYCUoqwg3jTCOlQ.roa (hash: Da8fMzEd6ZdZtBJZunslR4v5JrpLeUfmPOL3PB5KGc4=)
                          2: jHSEmpcKkwTfRfjii264f_CeC-o.crl (hash: iV7jQQyTf9YVoxcd2AYDVwQzqY5KI2YMcp5DJhzcsK0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:9e:99:fb:92:e0:33:b1:19:2b:30:ea:72:6f:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c74849a970a9304df45f8e28b6eb87ff09e0bea
        Validity
            Not Before: Apr 13 14:01:33 2025 GMT
            Not After : Apr 14 14:01:33 2025 GMT
        Subject: CN=4fb15f77447804d8275e569d2a5f8ea569730fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:91:9c:bf:74:59:66:f0:5c:d0:a1:76:cd:a4:
                    60:d1:f3:57:f1:94:ed:2d:46:a7:c0:bf:ec:ab:da:
                    0d:60:12:81:b1:2a:f3:e7:f7:ed:2e:e0:26:86:51:
                    22:c9:db:54:b7:48:f7:52:70:db:41:ba:60:78:c4:
                    33:9d:b2:1c:38:62:c2:ce:57:47:71:a5:09:39:96:
                    ef:39:c4:5b:a4:02:8e:6c:83:9e:cd:bb:0a:2a:0a:
                    03:fa:ec:50:88:6c:36:8c:d6:99:b9:dd:ac:e3:d2:
                    a5:17:9f:ce:b6:8f:da:d2:41:48:63:4a:81:9d:5a:
                    17:d7:10:9c:f1:36:f2:2f:1c:a9:21:7e:c7:08:b3:
                    22:06:32:4d:50:7d:99:cd:f3:7c:76:80:bf:22:91:
                    08:d3:e3:37:66:b5:5b:64:f1:0b:65:e2:90:b0:fe:
                    aa:84:f4:c3:2d:21:74:fd:16:b7:46:86:04:35:d0:
                    81:53:c7:e6:9f:0b:ef:b2:c2:10:b4:46:16:84:4c:
                    9d:ff:6b:44:90:be:5c:5b:2e:66:4e:00:2c:eb:48:
                    0f:20:89:81:cf:f4:d9:9d:14:d1:a4:a6:35:d6:d7:
                    dd:5f:1f:0a:2a:fa:1a:3f:3e:1b:70:69:61:4e:03:
                    0d:03:d1:e4:dc:d4:43:0e:d0:68:e0:b5:61:06:c1:
                    aa:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B1:5F:77:44:78:04:D8:27:5E:56:9D:2A:5F:8E:A5:69:73:0F:DB
            X509v3 Authority Key Identifier:
                keyid:8C:74:84:9A:97:0A:93:04:DF:45:F8:E2:8B:6E:B8:7F:F0:9E:0B:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jHSEmpcKkwTfRfjii264f_CeC-o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/2cb95d-8f0c-42dd-91b9-29ffd0ef560a/1/jHSEmpcKkwTfRfjii264f_CeC-o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:05:ba:95:31:b4:c8:28:05:d6:ec:54:34:96:a6:2e:3e:46:
         40:a0:3f:92:2d:7f:d2:1c:f1:7c:c5:2f:0c:66:51:09:b4:40:
         58:e7:57:c6:e2:4a:25:50:61:be:49:ff:c1:ea:c0:b4:2f:01:
         a6:d4:d3:01:7a:0d:16:6a:56:bd:c1:0f:b9:5b:c8:bb:26:d1:
         c7:09:c0:03:d0:58:8b:c6:b2:ae:30:c3:66:1c:fd:fd:e4:09:
         35:73:f1:0e:20:61:11:76:2e:5b:82:55:62:93:5f:3d:df:72:
         cc:99:3a:14:f6:37:24:7c:5a:6e:c6:a6:a9:63:3f:c7:8b:f3:
         ab:5b:73:7f:e7:b1:b4:62:75:10:27:fe:81:05:50:45:ef:2d:
         25:e1:d3:f7:6d:48:a4:fd:64:3c:56:09:49:d2:46:aa:20:54:
         ed:28:63:4d:95:05:36:ca:6c:d8:0b:63:4e:5b:00:4d:38:11:
         f0:82:b4:5d:2b:61:2d:2c:a4:0c:9a:95:3a:e3:91:fc:93:45:
         a5:0a:d6:bd:64:10:8f:be:22:8f:ce:de:7b:54:11:7f:9a:09:
         8b:7b:e1:f7:e7:67:8a:19:72:67:72:c5:e5:e8:76:ce:c3:8e:
         00:71:e4:24:e7:5e:cf:59:a6:7f:36:19:c4:c5:62:18:fb:e4:
         6b:e2:43:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----