Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
File:                     jX-qW7mz6kATfbhsQHL84Vj2pc8.mft (raw, json)
Hash identifier:          dz16W4iMBVAyWU8QJbCbl5t22mh2J9X8gGtdi4c/zTw=
Subject key identifier:   66:5C:41:DC:21:36:E9:68:57:97:A4:62:BA:EE:02:9C:85:88:68:70
Authority key identifier: 8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF
Certificate issuer:       /CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
Certificate serial:       01962E2B04D7457BD508D5CDA32836FECB76
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft
Manifest number:          0A1A
Signing time:             Sun 13 Apr 2025 08:01:33 +0000
Manifest this update:     Sun 13 Apr 2025 08:01:33 +0000
Manifest next update:     Mon 14 Apr 2025 08:01:33 +0000
Files and hashes:         1: hhrm1Em1WlxZZH38Jm2yxN4no3I.roa (hash: 3IW1YAxLQw3KLIWXwxwYcOQuTgohlVo0d+wGlA+Yr7I=)
                          2: jX-qW7mz6kATfbhsQHL84Vj2pc8.crl (hash: Nf6Tb/mzJC6I7/SlWqY4NjdXveO6wIsUArm6YUq3fPI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:2b:04:d7:45:7b:d5:08:d5:cd:a3:28:36:fe:cb:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d7faa5bb9b3ea40137db86c4072fce158f6a5cf
        Validity
            Not Before: Apr 13 08:01:33 2025 GMT
            Not After : Apr 14 08:01:33 2025 GMT
        Subject: CN=665c41dc2136e9685797a462baee029c85886870
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:aa:46:ce:04:c4:c8:0a:fe:c1:e5:b0:21:8e:
                    6d:56:18:f9:a0:6d:c2:e7:1c:bc:64:f7:76:c2:33:
                    86:4b:a2:37:d5:e1:f3:02:85:a4:f9:c0:1d:a4:ef:
                    71:2b:2c:1b:54:9c:31:87:9e:7f:d6:c8:d0:01:3c:
                    56:91:ea:ef:5c:d7:1e:80:49:41:57:3e:d3:db:1d:
                    59:6c:17:41:e5:d3:43:d3:7a:9d:17:9b:af:f3:8e:
                    ae:be:42:1b:1c:42:2a:21:35:4a:e0:dc:32:ce:92:
                    5e:e5:6d:64:48:5d:3b:08:70:17:ff:59:2b:08:d9:
                    1f:6c:87:9c:3b:f9:0e:c2:40:b3:45:48:8e:1d:9b:
                    07:f4:0b:92:ec:d0:69:98:75:bc:9b:ad:4f:17:e9:
                    d3:c3:99:2f:db:53:9e:81:f9:fa:5a:8c:56:76:e6:
                    5a:af:4f:86:91:27:77:b9:8c:f8:f5:7b:b5:a8:05:
                    ef:9f:d9:ac:8b:d4:44:d3:86:94:b7:a1:14:5e:ca:
                    b4:c5:fd:c2:72:30:bd:f5:cd:a7:04:74:ce:a9:53:
                    ee:95:df:0c:5d:29:84:a4:9d:bc:bc:0c:b2:19:03:
                    6f:c1:b2:f4:f9:e9:ba:e3:b9:8a:df:49:d6:fb:3f:
                    e1:84:f7:c7:7d:84:71:a0:89:36:ec:a4:70:58:cb:
                    fd:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:5C:41:DC:21:36:E9:68:57:97:A4:62:BA:EE:02:9C:85:88:68:70
            X509v3 Authority Key Identifier:
                keyid:8D:7F:AA:5B:B9:B3:EA:40:13:7D:B8:6C:40:72:FC:E1:58:F6:A5:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jX-qW7mz6kATfbhsQHL84Vj2pc8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/3bf23a-904c-4e4f-9f02-f999e1beb961/1/jX-qW7mz6kATfbhsQHL84Vj2pc8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:ec:ad:a3:20:5c:58:49:41:5e:75:10:96:ac:2d:3b:8e:aa:
         c7:52:db:b1:11:e0:c2:08:4a:97:6b:1c:91:d2:df:66:fa:c5:
         f3:c0:2e:f6:97:3a:80:06:a4:00:ec:b3:06:ae:ef:55:9a:f9:
         7d:30:00:bf:74:f9:75:ff:95:8e:88:01:81:00:a1:7c:e1:93:
         8d:5b:c1:1b:48:d1:1b:aa:78:6a:47:ef:ff:0a:80:4a:3f:59:
         d8:d1:3d:43:fa:a4:35:9f:d9:ae:d4:e2:7b:cd:2d:54:32:b9:
         4f:7b:bd:9a:73:ca:8a:52:d6:f7:b4:94:1f:07:e0:74:11:8a:
         6a:6d:54:1e:12:b7:cd:60:3f:78:42:8f:2c:d5:04:34:7d:bd:
         33:ea:5f:db:1a:d0:be:f1:95:57:18:aa:bf:7d:30:33:c2:46:
         ed:42:ee:0f:aa:aa:17:cb:03:f0:e5:b8:2f:42:d0:2b:d2:f7:
         61:78:2c:b9:ee:cb:a9:5e:ab:13:59:43:31:1a:a4:d3:80:af:
         2f:ec:7f:44:75:03:a7:eb:b3:23:56:43:f5:4f:f7:0b:6b:44:
         cb:0a:d8:39:b6:82:ac:90:0a:79:73:2f:85:19:a7:52:27:99:
         30:12:47:f8:aa:e7:24:d0:29:ad:9f:6b:8a:25:35:da:5f:f2:
         73:f5:ec:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----