Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
File:                     rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft (raw, json)
Hash identifier:          UyaMGjs0qAp/sUexagE2nI0Bm+IbH/0NLuzyx/bUy/8=
Subject key identifier:   EC:52:8F:AD:BD:EF:E6:3C:9C:BC:9F:F0:58:65:3F:F5:90:95:96:D3
Authority key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
Certificate issuer:       /CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Certificate serial:       01962F3D6B8017E282807CEDE0DE5E6B7E45
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
Manifest number:          1108
Signing time:             Sun 13 Apr 2025 13:01:16 +0000
Manifest this update:     Sun 13 Apr 2025 13:01:16 +0000
Manifest next update:     Mon 14 Apr 2025 13:01:16 +0000
Files and hashes:         1: rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl (hash: osMxMUkvyIuuaQZpxOhSnV5alPYFW7QthFQUeNO+yLo=)
                          2: w5lUFfISkdR1rbXpw9EFPEpBgSE.roa (hash: aLxhVjIpLB1JtYTTNVzOUaAGXHTvMRlaiMUbkJdp7PY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:3d:6b:80:17:e2:82:80:7c:ed:e0:de:5e:6b:7e:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
        Validity
            Not Before: Apr 13 13:01:16 2025 GMT
            Not After : Apr 14 13:01:16 2025 GMT
        Subject: CN=ec528fadbdefe63c9cbc9ff058653ff5909596d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:40:6b:32:d3:79:e8:b3:4a:21:a2:5d:7d:76:
                    d6:48:c4:b2:6f:5d:72:18:9e:46:f8:af:da:af:c4:
                    16:b2:31:02:f4:42:bf:42:95:ab:7e:a7:94:ca:78:
                    71:8a:a6:9a:9c:d3:8e:68:14:01:b5:b7:7d:57:81:
                    0a:c2:e3:60:aa:91:e0:fd:70:df:8c:ed:ba:91:d1:
                    f5:fb:37:4e:2a:99:3f:26:38:6c:85:0f:10:ea:ff:
                    df:a4:f6:7f:b9:92:d5:6c:f3:52:a1:63:67:c8:a1:
                    e2:a2:f2:f2:f5:86:57:37:a1:ff:c2:2e:68:e0:7d:
                    74:0f:1d:30:a3:cb:0f:6b:60:c3:8c:d9:6f:5e:35:
                    2d:28:98:dc:8d:54:ea:b6:28:1b:2b:9c:6b:b6:e5:
                    00:73:87:98:1a:50:2b:16:67:66:72:dd:50:43:b0:
                    47:0a:ae:82:cb:b9:f7:e5:c0:ea:98:e6:29:6c:e2:
                    0b:12:ee:50:bd:fe:67:e1:21:81:5b:84:fe:07:1d:
                    8f:3e:a7:ba:10:63:35:48:c6:00:b2:5f:41:7e:be:
                    3b:01:1c:73:49:d2:9d:31:32:9a:98:d4:84:3a:4a:
                    1d:4e:1a:ea:91:ef:c1:4c:d9:b2:84:9b:f1:0f:6a:
                    95:7b:69:dd:1f:fc:7f:22:01:5f:0a:c7:a2:37:5c:
                    9c:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:52:8F:AD:BD:EF:E6:3C:9C:BC:9F:F0:58:65:3F:F5:90:95:96:D3
            X509v3 Authority Key Identifier:
                keyid:AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:00:7c:2e:55:19:91:df:1d:c8:86:0c:86:41:73:d5:44:04:
         e0:75:e2:ab:68:17:aa:21:d0:d4:9a:a4:6a:0b:ce:9a:95:e4:
         30:65:f3:23:00:8e:66:3f:cd:92:ec:54:4c:21:83:40:0b:a2:
         63:e4:17:25:97:e3:48:25:bd:27:a8:78:f6:5c:28:b3:9a:c3:
         14:40:d9:8c:9f:fd:f6:41:48:0b:fc:fd:ac:6e:3e:40:e0:a3:
         82:8a:b1:0f:34:83:8d:d8:b1:7f:62:86:0f:5f:8e:00:7b:3d:
         43:26:78:54:b5:ff:0d:16:96:e5:c0:13:15:d8:eb:22:28:a7:
         49:7c:2a:11:17:bf:01:2a:39:12:f8:83:59:34:28:f8:f4:9d:
         f1:ae:c5:05:9d:60:d0:95:a4:98:70:a8:1d:b6:ce:f7:db:c9:
         dd:5b:e8:ec:03:f9:25:ff:fc:88:c6:83:cb:ee:75:40:af:d6:
         29:4a:a8:2b:5c:f4:34:e8:c4:e7:ee:dd:62:b7:11:60:1c:9c:
         65:6c:0a:23:00:90:06:59:21:be:1d:5a:33:cf:01:3e:1d:a2:
         45:46:55:b2:43:2a:03:58:d9:75:1c:af:d9:ba:4d:bb:af:4a:
         74:96:c1:32:30:cc:8f:9b:7e:c9:43:f1:3e:15:77:d2:31:9a:
         eb:c4:dd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----