Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
File:                     j75VTMOkMzzW2uRAdo6cO4M0S44.mft (raw, json)
Hash identifier:          gXn0Px094teCppx71lzZdzcQ5KIDCtseN1AhyKY+G9g=
Subject key identifier:   C1:15:3C:46:FC:10:00:7D:83:0A:34:07:BD:CF:1F:0E:D6:67:A8:2F
Authority key identifier: 8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E
Certificate issuer:       /CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
Certificate serial:       01962F747C6A6D94C4C460D715B0B4F7F6B7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft
Manifest number:          14B8
Signing time:             Sun 13 Apr 2025 14:01:25 +0000
Manifest this update:     Sun 13 Apr 2025 14:01:25 +0000
Manifest next update:     Mon 14 Apr 2025 14:01:25 +0000
Files and hashes:         1: j75VTMOkMzzW2uRAdo6cO4M0S44.crl (hash: 2tmO5xhtewGLuqkuaeu7Olsxn4d58PdMp+yOEho6uqQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2f:74:7c:6a:6d:94:c4:c4:60:d7:15:b0:b4:f7:f6:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fbe554cc3a4333cd6dae440768e9c3b83344b8e
        Validity
            Not Before: Apr 13 14:01:25 2025 GMT
            Not After : Apr 14 14:01:25 2025 GMT
        Subject: CN=c1153c46fc10007d830a3407bdcf1f0ed667a82f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1c:50:6f:84:ba:2b:d9:70:ec:41:55:28:8a:
                    21:04:8e:8a:77:e7:30:eb:89:90:a7:ed:a9:56:7a:
                    85:9b:12:e6:71:92:c9:3a:b0:1d:50:f1:9a:5a:e9:
                    40:d8:ee:85:59:76:c4:8e:7f:ef:6e:5b:f5:aa:44:
                    be:b3:28:f7:bf:bc:06:4e:c8:15:7c:81:16:d6:e0:
                    ae:f8:cb:41:63:30:dd:fe:04:f4:68:aa:73:f4:70:
                    9d:1a:4e:d5:6c:c7:70:c3:95:c3:b7:9d:c2:a1:69:
                    cc:f6:46:48:6a:17:d7:c9:e5:e3:4d:67:1e:34:dd:
                    aa:de:44:46:d2:d9:a2:fd:a2:b1:60:fe:a3:34:2e:
                    dc:44:b7:af:cb:8e:94:58:01:38:8f:e3:79:d6:06:
                    75:24:70:7e:9c:57:b1:0d:20:f1:4f:d5:04:09:b5:
                    cb:70:ae:f3:c2:2e:70:7a:36:f4:76:90:5a:c4:ca:
                    05:d1:c8:6d:8c:7d:b6:57:f6:3c:06:c6:6e:8a:5b:
                    16:62:34:13:c2:05:fd:39:bb:58:e4:d1:3c:d4:01:
                    8d:f7:7f:57:0e:7d:ae:ca:3d:ce:d9:ca:56:a7:77:
                    50:ad:93:68:49:0d:b0:5a:5f:bd:3b:b2:98:33:2e:
                    c6:f2:c8:98:4d:f7:63:d9:7e:f3:5e:90:18:99:f8:
                    08:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:15:3C:46:FC:10:00:7D:83:0A:34:07:BD:CF:1F:0E:D6:67:A8:2F
            X509v3 Authority Key Identifier:
                keyid:8F:BE:55:4C:C3:A4:33:3C:D6:DA:E4:40:76:8E:9C:3B:83:34:4B:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j75VTMOkMzzW2uRAdo6cO4M0S44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/87f1da-67f4-4254-994e-4ea1de702528/1/j75VTMOkMzzW2uRAdo6cO4M0S44.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:30:b2:46:da:45:f0:c2:49:af:10:e3:2b:79:14:8d:d9:1c:
         5a:d3:ee:bf:51:04:90:33:25:3b:08:d1:34:06:93:9c:b8:20:
         6b:85:9f:98:df:51:3f:53:06:f2:4f:4f:fa:e0:74:2c:56:1e:
         e7:93:24:21:ff:f4:da:9f:2a:60:ae:02:a4:fb:8c:c6:07:fc:
         1d:d6:5b:c8:e7:d5:10:00:ee:10:31:61:a3:a9:eb:50:c3:28:
         59:20:6e:21:04:9f:0a:31:16:8e:c8:d9:f8:a2:be:28:2c:72:
         9e:d8:cf:8f:d1:51:14:f4:2c:87:85:a1:86:14:e5:c1:fa:fe:
         d1:28:18:12:f8:05:e1:47:f6:4b:52:0b:ca:cb:7e:66:3d:97:
         5a:bd:21:c8:51:65:b5:e2:69:d2:91:6c:52:15:fe:be:fd:8d:
         30:e6:fd:1d:76:26:5d:c6:96:88:13:b1:e0:c1:c3:7b:35:91:
         d1:ee:2a:01:6a:ab:5b:44:20:1a:77:e9:ea:fa:ff:eb:19:fe:
         41:13:68:05:28:34:c4:f6:fd:96:bc:cc:7b:23:a7:8e:5e:a2:
         6a:34:3f:67:79:02:50:13:0e:c8:21:9f:ef:87:ee:6d:27:6b:
         a3:62:2c:13:a0:df:97:53:29:29:d5:08:0f:88:ee:fc:30:b7:
         c4:67:50:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----