Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
File:                     j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft (raw, json)
Hash identifier:          wKRY6U5DJJALdsnBoW/7xioLh6UnKK7uOZ/zGKcNZnw=
Subject key identifier:   C8:AF:4F:CD:5F:D4:EE:A6:AD:CB:65:5D:E6:73:E2:B2:70:8F:4A:3E
Authority key identifier: 8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32
Certificate issuer:       /CN=8fac851d9982896a765876d311b97b509357ec32
Certificate serial:       01962DF42117695CAE2D8D61126C1C5F77CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft
Manifest number:          0573
Signing time:             Sun 13 Apr 2025 07:01:35 +0000
Manifest this update:     Sun 13 Apr 2025 07:01:35 +0000
Manifest next update:     Mon 14 Apr 2025 07:01:35 +0000
Files and hashes:         1: j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl (hash: TM6gCTWVtCTd8fED0+UdD0Jve1bIBxNiR5aUUzx1Okw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2d:f4:21:17:69:5c:ae:2d:8d:61:12:6c:1c:5f:77:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fac851d9982896a765876d311b97b509357ec32
        Validity
            Not Before: Apr 13 07:01:35 2025 GMT
            Not After : Apr 14 07:01:35 2025 GMT
        Subject: CN=c8af4fcd5fd4eea6adcb655de673e2b2708f4a3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:fc:65:79:2a:bc:39:4d:2e:82:a5:40:ac:68:
                    53:ca:d9:95:65:75:cc:35:58:03:7e:aa:f2:31:8c:
                    87:a2:33:9e:bd:92:60:8b:16:32:d5:f7:d4:0a:1c:
                    56:fc:16:09:fa:61:4a:b9:5c:ef:27:d4:be:71:e6:
                    fc:21:d9:a3:60:82:c2:9b:03:47:f7:65:06:a8:20:
                    ee:fa:f8:6c:7e:fa:6c:16:a4:f5:a8:05:bc:11:96:
                    1a:97:b0:54:74:7c:11:36:a3:36:00:01:45:42:1e:
                    a1:b7:96:47:16:43:08:4c:a0:1e:a8:7b:3d:18:e7:
                    af:4d:3f:32:dc:64:73:0d:1b:65:4d:1c:18:d1:14:
                    79:4a:6e:8b:75:60:36:91:70:07:d2:40:39:cd:46:
                    05:d7:6e:14:d9:41:6b:87:ac:7a:8d:ea:d0:45:fd:
                    c3:28:18:90:c4:b0:79:9c:b7:d5:c6:10:33:c9:7d:
                    81:b3:54:f2:47:cb:ac:4b:d8:3d:ad:62:91:df:36:
                    58:80:6b:47:fe:c6:ca:83:bb:93:0c:bd:04:56:29:
                    10:2b:c9:62:5d:ef:95:bd:58:f6:ae:4b:15:01:e9:
                    2a:17:89:bf:69:0d:2e:58:33:c1:9a:a0:4d:94:f3:
                    38:6b:39:92:7d:11:a4:a6:46:f7:d3:a0:b4:b1:60:
                    1e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AF:4F:CD:5F:D4:EE:A6:AD:CB:65:5D:E6:73:E2:B2:70:8F:4A:3E
            X509v3 Authority Key Identifier:
                keyid:8F:AC:85:1D:99:82:89:6A:76:58:76:D3:11:B9:7B:50:93:57:EC:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6yFHZmCiWp2WHbTEbl7UJNX7DI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/92c9d5-5462-4190-a330-2dfc4a6f5d0d/1/j6yFHZmCiWp2WHbTEbl7UJNX7DI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ec:48:49:1b:0e:37:01:1b:00:25:f4:05:ec:07:f2:cd:7e:
         fb:5e:98:6b:fe:5c:42:8f:b9:29:f0:3f:17:2b:c9:f1:5d:98:
         1e:d8:ed:d5:49:52:bf:eb:95:e3:23:b6:e2:9c:39:f6:9d:f2:
         76:05:a3:dc:58:b7:6c:ce:b5:91:30:34:bb:8f:8a:da:77:90:
         b6:1b:88:2f:f7:3a:a8:e0:6c:32:3e:a4:77:08:58:78:7e:46:
         4e:4f:f8:78:b7:0a:9a:fb:f8:90:37:96:3b:fd:20:32:3b:22:
         05:ee:1f:82:af:33:c6:5e:2e:47:24:36:ff:9f:03:c1:0b:5c:
         ae:df:f1:16:50:c7:8e:f6:c3:5a:f9:87:27:37:8a:c7:ca:c0:
         c1:99:78:16:3d:39:61:8e:91:17:73:03:d2:e2:03:af:cd:f4:
         c1:91:f1:19:61:0e:f2:35:bb:95:10:62:9e:89:22:84:39:7d:
         9f:25:33:ed:fb:af:b1:ac:17:fa:33:17:7d:a3:a7:31:66:63:
         78:bf:1f:ab:a9:9e:f0:3e:ac:8d:29:54:8b:45:7c:2d:f7:91:
         65:ae:77:cc:bd:4a:a3:be:24:6a:83:83:88:3d:0d:92:79:ca:
         c1:24:17:e2:a9:3f:3f:48:27:9d:21:f4:37:ea:da:19:b2:7a:
         25:47:68:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----