Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
File:                     jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft (raw, json)
Hash identifier:          z1hQkPDCi8MWjQO9OuqmLIiGMeLN2oukB63sYfl2HWc=
Subject key identifier:   C8:E0:24:B4:21:2C:8A:49:AB:FB:E0:2A:B8:2E:18:01:78:7B:0C:55
Authority key identifier: 8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
Certificate issuer:       /CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Certificate serial:       01962E99496A900B9951EC5F0F6E0DBB2967
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
Manifest number:          0704
Signing time:             Sun 13 Apr 2025 10:01:59 +0000
Manifest this update:     Sun 13 Apr 2025 10:01:59 +0000
Manifest next update:     Mon 14 Apr 2025 10:01:59 +0000
Files and hashes:         1: jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl (hash: L+VyASlvUwzpPWfuYX7ImzJ6HSRZU7x5qb+xCk0/uOo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:99:49:6a:90:0b:99:51:ec:5f:0f:6e:0d:bb:29:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
        Validity
            Not Before: Apr 13 10:01:59 2025 GMT
            Not After : Apr 14 10:01:59 2025 GMT
        Subject: CN=c8e024b4212c8a49abfbe02ab82e1801787b0c55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0c:24:26:e8:1d:65:ca:ab:ec:d5:7b:2c:79:
                    34:a9:9a:9e:8d:e1:8a:24:b0:81:7e:19:14:68:30:
                    5a:59:73:34:d2:59:fc:72:01:b9:79:19:1c:a7:9c:
                    f8:ef:4a:d2:5f:a2:85:cb:59:70:65:52:24:03:b4:
                    df:a0:30:07:24:b9:b8:1a:1f:60:e5:be:31:91:00:
                    30:12:d4:bd:38:18:09:c1:04:0c:da:14:7e:67:e8:
                    01:67:06:b0:b9:e8:2e:80:91:c8:d3:f8:38:65:a6:
                    37:c3:bb:eb:05:d7:90:ff:b2:45:0e:36:69:b9:a8:
                    36:49:4b:15:81:cc:aa:6c:e3:c4:7c:60:56:14:95:
                    db:12:8a:9e:9b:0e:81:90:59:16:d3:03:f8:15:6c:
                    e7:06:36:bb:c1:5c:4d:c9:6a:55:cd:3b:6f:4b:66:
                    ec:3c:bc:ab:36:c7:7d:e5:4f:aa:78:45:f3:e7:6f:
                    3d:e3:33:f8:76:a3:e4:25:62:1e:77:47:fd:70:50:
                    37:79:b8:25:ec:52:85:24:20:64:1a:41:62:38:72:
                    f2:e7:38:bf:0f:60:7a:a0:4c:b3:63:62:f0:87:e1:
                    6a:c6:3c:5b:87:bc:2f:7b:0c:58:d1:0e:2b:f8:90:
                    6d:50:33:7c:f3:ef:40:e8:dd:8f:4f:72:1d:03:84:
                    a8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:E0:24:B4:21:2C:8A:49:AB:FB:E0:2A:B8:2E:18:01:78:7B:0C:55
            X509v3 Authority Key Identifier:
                keyid:8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:1c:1e:6f:12:ae:10:c2:50:16:4d:0f:9e:8e:62:88:09:1e:
         38:f9:4d:dd:7f:17:24:cb:29:17:a2:b2:1d:27:cc:4f:fa:94:
         19:22:de:72:fa:56:6c:b9:58:7d:96:e1:1a:3b:bb:2a:e7:73:
         ef:8b:04:a6:36:36:c2:70:c2:85:e5:ec:36:25:85:e4:52:c1:
         f9:99:20:99:e1:38:97:d0:01:3f:71:44:6a:ad:b0:e7:9c:cd:
         39:06:cc:9b:a4:2a:25:1f:1c:03:c3:3a:21:75:14:5d:7a:b0:
         ab:c5:f6:72:c1:38:d3:3b:3e:6d:f9:55:8a:1e:ed:36:99:ba:
         51:02:d7:2a:97:6c:8c:23:8b:5b:4e:90:29:30:1e:85:6f:1b:
         35:ec:0a:6b:89:a5:9f:4d:a5:a4:71:cb:40:64:36:f1:8b:2c:
         c3:cd:3d:cc:37:8a:db:61:8f:4e:14:5e:4e:81:d2:55:b2:7e:
         db:3c:a2:4f:a3:52:34:cb:27:c5:7b:8e:b2:cb:fd:ee:fd:30:
         fc:ac:d0:23:50:8d:65:25:9f:c5:98:99:31:26:bf:fa:66:ad:
         59:d1:34:b2:24:b4:51:6f:51:2b:cf:dc:ad:4c:9c:56:f5:27:
         af:07:c7:c3:62:b0:9b:2c:1b:f8:fa:23:68:0d:40:7d:42:e5:
         45:70:e0:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----