Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
File:                     jfPflxqnyyXft8tVspyHvL4yCCk.mft (raw, json)
Hash identifier:          8ByRxPrhe5n/I4bWiOj4b6vCAQi9kXsxpbt771548Tw=
Subject key identifier:   34:58:25:B3:6F:28:BF:0A:4C:17:0C:70:03:8A:DF:6E:E3:3C:FE:2C
Authority key identifier: 8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29
Certificate issuer:       /CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
Certificate serial:       01962E61A7EBCDD62C8634C2AD6312421F6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft
Manifest number:          14ED
Signing time:             Sun 13 Apr 2025 09:01:14 +0000
Manifest this update:     Sun 13 Apr 2025 09:01:14 +0000
Manifest next update:     Mon 14 Apr 2025 09:01:14 +0000
Files and hashes:         1: 1IvUdF6sc26gQi1PrEF2at2Gu_w.roa (hash: v/QlU4UHuYWzg7iCrnrdYQGm1IMje67B6F+Jo7o9yAA=)
                          2: jfPflxqnyyXft8tVspyHvL4yCCk.crl (hash: /4RGj8ABrYJFe3S9bQRQANl1NbXTVKaN3B+BEa6KoUw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:96:2e:61:a7:eb:cd:d6:2c:86:34:c2:ad:63:12:42:1f:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8df3df971aa7cb25dfb7cb55b29c87bcbe320829
        Validity
            Not Before: Apr 13 09:01:14 2025 GMT
            Not After : Apr 14 09:01:14 2025 GMT
        Subject: CN=345825b36f28bf0a4c170c70038adf6ee33cfe2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:57:94:f6:72:6b:6a:80:38:17:3c:96:d6:20:
                    be:83:ad:0d:f6:bb:be:41:ca:11:21:35:85:99:8f:
                    b7:6a:bd:a7:8c:77:5d:80:c7:0f:5d:51:b8:62:73:
                    2f:55:a5:4b:b7:ae:f0:17:ed:99:67:b0:ec:97:a6:
                    2c:82:49:2b:2e:65:4c:0e:5a:48:e4:46:aa:f2:39:
                    08:03:22:d1:b3:60:6a:54:fa:a7:80:b8:cb:e4:96:
                    81:e7:f9:93:d3:ba:91:48:2a:bb:e5:29:f7:4d:4c:
                    6f:dd:72:4f:13:27:64:e4:6e:45:99:1c:16:aa:98:
                    95:4b:0d:b3:17:63:af:43:cb:60:3f:4b:93:38:95:
                    d7:8d:ab:73:d1:fd:75:db:ae:1e:89:22:e6:a7:4c:
                    f5:f4:ae:b0:e4:d8:e5:53:ad:95:3e:20:de:01:5a:
                    c7:89:da:8b:20:f6:3e:05:eb:59:30:8e:1b:cc:80:
                    6b:22:9a:d3:40:ab:0d:4f:15:9e:ec:62:a1:86:65:
                    d9:87:b2:e1:1c:4a:66:c9:15:8a:23:8c:7b:99:d3:
                    39:0b:65:52:77:1c:21:cf:2d:cf:df:32:17:d2:40:
                    eb:73:6a:92:ed:77:95:f7:b9:32:9b:85:5e:8b:fb:
                    2c:cc:12:82:53:ad:39:07:03:bf:36:22:e8:ec:e8:
                    ef:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:58:25:B3:6F:28:BF:0A:4C:17:0C:70:03:8A:DF:6E:E3:3C:FE:2C
            X509v3 Authority Key Identifier:
                keyid:8D:F3:DF:97:1A:A7:CB:25:DF:B7:CB:55:B2:9C:87:BC:BE:32:08:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jfPflxqnyyXft8tVspyHvL4yCCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c2ad44-fe7d-46d9-913e-c794b5f87804/1/jfPflxqnyyXft8tVspyHvL4yCCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:ca:c6:5d:f1:a3:4e:66:b8:79:75:b0:57:6c:08:33:b6:41:
         35:80:04:d0:00:58:be:1f:89:40:33:1c:b5:c1:2a:fe:06:38:
         2d:2f:4d:47:06:f9:cf:b0:21:2f:87:ae:df:3b:6e:e0:94:cb:
         02:11:7f:4a:27:e9:e8:c4:25:80:a6:a6:fc:7e:65:9b:36:a8:
         8e:d7:90:f2:9b:ef:3d:03:30:ee:d7:9a:53:24:2e:32:94:3c:
         f7:5a:f2:a1:d1:93:17:29:10:52:e5:be:b6:84:df:68:8a:00:
         34:b8:e1:c9:34:23:df:05:d7:56:6a:bc:35:28:9c:1d:42:35:
         9e:fb:87:41:12:3a:f5:79:aa:95:60:07:8c:68:2a:4f:df:f9:
         76:e9:39:17:c6:c8:8d:6b:c8:ec:4c:a5:05:d0:7f:e2:d7:f3:
         7a:59:2f:7b:5a:b5:a6:09:6f:ba:ac:70:8f:ff:7a:0c:80:a3:
         04:3e:54:a2:f8:cc:09:1b:57:67:db:13:5b:09:63:03:8a:ed:
         fa:af:5d:af:ee:6a:58:0c:f8:db:9c:ca:d2:24:66:dd:b8:8b:
         53:83:a4:86:65:7c:f7:97:a0:c2:da:f1:6c:f5:79:41:b6:dd:
         d3:66:51:65:71:5d:da:ae:24:ea:fc:74:d4:ec:8e:5f:8b:fd:
         eb:b3:18:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----